
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: F5PejTOr4eJ0bDlY9d82n+O9aevw/TyjYJSK6p6Qazg=
Subject key identifier: F6:97:71:32:21:6D:0D:1D:55:BA:0B:72:B2:D4:85:4B:22:9E:4F:E4
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 019894487547802ADEC6B696DB4AC6BD7A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 1510
Signing time: Sun 10 Aug 2025 14:00:33 +0000
Manifest this update: Sun 10 Aug 2025 14:00:33 +0000
Manifest next update: Mon 11 Aug 2025 14:00:33 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: 6dW9PX2/USuGuV1hPXFaqe6rR6WeSsFTMZzbClIxaT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:75:47:80:2a:de:c6:b6:96:db:4a:c6:bd:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Aug 10 14:00:33 2025 GMT
Not After : Aug 11 14:00:33 2025 GMT
Subject: CN=f6977132216d0d1d55ba0b72b2d4854b229e4fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:e9:48:5a:19:a5:20:67:46:81:ce:ca:4b:
a8:75:27:a6:9e:84:15:1a:12:f2:5f:25:64:a4:ed:
86:c1:47:ba:0b:07:c4:1b:d5:21:de:f1:ad:05:44:
73:98:92:b3:4f:fd:65:f7:72:f1:cb:8d:99:0c:85:
f5:4c:a5:60:50:e0:df:1b:66:5b:c1:10:70:ad:ec:
20:2f:92:10:78:04:08:52:21:0b:9c:94:fd:84:af:
15:a6:68:80:c7:bc:a5:6a:47:7a:b1:ca:8a:78:59:
d2:f2:28:09:16:df:e7:a9:d3:23:ab:42:91:1a:58:
2c:37:3d:75:bf:55:3a:42:03:c2:18:9a:df:0e:87:
4c:47:48:4e:6a:9b:21:ec:57:00:0b:62:f7:2f:c1:
61:e8:49:9f:d2:0d:36:af:8d:84:28:09:4c:e6:13:
06:cd:9f:dd:83:c1:05:08:29:62:62:8d:c9:d5:10:
a0:e9:be:b2:29:59:d6:f1:7a:ff:2d:31:4a:fa:74:
10:ba:62:a9:c3:65:3a:d4:9f:f4:c1:f5:29:80:67:
87:3f:c4:ec:ba:84:9b:3a:97:c6:71:c5:2d:93:ee:
13:0b:7d:5e:c6:19:2e:f6:82:b7:ef:fa:98:2f:c6:
7e:98:63:f2:d9:73:26:ca:25:7d:33:90:02:89:a1:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:71:32:21:6D:0D:1D:55:BA:0B:72:B2:D4:85:4B:22:9E:4F:E4
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:26:9b:9b:65:fc:44:1c:95:65:20:94:1e:fa:4c:46:87:f1:
38:15:d2:e7:74:dd:7f:11:74:17:f5:f6:b1:84:1c:f8:2a:fb:
e5:36:d4:8c:f1:24:cb:4a:87:1a:14:8b:96:a7:6e:de:01:df:
47:b1:75:3e:e5:65:ef:44:73:47:a7:3a:95:60:90:72:d9:e0:
b6:ae:8c:50:8f:79:a7:45:b0:73:ec:04:39:f9:9e:22:e7:67:
45:70:f6:60:c6:d3:76:9e:08:f3:19:20:dc:a7:8e:84:ce:de:
14:e4:5a:f0:3a:80:61:cf:dc:e4:ee:f5:06:fb:2e:b2:16:28:
75:05:65:c8:c4:f7:11:31:b4:5c:bb:79:4c:a3:67:6b:91:61:
ac:fb:d3:11:c7:63:b4:47:66:6d:1d:37:1d:83:83:59:97:e2:
2b:46:2a:c1:6a:2f:8d:a7:6a:50:da:33:9a:47:fb:a1:21:59:
62:5b:35:68:f7:d9:a1:7c:79:09:75:79:89:15:50:ad:81:aa:
a6:aa:8d:ea:62:17:04:7f:0d:77:c5:97:0d:80:d7:84:f9:d3:
04:a6:56:36:9c:bc:85:6f:74:b5:d3:77:6c:df:f8:b6:09:c1:
76:01:d4:83:d0:e1:c9:7b:bd:dc:5c:7b:a5:5d:b4:b3:2c:20:
28:93:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:06 2025 by rpki-client