Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: KmVqg6vWaumTMFZiKSw9qrNrfD/dXvXrugJGOnu8UzI=
Subject key identifier: 8B:F3:30:7E:56:C0:29:58:1F:81:5D:50:C3:0B:0A:A7:ED:40:8B:0D
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 0199FAA12AD22E4DC23F7ADAF64ED63D0549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 10B5
Signing time: Sun 19 Oct 2025 04:01:30 +0000
Manifest this update: Sun 19 Oct 2025 04:01:30 +0000
Manifest next update: Mon 20 Oct 2025 04:01:30 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: kLd3QPhOT/kJNMqm7jp+uaxysbZg8BaORGTA6Fcl11g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2a:d2:2e:4d:c2:3f:7a:da:f6:4e:d6:3d:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Oct 19 04:01:30 2025 GMT
Not After : Oct 20 04:01:30 2025 GMT
Subject: CN=8bf3307e56c029581f815d50c30b0aa7ed408b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:7e:db:35:c2:08:6d:a3:bc:3b:1f:59:31:
1c:44:b6:24:9a:40:2d:81:22:50:9f:0c:89:0c:1d:
59:56:45:cf:01:53:48:52:30:8b:df:24:86:87:6d:
57:d0:a5:1d:15:ae:af:bc:b9:16:11:a4:c9:49:d6:
a7:b0:fb:17:d2:7a:3f:50:5a:a3:8d:7c:4b:dd:e5:
96:f4:f5:24:b2:50:29:65:19:5e:76:02:ed:af:98:
5c:a0:6a:77:11:99:5f:7a:49:79:1e:94:d7:c9:16:
61:64:0d:e8:05:53:7b:7e:b2:ea:28:d8:09:5c:af:
d7:ae:ba:99:ec:ed:cb:ff:38:15:5e:1b:c4:ec:87:
96:bb:4f:eb:9c:87:71:da:94:dd:b4:1a:2d:2c:9c:
43:c0:d4:62:dc:bc:2e:79:99:5e:d2:7f:4a:d3:11:
b9:73:0b:11:ca:2c:1f:ef:5b:85:bd:86:ff:b4:88:
2d:bf:09:78:aa:04:48:77:6c:90:29:de:93:81:5e:
46:8e:2d:2d:82:e8:2a:49:81:8c:fb:53:a4:e9:59:
fb:25:77:c5:ae:bc:81:41:c8:88:b6:c6:7a:c8:8a:
f8:20:bd:9f:7d:94:9d:f7:59:72:4a:9f:f8:91:d1:
80:0d:5a:61:e2:86:82:c2:f7:e7:da:03:40:d9:ce:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:30:7E:56:C0:29:58:1F:81:5D:50:C3:0B:0A:A7:ED:40:8B:0D
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:cd:8b:4b:1a:4d:3e:2b:11:8f:81:75:02:1e:d8:62:9f:
dd:44:f9:e2:64:92:60:40:06:30:a5:8f:34:68:2e:2a:da:d1:
36:78:62:f8:1a:69:b7:7d:88:27:96:fa:0b:78:9e:4b:49:4b:
a6:be:5b:dd:dd:bf:c9:0a:30:a4:40:f6:9f:c0:d9:a0:a3:2b:
95:79:86:f3:8c:57:28:5d:4b:be:0a:4c:ef:04:14:c2:90:22:
ff:11:55:b6:de:b9:bd:99:14:fc:45:44:a8:0a:ca:b9:54:80:
c9:88:e3:a0:c6:87:17:ad:24:db:e5:ce:19:0e:cd:27:ed:f6:
95:f3:a3:8e:6c:7d:ec:61:ca:7e:04:20:f7:a9:61:a9:0c:91:
bd:54:98:d1:09:0d:3f:f7:5a:39:75:2a:ad:9b:ea:2c:0b:db:
4a:79:51:fb:9c:ca:83:a3:08:6e:e6:1a:e4:9b:15:b1:34:28:
88:9d:28:57:7b:13:cf:ee:b0:d1:02:53:9a:25:51:6a:7d:5c:
c0:3f:e4:05:6f:a9:7e:98:0e:93:b5:c0:fd:4a:38:dd:5e:a7:
7c:0b:ef:c9:b1:f7:f4:79:d1:6f:6f:45:0c:bd:1a:d3:ee:55:
02:3f:56:b8:79:10:a8:7a:f9:25:cd:4c:45:62:7c:a6:46:78:
13:60:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client