Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: j6F29dTBRzTaQfE4Kww2i+l9Gs0ftSvN6Hx3/v916Yk=
Subject key identifier: CA:59:11:CE:7B:0C:9A:E7:2D:34:A6:0D:6A:77:2A:A6:CE:18:3B:4C
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 0198936C9D9AAF155E75BB55C1A45B536929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0221
Signing time: Sun 10 Aug 2025 10:00:25 +0000
Manifest this update: Sun 10 Aug 2025 10:00:25 +0000
Manifest next update: Mon 11 Aug 2025 10:00:25 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: CXa0AfRaXQxDsageRe+kQV7ApkCeXc4MROHgdDssi6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:9d:9a:af:15:5e:75:bb:55:c1:a4:5b:53:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Aug 10 10:00:25 2025 GMT
Not After : Aug 11 10:00:25 2025 GMT
Subject: CN=ca5911ce7b0c9ae72d34a60d6a772aa6ce183b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:6d:4c:f9:de:c8:1f:61:f2:66:b3:37:05:
70:45:42:e0:9d:58:0c:19:5b:77:06:ff:39:cc:a1:
6c:0c:94:83:cd:84:ef:0c:78:cc:90:e2:97:fa:30:
ef:c0:58:d9:45:b4:02:b7:ce:45:79:13:97:92:90:
09:e3:07:1b:f9:b7:47:85:db:d7:d8:8a:b5:da:de:
6f:8c:d1:eb:88:22:1f:d9:ce:60:cb:05:40:1f:cf:
e6:42:72:48:1d:b7:95:b8:44:9b:d7:31:e1:e4:8a:
33:86:f2:8b:f9:39:25:89:0e:fc:53:2d:7f:90:ac:
3a:b4:c5:fa:d7:78:50:55:e8:a6:3e:3f:3b:f6:bf:
0a:d3:9d:55:ab:f4:9c:ca:05:d1:fc:c5:6b:89:15:
d3:d0:66:20:69:b9:b0:ed:c4:f8:c1:a5:3a:6d:0f:
fa:5e:82:0b:e7:a4:39:73:ac:2d:cb:28:46:46:aa:
77:e6:63:c4:0a:4d:16:41:a7:ac:ae:12:9f:b5:77:
bb:99:59:bc:97:50:78:ae:a8:f5:19:22:57:99:9c:
0d:ea:0e:9e:eb:f2:97:32:0a:10:9e:1a:38:c6:54:
3f:8a:0b:28:c0:f1:96:8e:8c:9d:f1:e0:4e:17:9b:
2c:b9:00:59:13:dd:0f:4f:e1:c0:cf:52:db:11:34:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:59:11:CE:7B:0C:9A:E7:2D:34:A6:0D:6A:77:2A:A6:CE:18:3B:4C
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:aa:dd:df:94:ef:52:f2:0d:7b:2a:bd:6a:0b:32:ab:09:d1:
a9:48:e8:0a:3e:14:29:4d:82:1b:e8:04:9a:77:0b:12:1e:8b:
5c:ef:c5:be:56:fe:16:30:82:89:fb:fe:3c:fd:b5:2a:fc:b4:
02:00:43:84:ad:6f:29:f8:f2:e5:a1:58:dc:ca:38:16:af:f0:
3b:6d:96:b6:dc:b8:66:ad:b9:0f:d1:33:c5:54:d7:28:3e:a3:
c0:db:da:d3:11:11:1d:a4:18:da:19:f2:27:47:06:e6:52:f3:
82:9a:62:dd:b1:c1:32:f0:52:2f:6f:38:6f:2d:bb:6d:06:5f:
2f:0d:3b:0b:8c:4b:f7:20:ba:fe:d8:33:f1:11:66:f0:7b:7b:
da:7a:1c:b0:85:df:8c:a6:71:72:64:7c:02:ba:a0:24:bf:03:
4e:75:a3:f5:18:15:3f:68:92:77:4b:c9:dc:5a:30:58:dc:63:
33:4d:bb:0e:c2:69:a6:6e:0b:ea:26:51:88:1c:91:50:d1:a7:
f7:76:d6:7c:bf:0d:a5:a2:f6:bd:93:95:66:15:6e:f0:df:e1:
3f:1d:49:84:75:3b:f6:63:e0:e7:24:b7:3c:20:2e:22:66:54:
4c:60:0c:6b:02:2a:29:3b:ea:e9:8b:18:d0:de:6b:e5:4f:f0:
e8:9a:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:20 2025 by rpki-client