Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: 2m75r/x4IZJSLYNdU31UrU+gb3J2VXd1cTCJ1Sa6a00=
Subject key identifier: ED:71:87:74:A0:65:47:9B:FC:28:37:97:EC:60:A9:1F:0D:98:5A:CA
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 0199FC8F14D35E14359278E2EF2D5A26F6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 02DC
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: UAEo39DwAK7jHTVXnBxpnY1w+2inJJr6ih/zmGcKEKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:14:d3:5e:14:35:92:78:e2:ef:2d:5a:26:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=ed718774a065479bfc283797ec60a91f0d985aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:c3:93:74:6c:95:3d:6c:f7:d0:b5:af:1a:
06:a8:ec:36:63:a7:46:71:12:df:21:ee:89:ca:dd:
a8:3c:67:12:9a:b7:f4:4a:61:09:4b:40:69:0a:13:
44:7d:f6:58:a4:bb:f4:c7:5d:ea:7b:b6:3c:ab:ad:
ac:84:cb:6b:a1:de:9d:07:83:52:53:6c:b4:f4:68:
26:8e:47:0a:2a:ec:c5:0f:6b:dc:08:ae:74:b4:4b:
0e:fe:3e:6a:6f:e8:87:12:42:7e:0d:80:f0:c0:ec:
cf:af:49:eb:41:3a:19:e9:70:9a:c4:f5:9b:78:7b:
36:8e:85:cf:78:27:f3:89:eb:30:d0:30:d8:89:de:
6d:44:60:6f:c7:f7:1f:c7:41:6f:70:a6:a4:c5:cf:
47:fb:d8:ce:77:e9:4a:8f:64:07:ff:c8:07:b0:d0:
a4:07:57:62:12:8c:d7:5d:32:f4:0b:74:65:27:5d:
9d:ef:dc:1d:2b:1a:b0:8e:50:9a:7c:71:cb:76:68:
f3:27:13:c8:5a:63:49:e1:b1:5b:e1:ab:bb:79:7e:
06:0f:21:63:31:59:d7:8d:b2:bb:08:0e:8d:3e:95:
c5:af:82:3f:b0:5c:ed:f9:77:60:b6:8e:b3:20:25:
1a:a5:2f:7e:64:5b:40:8f:c8:02:33:f6:5b:e7:42:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:87:74:A0:65:47:9B:FC:28:37:97:EC:60:A9:1F:0D:98:5A:CA
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8e:cd:eb:c7:02:9c:5a:96:4a:c6:58:d1:fc:7e:b7:47:b5:
0d:a8:a9:61:bf:a3:89:cd:ec:47:b3:e6:36:54:54:7b:a0:bb:
1e:e1:0b:9b:a9:83:f3:aa:e9:c9:1b:8c:9d:1e:b4:b1:c5:45:
18:d4:dd:96:09:4c:26:0b:e1:c3:7a:d9:69:60:fc:b5:c3:a0:
71:ba:44:da:92:f8:92:c0:1d:75:15:6c:9d:dc:18:43:e6:03:
ee:76:fc:fc:b8:82:47:af:8c:30:77:ed:fc:ef:70:73:59:b7:
e6:49:80:c2:d0:d4:39:0d:0f:fd:5f:05:99:54:d4:d2:77:65:
c7:bf:2e:ed:59:d6:7e:61:7a:44:d4:73:2f:70:30:0b:0c:0b:
a3:2b:9d:d3:c0:49:0e:9f:a1:17:0e:84:d8:da:f7:f4:e8:d9:
c5:bd:87:bc:f1:5a:7c:3f:bf:49:14:ba:cf:e5:66:fb:fd:83:
00:6a:19:c3:c3:3c:5e:a1:c9:f8:8a:fc:f1:80:44:22:6b:33:
3f:1f:f8:27:c7:42:51:1f:4c:60:6b:fb:00:a0:d5:5b:74:f0:
c2:81:2a:37:05:7d:1f:5c:a3:31:2a:b3:17:93:73:dc:14:e4:
ad:a2:1e:45:f4:00:1e:72:27:21:6b:38:61:7d:b2:aa:ef:05:
7a:1b:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:56 2025 by rpki-client