Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: odaWUmsqsqxFdvVpvLzLaqrrl1lgFXTjpn4/x1FgASk=
Subject key identifier: E5:20:94:02:D6:83:07:B5:FD:F3:81:79:C3:92:AC:99:B9:63:43:F9
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01984DE6AA3B5B36517829B89E754135C54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0FD7
Signing time: Sun 27 Jul 2025 22:00:19 +0000
Manifest this update: Sun 27 Jul 2025 22:00:19 +0000
Manifest next update: Mon 28 Jul 2025 22:00:19 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: rsi5H9C4eUW4cOM4bAPjeXAliO6o5m0K8BnI55xqGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:aa:3b:5b:36:51:78:29:b8:9e:75:41:35:c5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Jul 27 22:00:19 2025 GMT
Not After : Jul 28 22:00:19 2025 GMT
Subject: CN=e5209402d68307b5fdf38179c392ac99b96343f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:6b:13:5b:06:a0:a6:14:08:c7:d0:28:88:
f6:a3:d0:fa:c3:bc:d5:c2:d5:a0:86:a7:75:8e:c4:
71:4f:a6:45:b8:22:19:92:c4:a7:d1:f4:64:ef:1a:
c1:f2:5d:7e:62:91:29:c8:b1:be:89:78:4a:6b:07:
de:12:56:54:70:cf:f3:86:6d:a2:3c:d7:f4:91:f3:
f0:2a:07:14:7d:91:f0:63:d9:7e:ca:5b:75:2c:82:
2f:5d:fd:4c:9d:63:69:b8:ff:71:a7:7f:57:54:f3:
f4:b1:5f:c6:98:5f:3a:df:7a:bd:71:9c:d3:c4:e4:
a3:63:a7:88:08:bc:be:53:8e:fa:8b:2b:0b:2b:78:
27:3e:3d:95:05:2a:39:6f:70:5a:1a:42:00:85:49:
66:18:c4:44:f7:48:66:4c:af:77:0b:12:0e:5f:72:
e5:5a:c3:f0:8c:7d:ca:b4:23:25:27:76:70:65:88:
fa:8c:8e:a9:1c:4e:0d:c0:d3:0d:71:4a:c4:bc:74:
51:20:c8:2a:ed:1b:bd:56:78:ca:39:01:5f:03:a7:
47:58:69:6d:f7:64:0f:5c:ea:37:ab:08:5b:0d:0e:
78:06:ae:d9:5d:c2:44:cd:82:2f:ac:c5:51:fa:5e:
23:3f:36:4f:24:09:2c:44:e3:ab:42:47:bd:79:1d:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:94:02:D6:83:07:B5:FD:F3:81:79:C3:92:AC:99:B9:63:43:F9
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:47:0b:f4:ba:f3:52:be:ee:42:17:9e:86:3c:48:1a:b9:2c:
fb:bb:a3:e1:64:79:29:01:00:1a:ae:c5:1b:6d:0f:03:5d:a6:
6c:de:19:a8:d9:20:fe:0e:0e:a6:55:2a:25:65:17:34:30:94:
99:56:bd:c0:1d:e5:b6:49:a3:bb:aa:6f:aa:de:04:e6:2f:2d:
7d:90:15:1e:b7:bc:dd:f5:0c:76:d3:5c:1e:95:0a:6a:83:3e:
45:a8:80:9b:65:e9:b4:a7:be:ec:f1:f9:59:60:b5:26:85:72:
9c:6a:d1:2a:58:7c:bc:d2:06:0e:25:91:94:01:67:fc:23:d2:
88:52:1d:2b:ed:bc:82:08:12:3d:b0:88:05:08:8a:11:48:84:
92:ad:e9:14:b5:ba:b2:aa:7f:fa:46:ff:ef:bf:f1:17:e4:32:
c2:ab:8e:69:42:04:96:8c:82:64:55:00:70:13:44:ee:79:67:
0f:e4:41:ce:7e:bf:03:a8:ad:86:9f:55:24:b3:74:fe:ba:1e:
e8:6d:7a:a5:66:c3:24:7d:3c:b8:d6:1e:52:33:39:8d:d9:c9:
5f:87:f6:a4:ba:2b:2d:59:16:b8:0b:c4:0b:7d:1b:96:aa:8b:
02:6f:63:13:b8:eb:59:61:f3:e3:02:49:cf:eb:60:e6:27:41:
79:56:2a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhN5qo7WzZReCm4nnVBNcVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj
NDlkMzEwHhcNMjUwNzI3MjIwMDE5WhcNMjUwNzI4MjIwMDE5WjAzMTEwLwYDVQQD
EyhlNTIwOTQwMmQ2ODMwN2I1ZmRmMzgxNzljMzkyYWM5OWI5NjM0M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0etrE1sGoKYUCMfQKIj2o9D6w7zV
wtWghqd1jsRxT6ZFuCIZksSn0fRk7xrB8l1+YpEpyLG+iXhKawfeElZUcM/zhm2i
PNf0kfPwKgcUfZHwY9l+ylt1LIIvXf1MnWNpuP9xp39XVPP0sV/GmF8633q9cZzT
xOSjY6eICLy+U476iysLK3gnPj2VBSo5b3BaGkIAhUlmGMRE90hmTK93CxIOX3Ll
WsPwjH3KtCMlJ3ZwZYj6jI6pHE4NwNMNcUrEvHRRIMgq7Ru9VnjKOQFfA6dHWGlt
92QPXOo3qwhbDQ54Bq7ZXcJEzYIvrMVR+l4jPzZPJAksROOrQke9eR3i2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUglALWgwe1/fOBecOSrJm5Y0P5MB8GA1UdIwQY
MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct
OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3
LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUcL9Lrz
Ur7uQheehjxIGrks+7uj4WR5KQEAGq7FG20PA12mbN4ZqNkg/g4OplUqJWUXNDCU
mVa9wB3ltkmju6pvqt4E5i8tfZAVHre83fUMdtNcHpUKaoM+RaiAm2XptKe+7PH5
WWC1JoVynGrRKlh8vNIGDiWRlAFn/CPSiFIdK+28gggSPbCIBQiKEUiEkq3pFLW6
sqp/+kb/77/xF+QywquOaUIEloyCZFUAcBNE7nlnD+RBzn6/A6ithp9VJLN0/roe
6G16pWbDJH08uNYeUjM5jdnJX4f2pLorLVkWuAvEC30blqqLAm9jE7jrWWHz4wJJ
z+tg5idBeVYqMA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 02:05:35 2025 by rpki-client