Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: w9hOt0aXquq1dRU6/iOxhLgatsVw6tV9Ina9YPL9ajw=
Subject key identifier: 86:BA:81:B3:BA:3B:62:96:D5:CD:02:58:23:85:EE:30:23:04:FE:51
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 0199C42013A1E36DCF9FEFEB8B75168663BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1321
Signing time: Wed 08 Oct 2025 14:01:00 +0000
Manifest this update: Wed 08 Oct 2025 14:01:00 +0000
Manifest next update: Thu 09 Oct 2025 14:01:00 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: xkI0OSdE5GdPoMNURpoC1e7ylSWQc1HZSE2zgt4C3uE=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:13:a1:e3:6d:cf:9f:ef:eb:8b:75:16:86:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Oct 8 14:01:00 2025 GMT
Not After : Oct 9 14:01:00 2025 GMT
Subject: CN=86ba81b3ba3b6296d5cd02582385ee302304fe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:df:11:65:10:ff:7c:e2:ce:a6:15:23:58:da:
61:fc:21:63:25:73:65:1c:8d:f9:6e:35:dd:ed:88:
7e:fa:c6:35:96:46:b2:8e:89:75:54:d2:42:5d:37:
0c:3c:dc:56:1a:be:41:91:12:a1:0f:17:6f:d9:1e:
09:98:c4:48:59:3a:39:72:f6:7a:ac:6b:6b:94:30:
27:b0:c2:fc:19:81:7d:67:45:c6:c4:5b:23:fe:27:
de:f9:b2:f4:84:6b:39:e7:b2:0e:b3:2e:43:f6:0d:
9d:a3:81:b9:8d:18:be:d4:42:b7:06:2d:48:5c:8d:
13:73:de:02:83:bd:0b:b4:16:6f:70:09:fe:58:12:
82:2d:89:6c:16:cb:01:1b:39:32:4c:2f:c9:f1:f2:
3d:ca:af:78:09:6f:38:60:6f:ad:bd:e8:c5:05:5c:
c6:2b:31:87:9f:8a:39:08:96:e5:30:d8:13:e0:40:
17:a1:67:a6:01:65:1d:6d:8f:5b:9a:5c:4c:06:40:
09:88:1e:eb:c0:1f:11:3f:28:7b:73:31:2a:80:39:
0a:2a:8e:70:7a:66:d9:89:58:ca:37:cf:bc:25:5c:
4d:d0:43:b8:99:eb:03:b9:ea:86:ff:2c:fc:40:46:
c7:6d:cc:cf:fb:60:8c:78:7c:58:59:b2:ef:cc:14:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:81:B3:BA:3B:62:96:D5:CD:02:58:23:85:EE:30:23:04:FE:51
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e2:3c:df:00:2d:88:aa:fd:28:22:7f:e7:73:38:0c:e4:2c:
18:65:74:30:5c:d9:d3:c1:45:fe:4f:6b:ec:98:b3:b0:64:db:
46:3e:27:bd:2f:b1:00:bf:12:13:ef:b3:1f:1d:fc:d0:eb:b4:
17:3c:c2:f8:af:f4:e4:01:d5:67:6d:a9:9b:55:1d:9a:a4:f6:
24:6a:85:ab:8a:00:b2:0d:b5:6d:fe:39:67:35:b9:28:6a:a9:
6f:91:54:de:98:f6:fd:c8:27:40:b6:eb:7f:a9:5b:db:c2:8f:
29:9c:ea:4e:1f:0f:dc:10:16:1e:76:9d:39:90:32:46:9e:e5:
3a:cc:34:43:2d:37:c8:6e:13:bd:10:55:89:d6:34:2f:81:be:
00:8d:89:1d:44:73:52:e7:6e:0f:cb:20:5e:5d:be:81:5c:6f:
40:63:76:e1:0b:5e:8f:93:5c:61:46:21:b2:03:a0:8c:79:e1:
f2:a5:31:a9:3f:b2:5e:d6:2a:d3:15:d5:2a:d8:27:3d:40:4c:
22:ad:98:67:48:36:b7:f4:a2:ca:db:d1:f6:56:38:85:ee:28:
7b:f3:b6:3d:19:d4:f2:12:37:cc:9c:47:76:2a:b7:e1:89:2c:
26:6e:c2:80:00:58:f0:93:bc:fc:8a:16:9f:d3:3f:b6:56:89:
79:6f:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:45 2025 by rpki-client