Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: 3Ug9iXHHqpx4h/kDkXpTCeoNLYtarYSMRNZJqooyCTs=
Subject key identifier: FD:BF:99:6A:52:A7:9A:43:77:A3:DC:4E:3D:46:DD:2E:44:85:D1:4D
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 0198D515D9EB78033B5739D8DF23EA687D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0243
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: I/bXVPNIXV2xAIUuN5vmTWOIbTYM43ffAjo+xOkuXn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d9:eb:78:03:3b:57:39:d8:df:23:ea:68:7d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=fdbf996a52a79a4377a3dc4e3d46dd2e4485d14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:08:b8:78:45:3c:8b:b3:46:f0:d7:05:0b:
1b:6d:0a:fa:1f:61:62:0e:ea:87:26:a1:b7:2d:0e:
db:1e:73:33:87:47:4c:0d:3d:1e:c5:42:1e:84:ea:
b2:88:76:f2:a9:28:65:4c:62:9e:8f:00:54:0d:0d:
6f:69:02:2e:1e:5a:1a:b6:dc:94:32:a7:6c:db:b0:
24:88:f0:5c:c0:4e:fe:d5:dd:12:41:85:60:0f:82:
eb:05:4a:2a:fd:12:50:f2:4a:c3:7a:6c:25:04:73:
a9:06:21:0b:76:0e:11:44:11:32:1c:3b:2d:57:74:
26:f2:d2:46:76:da:4d:05:5a:bb:ae:e2:61:1a:c2:
9e:0e:38:6b:69:a9:6b:0a:72:da:2c:e8:e1:07:ca:
e2:87:8d:53:0a:6b:76:6b:ae:ba:d2:f3:f3:c4:c7:
ca:4c:53:79:a9:a8:fa:96:0f:17:71:a1:34:f4:11:
c0:28:fd:59:4b:5c:13:0b:59:c0:e4:c6:1a:46:90:
62:4e:89:f5:f2:1c:37:89:dc:eb:d4:f0:02:b0:69:
31:5f:ba:6a:a0:34:f6:59:4b:98:ee:88:ea:fc:04:
8e:5c:f5:74:96:64:13:3c:16:0f:ab:76:05:5d:c2:
72:af:92:be:21:39:57:3d:f0:82:6d:a6:26:1f:39:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:99:6A:52:A7:9A:43:77:A3:DC:4E:3D:46:DD:2E:44:85:D1:4D
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cc:fb:fb:27:36:7e:7f:35:0d:6d:f9:cc:3a:37:74:ba:6b:
ac:1e:cd:5f:e0:1c:5a:ce:0d:d1:4f:21:74:6f:81:5f:e5:cd:
6b:e2:de:88:a3:dd:4f:ba:b0:e1:d0:67:29:1d:40:49:da:d2:
fa:f2:11:34:a5:a7:36:25:e5:1d:ae:f5:46:03:9b:90:14:65:
6c:c4:64:91:10:b2:10:14:44:da:46:56:c4:d9:f1:80:26:1b:
1e:22:2a:81:f2:6c:38:51:62:95:13:dc:cd:80:7a:64:a5:02:
cc:c4:d7:b0:0f:fe:70:b6:a5:09:47:cd:35:44:96:67:81:fa:
32:dd:48:60:da:bf:2a:1a:94:7f:e6:3f:ed:60:78:f9:95:22:
98:6b:ac:7e:48:bb:0b:88:e9:d2:77:74:87:e7:2b:b3:ca:76:
46:4f:c5:4d:46:72:91:82:e3:af:3c:ea:89:66:85:71:38:de:
4f:d2:0d:74:12:0d:10:9a:c4:98:a0:25:d6:0d:7f:7a:28:7c:
b8:82:9d:db:41:9a:59:88:74:80:4b:35:9a:3a:21:6a:c6:ad:
c9:1c:b8:8c:97:d1:bb:4f:8c:45:35:ea:4b:3b:0d:6b:49:81:
fe:93:f5:47:50:8f:90:c3:4c:f8:d6:9b:78:d6:84:74:95:ad:
9d:bc:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:00 2025 by rpki-client