Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: qay+KNLX7mpOUEc/31mbke/0xzzxcMW/jmZpVWFwjik=
Subject key identifier: 9B:42:27:5C:9C:76:11:2F:C7:5A:C3:3F:AE:40:75:E0:6D:B3:64:41
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01988DA1DD9D6DEA8801E89E26BC10C9AB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0FF8
Signing time: Sat 09 Aug 2025 07:00:52 +0000
Manifest this update: Sat 09 Aug 2025 07:00:52 +0000
Manifest next update: Sun 10 Aug 2025 07:00:52 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: JtyN2IGPj40+bS34wlkWZ2Tc4OvLTrUSvE1uoy3d0VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:dd:9d:6d:ea:88:01:e8:9e:26:bc:10:c9:ab:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Aug 9 07:00:52 2025 GMT
Not After : Aug 10 07:00:52 2025 GMT
Subject: CN=9b42275c9c76112fc75ac33fae4075e06db36441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:64:83:02:d7:ae:d5:30:2b:ad:0a:3a:86:
e6:df:57:f1:b2:29:47:b7:75:7b:ee:f0:66:c1:45:
23:b5:69:c2:18:f1:ec:d5:6d:27:b0:41:35:59:30:
6f:6c:ce:9c:74:cc:4f:48:ed:55:c5:31:a6:54:52:
cc:4d:d6:4b:2c:89:eb:be:2e:c4:28:57:67:24:c1:
03:a6:3a:15:7a:13:78:d7:48:8b:fa:fa:ce:d4:90:
38:96:17:f5:2d:fb:39:73:80:b9:af:7d:c1:c7:aa:
9a:4b:9b:f2:6c:3d:8c:12:45:38:10:a6:4b:c5:f0:
cb:44:b4:80:f6:f7:8c:c1:3a:97:29:7e:e7:68:42:
ae:b9:f9:1b:bb:c8:af:9c:43:61:c3:9f:32:7d:64:
21:75:97:46:8a:ec:67:ce:6a:60:d0:00:32:f3:d8:
68:ee:43:b9:a6:f5:57:92:a5:51:20:07:fd:fe:2d:
16:cc:fb:e9:b8:8a:e7:92:7c:71:da:e2:f3:91:90:
97:53:f6:b7:a5:75:1a:31:70:7d:c4:07:ca:f5:77:
ca:6e:1b:b7:69:60:ab:96:15:da:0d:1b:fc:b1:aa:
8f:92:00:72:9b:fa:83:65:60:ec:de:7b:a7:83:59:
6e:a1:df:85:7e:90:6f:61:2b:15:0a:fb:18:57:82:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:42:27:5C:9C:76:11:2F:C7:5A:C3:3F:AE:40:75:E0:6D:B3:64:41
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:89:04:35:90:08:da:c9:e3:97:97:f1:76:71:70:dd:5a:
c4:fc:f4:f6:20:34:6b:f4:c1:d3:21:85:41:f7:1e:02:9e:85:
9f:5e:30:ad:a6:a1:62:f5:11:c6:53:11:84:21:df:f0:d9:fd:
94:f4:0e:47:09:ad:d8:85:a9:8f:84:62:3f:80:0a:aa:e9:0b:
3d:b9:85:56:d8:cb:63:0a:38:26:d5:44:b6:2d:90:10:e2:56:
a0:81:3e:30:43:c9:fc:79:af:f2:40:2b:92:f4:47:dd:5f:fc:
c8:1a:58:ef:66:62:a6:f9:27:d9:22:a8:19:fc:41:8e:66:93:
79:f3:43:2b:b2:98:37:25:dd:b9:2f:9b:7f:a9:ee:f4:fd:91:
6c:65:6f:c2:40:8b:bd:e2:c5:65:86:e2:2d:a5:78:f1:31:5b:
3f:42:c2:ba:58:28:5e:24:0b:60:ef:b9:63:35:05:ef:37:89:
18:ad:e7:67:78:1a:dd:96:3d:fa:30:ad:e0:af:da:c7:06:2c:
e0:b6:4f:49:6b:d2:a9:39:cf:74:2a:73:d5:e3:65:b5:0b:6d:
e1:59:39:b0:1d:87:99:06:db:88:dc:75:3b:57:cd:d0:8e:87:
c9:77:e8:67:5c:c6:ec:6e:ea:23:52:31:96:b9:a7:46:cd:b7:
99:de:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:23 2025 by rpki-client