Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: D9q9IiT3h7BpOt6m7DVHr3rEighIaGhzIbIbE36du8Q=
Subject key identifier: C4:89:82:60:FF:75:43:17:B0:6A:2D:F2:60:AF:D6:BC:09:8F:5C:9F
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 01965BA78B444FE7180812A360FBF0FC51CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: FB
Signing time: Tue 22 Apr 2025 04:00:28 +0000
Manifest this update: Tue 22 Apr 2025 04:00:28 +0000
Manifest next update: Wed 23 Apr 2025 04:00:28 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: ho3Y/HjJ1dXg93DnIOyUxiZCBHxodsQOpH0DmTEzhAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:8b:44:4f:e7:18:08:12:a3:60:fb:f0:fc:51:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Apr 22 04:00:28 2025 GMT
Not After : Apr 23 04:00:28 2025 GMT
Subject: CN=c4898260ff754317b06a2df260afd6bc098f5c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:e1:a5:f5:09:f9:f0:03:87:74:07:72:05:
96:1d:10:fc:18:87:31:5b:d6:74:2c:75:40:8a:3c:
f0:e0:3a:8d:4b:f4:c6:14:42:a0:18:c5:af:0a:87:
39:68:e8:52:bc:64:88:f9:28:7a:f4:50:05:55:2e:
1f:f1:f8:12:4d:cb:ba:2d:8a:b3:dd:96:6a:56:21:
a7:72:b1:bf:19:a9:ee:1a:21:4d:1e:2d:0b:35:94:
c1:6b:83:b2:4c:f8:24:15:51:f0:6e:03:b4:5b:e8:
8a:f3:30:55:04:13:fe:79:f7:5f:23:39:63:94:ba:
ac:cb:5e:43:b8:9f:f4:a3:f8:47:e9:fc:e0:1e:96:
7e:a5:8d:ba:e7:20:49:e2:73:dc:a9:2f:da:22:fc:
d0:bd:d5:4b:29:eb:3e:69:ea:90:0a:36:8b:3b:b0:
e6:c1:03:bf:94:2f:ee:91:31:80:58:fd:26:9d:10:
11:ef:a9:99:8f:d7:b5:a9:88:df:ff:a7:49:38:80:
cb:f5:3e:57:c9:8a:70:22:51:73:cf:76:8b:90:bf:
c5:96:af:11:08:8a:e4:7f:b1:ae:6d:04:84:26:7f:
49:8d:32:c2:8c:4b:bc:00:4e:41:ef:fe:91:58:dd:
90:82:e4:05:ba:06:d0:6e:e3:86:f1:cd:f4:42:a1:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:82:60:FF:75:43:17:B0:6A:2D:F2:60:AF:D6:BC:09:8F:5C:9F
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c2:72:f2:6b:68:c5:12:ac:db:a7:8e:e0:79:9c:93:99:55:
9d:99:d9:96:61:f3:06:ad:e5:49:cd:71:5d:eb:da:43:33:a4:
52:32:f2:47:b9:80:a8:6d:13:d5:47:57:fb:55:18:f7:21:83:
b5:b4:58:18:77:f9:b9:a5:e2:07:83:f4:f1:7a:ed:b9:7c:72:
30:6d:f1:3d:8c:64:39:66:93:e6:66:cb:0b:21:8d:2d:d7:fc:
ec:ea:b9:c1:f0:23:62:7a:75:83:a3:37:bf:05:6c:b0:26:e5:
d9:d1:96:76:0f:b8:75:a8:35:28:95:c9:ea:fc:19:2a:f4:b2:
e7:35:4a:f1:a5:91:3f:51:0d:e2:51:f1:b1:26:33:07:8b:65:
17:e1:fc:c8:c4:93:89:b8:72:f0:dc:58:12:a2:d6:11:6d:80:
bc:ff:3f:e4:b0:51:ee:e1:dc:df:8a:a2:67:b3:f4:90:eb:d9:
a5:fe:43:c8:ca:08:eb:ac:8d:87:13:57:2f:0d:e6:53:46:99:
3c:4a:2d:dc:0f:7d:47:b0:5b:97:12:e5:49:bd:d0:24:58:94:
8a:d5:c9:40:b9:9f:a8:da:97:d8:d7:4e:ae:e0:a7:2d:95:dc:
2c:43:ad:0d:79:4e:b1:fc:28:b6:6d:85:d6:4d:b6:f1:db:aa:
03:ee:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:51 2025 by rpki-client