Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: IKYI186IYUpkjuDhoHpocsWmcKuBWAMVRqQwcfAEwFk=
Subject key identifier: 84:32:D3:13:03:71:31:08:0E:C6:94:7B:48:76:A2:12:4A:DE:3B:09
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019841E2B9E2FF69340B7437612C6357A478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1259
Signing time: Fri 25 Jul 2025 14:00:34 +0000
Manifest this update: Fri 25 Jul 2025 14:00:34 +0000
Manifest next update: Sat 26 Jul 2025 14:00:34 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: kNlgq08GDsxec7JUJueceKV/HEPinafnK6ooaCqWf0U=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:e2:b9:e2:ff:69:34:0b:74:37:61:2c:63:57:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jul 25 14:00:34 2025 GMT
Not After : Jul 26 14:00:34 2025 GMT
Subject: CN=8432d313037131080ec6947b4876a2124ade3b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:c3:8c:96:97:18:28:ab:86:ea:09:f4:84:
d8:2b:2f:f7:14:ec:4e:9a:8b:8e:df:62:35:bc:bf:
8f:87:37:6d:4b:13:a3:60:91:47:d1:aa:e8:00:50:
3e:58:df:ba:04:cf:49:8c:d8:4f:21:cb:44:ef:21:
d0:d0:5a:f9:23:f1:0d:36:42:4d:be:0c:a9:13:cc:
01:2e:5b:32:84:15:09:d4:85:69:95:b7:a7:4c:c7:
f0:c2:9e:ba:2a:af:92:a2:dc:f1:0e:b5:e8:61:67:
a7:1a:23:d2:4a:17:d9:0e:ad:f4:ae:b0:0b:b3:18:
db:fd:86:73:b6:92:f0:5f:eb:63:6a:4f:5e:12:d7:
cb:b9:eb:47:b2:c9:c5:37:b4:06:08:27:9b:43:f5:
7d:01:e9:3a:68:01:84:c9:88:9b:9f:90:6d:48:3e:
49:ce:a9:a7:4b:6c:ee:f6:16:34:4b:78:89:5f:fe:
97:81:97:f8:67:37:67:fd:ab:f9:32:fc:e4:0f:fb:
0d:fb:bc:b0:09:b1:35:a0:73:d6:02:97:37:c4:f8:
be:25:75:cd:66:8e:70:92:67:62:3e:e2:12:a2:9d:
0b:52:0c:52:1c:f1:9f:b1:59:f7:23:d5:1f:90:ac:
0d:65:8d:f9:51:63:03:45:09:86:60:fb:01:5f:57:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:D3:13:03:71:31:08:0E:C6:94:7B:48:76:A2:12:4A:DE:3B:09
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:d6:83:40:e3:e0:d3:93:cc:85:57:de:09:23:47:7d:45:
25:d8:9e:a4:cc:3b:92:39:8a:23:6b:8a:83:3a:24:70:58:34:
64:61:e3:29:d2:93:45:8c:9e:7b:f2:0c:28:d8:bf:30:9e:da:
94:16:41:b1:eb:15:68:f3:f5:6e:72:ef:bb:02:6e:f2:03:02:
f9:87:bb:46:c0:81:44:78:61:16:3c:3f:18:28:3b:5b:eb:b3:
84:54:3d:5b:57:cf:51:d6:dd:51:aa:23:00:10:27:07:35:06:
3a:92:a2:d8:a6:49:5a:cd:a6:1c:25:9f:6a:ca:c9:62:2e:e9:
71:30:64:33:d6:b0:f6:5b:c3:ac:a3:2c:0b:de:74:0f:52:57:
71:b5:00:ed:89:f0:cb:01:43:74:0a:22:a4:a1:d9:5b:46:5b:
ef:ca:f2:a0:10:e5:0d:49:88:99:65:0c:3a:9b:1f:56:56:ee:
cf:a6:4e:15:e3:b1:0e:55:65:e2:89:12:80:66:ad:ca:0b:44:
6a:d5:0e:83:fa:b2:bf:93:76:72:a7:97:36:a5:ee:03:51:3b:
c9:43:a3:91:e8:8c:d9:d3:dd:6d:93:b7:f4:6e:61:29:b7:dc:
13:07:02:b5:b4:60:a1:ac:ca:fd:53:f5:1e:f7:91:45:68:af:
87:e2:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:58 2025 by rpki-client