Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: +Na5+BfF3oc2CrzdwByKyncuV9Pfrbp7aoTofHzCCcg=
Subject key identifier: 73:54:1B:8D:32:6A:EE:F5:FD:58:87:A7:80:3D:18:B7:FA:7F:8F:6B
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 0198D6604D3369EF6510C6CC7F0414A1BDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 067B
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: Scq5WbfCGmBwhdwYOpfaq8V5DY8O2oyIwK08nNd4OcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4d:33:69:ef:65:10:c6:cc:7f:04:14:a1:bd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=73541b8d326aeef5fd5887a7803d18b7fa7f8f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:e3:f5:69:01:de:5b:31:0f:32:8f:17:c4:
27:8d:4c:5d:e5:8d:f5:a6:48:53:7e:88:07:c0:b8:
a3:2e:d4:74:60:40:18:49:62:d4:1f:1b:c5:3e:8f:
6d:9a:7c:b8:57:a3:05:a0:f2:5f:6f:0b:36:22:92:
d2:13:53:6e:e8:54:25:68:21:cd:3c:36:00:ef:52:
8a:4e:73:32:13:5e:87:e2:e0:e3:16:b3:ce:d9:cc:
64:ce:75:1a:c6:41:d6:75:df:ab:1a:61:b7:3f:60:
50:9d:d3:13:97:91:8c:be:26:24:33:35:1d:a8:9f:
bd:e1:f8:08:56:ca:fa:55:bc:b5:76:19:7d:73:1d:
8f:b0:7d:e4:45:3b:a3:4e:9d:eb:77:cd:6b:f9:9a:
2a:5b:ac:9c:85:bc:4c:48:c8:8a:e7:74:9a:f5:de:
66:74:87:47:57:c9:c3:ef:ff:94:fc:e3:d4:73:ee:
51:a6:2b:7c:d2:8d:f2:fb:55:d0:f1:e4:92:ce:4d:
40:b3:d9:5b:86:24:37:09:27:65:44:40:0c:e2:7e:
8b:4e:d5:6f:40:e1:72:50:32:77:ed:c1:69:c3:da:
f6:7b:a6:d1:0b:41:99:36:03:15:80:0d:d5:32:5b:
65:48:f2:c7:7e:de:f3:c4:7c:fd:e3:cc:0a:12:0e:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:1B:8D:32:6A:EE:F5:FD:58:87:A7:80:3D:18:B7:FA:7F:8F:6B
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9d:84:f2:04:b6:3b:48:56:23:10:15:da:87:e3:5a:f3:1e:
13:87:d1:67:be:bb:b0:01:a7:42:b1:d3:d8:df:71:77:3d:c8:
4c:d1:79:99:12:40:c6:58:2e:cf:9a:b3:12:e0:1f:4e:00:c7:
83:08:2a:07:dc:26:54:2f:bd:2f:25:d1:0b:b9:fa:0c:41:ee:
86:7b:26:dc:59:b6:cc:ad:a7:a2:6a:c7:dd:37:c4:1e:26:90:
4a:cb:3a:f1:a1:ba:eb:7d:a3:26:ea:9f:44:f8:8c:fd:9b:01:
aa:f3:41:6b:85:4b:da:4a:ed:55:bf:a5:4b:ba:86:cc:23:d6:
4a:f6:b9:de:5a:71:e7:78:31:f8:db:57:a3:51:d2:e9:62:47:
cb:a2:ef:64:87:11:b3:31:c8:e2:5f:2a:ea:65:dc:6a:30:da:
8d:24:a2:fa:5c:d8:4c:7d:03:4d:4e:77:4c:41:5a:c5:f3:9c:
75:64:60:cc:b6:34:88:9d:7d:68:c8:c6:bf:69:db:da:bf:5f:
9e:8c:1b:f9:5b:51:48:f4:4d:0f:32:92:3a:7d:62:62:d9:47:
19:5b:3c:03:d6:4a:10:65:f6:91:67:4d:b6:b8:d3:14:41:79:
85:cb:51:dd:4d:6c:cd:4f:50:22:fc:10:90:f2:aa:63:a2:0d:
e1:4e:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:20 2025 by rpki-client