Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: WAGinym+BGTP1I3EHGYTjod7AbE34maS5gX1ACULhdQ=
Subject key identifier: 5B:58:51:6C:D0:92:7E:EE:D5:A0:0E:49:4B:5B:A2:26:1E:23:0A:A2
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 0196B0A0CB5297AD4D51C08D8B248CA75154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0127
Signing time: Thu 08 May 2025 16:00:49 +0000
Manifest this update: Thu 08 May 2025 16:00:49 +0000
Manifest next update: Fri 09 May 2025 16:00:49 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: EwXsjGa+8JHUbtIRNCpU4bfoeFfnVvcZNE2ADGxEWVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:cb:52:97:ad:4d:51:c0:8d:8b:24:8c:a7:51:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: May 8 16:00:49 2025 GMT
Not After : May 9 16:00:49 2025 GMT
Subject: CN=5b58516cd0927eeed5a00e494b5ba2261e230aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:a9:88:6e:dd:64:52:5c:65:32:fa:33:b9:
29:a0:22:a3:42:46:8e:eb:ea:cb:7d:92:1f:ff:f6:
67:4f:9e:59:48:38:14:68:89:c4:19:7d:1c:03:35:
7f:17:59:c1:55:9e:ff:2a:4d:7a:7c:24:ac:d5:8f:
ca:77:e8:4d:d4:a0:79:5f:df:c8:79:c3:6d:82:ee:
7c:fe:fa:5f:e1:95:bc:a3:2b:53:a4:d7:d3:97:19:
87:01:98:e4:f9:d6:66:76:97:3c:fa:d7:0c:f1:fa:
c9:69:57:38:2d:fa:54:b3:47:8f:0d:30:3e:a8:1b:
0d:54:91:d9:ee:73:27:bf:c5:6f:a7:64:ed:d3:4c:
29:08:4f:3a:25:db:c5:d1:3a:4f:20:fe:f4:10:df:
d0:17:50:c0:5d:49:b1:cf:2c:0b:e8:3b:e2:dd:ce:
1c:8a:ac:8d:9e:5c:8b:3d:16:68:bd:e0:53:3e:06:
93:5a:92:00:ec:c4:ee:50:19:0b:2d:b7:aa:ec:65:
77:b0:d3:f0:dd:45:76:f2:dc:bd:5d:8d:2b:61:c9:
b3:59:a2:66:c7:41:95:3d:1d:f9:15:50:be:91:84:
8e:09:0f:6c:21:ef:31:69:e9:84:12:5d:dd:a9:b2:
d3:83:27:66:86:dc:e6:ec:b8:f7:c9:01:23:43:00:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:51:6C:D0:92:7E:EE:D5:A0:0E:49:4B:5B:A2:26:1E:23:0A:A2
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:64:a3:17:04:6b:c1:cd:4e:2d:92:9e:25:e0:a7:d4:a3:f8:
c9:e7:82:ff:f8:53:6b:e4:63:1a:22:34:5d:52:3e:de:6a:de:
66:2d:95:8d:66:fa:57:b5:a0:a0:e4:5a:8f:3b:d2:0d:cd:cb:
8d:c4:e6:7d:14:a8:d7:77:7c:44:ac:35:56:54:d3:79:43:26:
02:a4:c1:16:93:42:6b:2a:55:d5:5e:89:c3:13:92:26:b6:05:
01:9a:a7:f1:1b:e0:33:34:b6:44:e5:6c:2c:59:67:cd:c3:fe:
90:36:53:29:11:3b:06:3a:b5:db:67:d4:c2:85:17:46:9f:6c:
4c:83:50:4e:8b:7f:5e:e6:b7:74:8c:05:74:77:79:5d:33:32:
1c:86:36:49:00:8c:a8:e5:9a:66:54:8a:80:d2:1a:a6:24:41:
13:d6:2d:aa:d2:d8:3f:27:87:55:c8:52:11:46:71:19:3a:3c:
ff:f5:d5:16:78:fb:72:49:51:2d:1d:69:54:eb:e3:b7:ef:6f:
56:ff:99:d7:3b:a9:83:7d:5b:ef:7e:69:62:36:99:3d:8e:69:
28:a7:1b:b1:85:82:06:24:70:6f:e8:30:b7:85:37:43:cc:cc:
b7:3c:b4:ca:5f:34:f2:c4:f3:e2:b5:56:c0:ea:79:b0:44:a0:
16:93:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:28 2025 by rpki-client