Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: PVLtNi+4lSwj3swxYXVIs+3W/5SkJHrlwoRYvp70FyA=
Subject key identifier: 2F:1E:44:F6:D4:4D:F8:59:81:B7:64:A4:3E:8E:63:58:72:1A:A2:93
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 0198D515625BB20AC7BBF0ED1E3E3DA4703B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 101D
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: hOX2UC3pQUChANolwwPU7BatozlwY9cMuVRpju+vwP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:62:5b:b2:0a:c7:bb:f0:ed:1e:3e:3d:a4:70:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=2f1e44f6d44df85981b764a43e8e6358721aa293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3b:79:8f:4f:df:39:61:22:7e:c9:e0:cd:7f:
ff:b5:dc:4f:ce:36:fe:63:45:9b:dc:de:74:e9:59:
b4:dd:ab:46:48:ed:2c:4c:18:b0:df:8f:a2:12:a4:
a5:f2:a3:19:0e:bb:9f:24:a3:24:e3:ac:da:e9:4c:
31:9c:8e:7d:35:d2:52:5d:18:f4:54:6e:6c:b7:ab:
ae:a5:99:4c:e0:ce:43:8a:48:07:68:be:01:f9:50:
fe:56:ab:9a:eb:ce:0e:9c:1c:26:89:a4:81:9e:a2:
f7:7f:07:9d:04:17:4f:61:e5:ca:62:d2:6f:84:ed:
1c:2b:fd:9f:a3:8f:ad:ae:31:c3:78:db:d0:08:cd:
6b:43:de:83:0e:88:5b:77:88:5b:ea:93:42:bc:a1:
96:99:bb:99:5b:72:35:1a:82:5a:0a:27:8d:d1:9b:
28:cb:d1:d6:e5:36:a4:5d:5b:ea:10:55:b4:3d:5e:
9a:50:a3:57:8f:f9:c2:54:4f:8f:d7:4e:fc:71:07:
17:60:15:1f:57:29:8b:96:84:8b:f7:d5:bb:1a:2f:
2c:1e:a4:77:b2:90:f6:20:f7:3e:47:da:3e:0a:d1:
ae:1f:14:92:7e:6a:08:cb:ad:df:e6:a7:07:0b:91:
49:90:af:8f:2c:d2:3f:91:93:95:c0:1b:2e:5e:24:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:44:F6:D4:4D:F8:59:81:B7:64:A4:3E:8E:63:58:72:1A:A2:93
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0e:e0:3b:e6:00:f4:c0:67:29:4e:8f:4b:aa:13:46:1f:9e:
8f:d8:85:37:21:23:9b:c9:84:84:15:0b:d4:a4:e1:5d:19:c9:
77:fa:cc:87:f3:3d:ab:90:61:4d:df:0f:60:6d:1d:79:6b:3c:
b7:ef:60:71:4c:be:ce:fe:f5:57:8f:a3:e8:92:6f:47:bf:c5:
54:11:2d:1b:29:e5:cb:83:c8:fd:75:a4:9d:1c:e8:75:54:0a:
03:eb:0d:05:4a:22:7c:2d:8e:2c:72:e9:a6:ef:ef:05:62:e7:
14:39:b2:18:cd:bf:46:a0:ea:3a:3c:8a:e4:4e:23:50:fb:69:
82:0e:22:bd:9d:9d:71:4c:5a:b9:41:fc:18:b4:09:0b:e2:0d:
aa:2f:c1:81:3a:bf:c5:2b:4e:aa:ce:7a:22:0e:23:6d:1c:e5:
3e:8c:f4:04:1f:6c:92:d6:58:72:a6:19:97:7e:3c:92:e0:27:
32:b8:a1:70:83:2a:5c:32:0a:e5:e1:a5:06:2a:94:71:3c:76:
98:43:e4:75:ac:9b:f1:da:ca:c1:36:f7:65:4c:1e:51:0d:d8:
41:02:3a:42:14:1d:ec:c4:65:0d:5e:e0:58:d6:1a:a3:8c:5e:
8e:e7:d6:ea:15:83:de:d7:fa:4e:dd:21:e5:d9:6f:a8:40:ef:
4e:15:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:18 2025 by rpki-client