Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: DnsvY7CToSt+RUAqJMUreHb6mVZBv6djIEGrudmSOtg=
Subject key identifier: 9E:47:5F:43:30:ED:97:F6:E9:DD:C4:9C:BB:4A:70:65:72:1C:3F:7E
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 019A4DAADF21B136F4D60C72FE3DC9C0EC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 0306
Signing time: Tue 04 Nov 2025 07:00:35 +0000
Manifest this update: Tue 04 Nov 2025 07:00:35 +0000
Manifest next update: Wed 05 Nov 2025 07:00:35 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: P29RLVjhqQBz564DhG2eM2ju1GmcnjgvKkB2fj7Gk9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:df:21:b1:36:f4:d6:0c:72:fe:3d:c9:c0:ec:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Nov 4 07:00:35 2025 GMT
Not After : Nov 5 07:00:35 2025 GMT
Subject: CN=9e475f4330ed97f6e9ddc49cbb4a7065721c3f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:c6:66:a7:51:2a:c0:67:ae:40:2a:4c:49:
9d:56:78:eb:f6:37:af:88:67:2a:3e:93:1f:c6:e2:
22:e8:fe:62:5d:25:81:b9:da:44:0b:31:30:b8:b1:
68:c7:a0:0f:2e:78:65:e1:7e:02:aa:f4:83:9d:95:
c8:57:a2:f0:80:0f:5e:94:28:a3:fd:2e:12:e0:ab:
f3:d8:b6:56:8c:06:ea:d7:e3:5b:4f:e0:3a:80:bc:
42:13:55:fc:9d:37:f3:0d:9e:b9:be:3c:cc:62:2d:
d4:28:b3:4a:6c:d2:89:9c:ca:9c:87:85:ec:ae:28:
7d:1c:22:bb:08:cc:6a:6f:17:9c:0f:9e:fd:34:9d:
a3:49:17:79:49:21:6b:c5:2d:ce:46:e1:a1:98:40:
56:2a:a4:8c:d4:f7:e6:2e:a1:1e:fa:54:ab:fa:64:
13:a7:ad:6c:3f:d5:64:00:18:76:63:8f:7d:69:92:
f5:bd:2b:02:36:49:3e:4d:21:31:98:4d:79:e9:a9:
f4:3b:3a:c6:64:23:d3:be:cf:d2:97:8b:81:19:8f:
c1:bf:ad:c0:f0:4c:cd:2e:a7:3f:13:d8:c1:d7:44:
55:e4:f2:57:87:d5:dc:20:64:a5:d1:ff:51:d4:3b:
7f:29:05:90:da:79:77:02:c8:f1:4b:ce:03:c1:2e:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:5F:43:30:ED:97:F6:E9:DD:C4:9C:BB:4A:70:65:72:1C:3F:7E
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fb:d6:20:5d:b2:d7:e7:c7:7f:da:4b:df:79:f6:d2:1c:c8:
0f:c4:c0:d7:b2:40:4f:72:ce:7b:6a:a0:c4:09:32:44:dc:e2:
cd:53:1b:c6:e3:05:62:8c:58:2a:8c:f9:21:41:a7:56:46:a5:
8d:d7:e0:72:79:94:d8:4a:00:a7:e2:99:a7:bb:ac:42:89:4d:
25:2b:ec:ad:75:0e:52:f5:be:26:58:11:c7:7d:00:d9:c3:a7:
8e:70:03:f3:c6:12:91:4a:4c:8a:8e:71:20:53:8d:10:87:e5:
05:25:a4:d2:57:96:00:b3:23:60:94:2b:65:e2:b8:1c:90:f0:
f0:5b:45:fc:09:a6:6f:29:88:f7:e6:1e:12:62:52:22:a8:f6:
04:13:15:c9:a1:3a:cb:a3:43:b1:6e:3a:a1:fe:ab:41:92:a6:
5e:de:86:58:c9:e5:39:8a:46:61:41:6f:75:a5:dd:0b:a7:5a:
d1:8f:39:08:07:0b:9f:82:6d:9b:63:d8:67:df:31:3e:8f:0b:
b4:c5:e3:d5:cb:4a:e4:55:04:39:62:99:99:ec:fd:42:59:e9:
aa:9c:2f:97:2e:a7:a9:a6:fc:ee:fd:d3:b4:2b:bc:37:7e:64:
aa:86:60:37:61:9d:8c:e3:08:0f:ef:77:13:09:19:1e:55:e3:
6c:53:04:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:15 2025 by rpki-client