Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: 5NwrM5JTTzQ5Woa8Gi0zP0wNvjTeJ270OealgarEZss=
Subject key identifier: 8C:7D:66:F3:FD:12:DD:C1:D1:6E:62:E0:6A:CE:29:B7:F9:94:A1:7C
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 019A4DAAD20C58A4D3BCFA1AA12DD8615EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 10E0
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: z254EuzTelY4oJYVnMc//QAmB9Ou8+spyFiH+PbXZvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d2:0c:58:a4:d3:bc:fa:1a:a1:2d:d8:61:5e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=8c7d66f3fd12ddc1d16e62e06ace29b7f994a17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:6f:32:c0:26:5c:35:62:a6:55:70:fb:56:
95:0b:e7:60:f5:75:39:fb:7c:34:28:d7:1e:fa:77:
10:49:5e:f3:53:75:0e:d1:5f:f3:12:02:dc:e8:90:
d2:69:d2:3e:ee:88:71:cb:7c:67:60:0b:13:be:c7:
2e:d9:bc:85:0f:53:0b:10:32:05:36:f1:3c:c9:b4:
19:32:91:51:10:20:d2:52:40:80:3c:2f:12:5e:c3:
86:b2:28:d1:b7:ce:4f:bd:99:15:b1:f2:75:1c:13:
d3:d8:11:aa:a8:ee:14:a2:1a:83:b2:51:21:ae:27:
58:58:cb:ba:0f:4b:b6:28:ba:55:bf:74:d3:27:fa:
be:e0:4f:1a:fc:08:a7:14:f7:f9:60:07:a9:fb:aa:
09:f6:47:ec:23:7d:71:89:e3:cb:9a:3b:00:41:1b:
ff:8e:74:82:1b:22:95:11:66:ed:09:22:9d:5d:df:
a5:a2:fe:61:e8:8e:24:89:3e:3b:7e:74:51:36:fb:
e2:18:8f:f7:4e:dd:3f:88:b5:85:f0:e1:f5:af:52:
f2:b9:c2:99:5e:d1:58:e4:6a:87:64:83:07:87:24:
31:8d:b5:94:a4:ef:6a:94:e0:54:41:f9:6f:81:e0:
f9:7d:b6:d8:8d:73:4b:d8:ed:7d:66:20:d2:89:05:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:66:F3:FD:12:DD:C1:D1:6E:62:E0:6A:CE:29:B7:F9:94:A1:7C
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ab:74:49:13:cf:6a:26:b5:de:13:7a:36:53:fb:c3:59:45:
8a:8e:59:cb:34:3d:93:34:99:ff:6a:53:6f:5e:da:0e:90:06:
a0:70:39:da:88:5e:f0:23:46:4d:71:69:29:08:b7:43:b6:6b:
aa:cc:f5:fd:68:4c:51:1d:92:8e:2a:66:02:b5:95:a1:8c:56:
02:b3:2d:c5:ca:b2:28:c3:df:85:09:87:b4:78:cd:dc:5e:b6:
b5:1c:b8:8c:4b:16:94:9f:68:36:19:02:4a:fa:24:26:82:d8:
9b:76:b4:b0:82:64:cf:4b:e2:68:8b:87:12:0c:10:f1:1c:2a:
ea:d1:51:c7:a4:78:e5:8d:cf:7f:19:1c:bb:66:2d:1d:af:25:
73:81:56:34:93:e6:a8:f3:ce:2a:c7:80:0a:ed:21:89:89:09:
96:21:14:d0:a9:2f:58:5d:77:39:aa:dd:2d:71:93:63:61:96:
05:a2:8d:73:77:f1:e0:d9:f2:8b:86:3c:db:8d:ee:62:4e:d2:
17:66:1b:fc:6b:e9:24:72:7d:e7:09:91:64:07:f9:8c:1c:82:
a1:eb:e7:ac:ae:9f:63:3c:2d:a6:b5:0f:b0:10:0a:bd:31:a5:
6b:df:73:1c:80:88:76:00:4a:d8:69:cc:87:2d:c7:9d:22:9d:
b4:7d:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:37 2025 by rpki-client