Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: Cb33gI1pGLEPWOnouprtRU6VYWpPPhrXqybypgenCkA=
Subject key identifier: AB:2D:FB:41:94:F1:26:28:A7:C2:72:AF:EC:80:CF:3B:93:9A:21:EA
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 019A725C78513F6428637D3C618C3A7AD7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 10F3
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: vL8uD1MSaegxBjOkGj8esJ+PD+GFqxhG0AII/saWjg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:78:51:3f:64:28:63:7d:3c:61:8c:3a:7a:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=ab2dfb4194f12628a7c272afec80cf3b939a21ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:36:b8:6d:a7:d0:79:61:9f:53:ee:12:a9:
54:3b:7e:1e:93:da:bb:26:2c:3c:5e:3d:ca:a2:a6:
48:95:c0:7c:1c:4c:bc:13:4c:5b:0e:44:b5:8c:fa:
b4:e1:6a:28:7f:a9:b6:41:62:ca:c6:80:57:18:81:
37:bb:5d:48:bb:b5:85:e5:b9:b6:95:37:38:25:ac:
17:c0:bc:ff:0f:d7:bb:d7:30:d7:2c:44:7e:ce:2b:
e4:53:68:d8:3d:ab:ef:0d:32:2e:c2:fb:df:40:7d:
c3:4f:b8:53:c2:93:24:11:b6:65:a0:28:29:40:ef:
b8:64:82:48:10:d3:85:39:47:73:dd:d4:2e:ec:ea:
e8:41:a3:ea:54:dc:5f:a1:45:e6:8c:f2:99:09:62:
15:85:bf:3a:bf:0d:e7:ad:1d:29:ab:6e:07:98:10:
42:9d:e8:ca:b1:f9:04:37:37:77:e6:4f:61:39:79:
7f:6f:6a:67:e7:78:36:36:fa:ae:c1:dc:52:95:0a:
2a:06:68:f1:17:aa:1a:b1:56:48:a1:c1:ca:8c:ff:
e3:4a:53:b0:7c:3f:9b:1d:af:87:cb:77:16:9c:13:
cb:d4:45:77:1b:9f:58:6d:ca:51:2f:1a:aa:07:48:
31:41:ec:95:69:38:c1:db:34:db:de:72:e9:77:1b:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:FB:41:94:F1:26:28:A7:C2:72:AF:EC:80:CF:3B:93:9A:21:EA
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:99:b3:df:cb:61:dc:43:47:93:d8:bb:98:59:7c:a7:73:3b:
a4:9d:78:21:31:d2:35:6a:92:71:a6:a6:f3:2f:d5:0f:d1:ba:
14:ec:d5:68:f8:5e:50:4e:d4:8b:43:a0:02:22:1e:8f:02:f4:
8e:48:5c:4e:27:d2:84:8c:2f:54:6c:c4:eb:57:8d:ad:25:5d:
4a:96:1f:b9:94:97:70:9d:a0:34:35:83:b8:ea:ca:70:7d:fe:
5b:21:bb:f0:9d:9d:e3:ed:83:c8:87:9d:47:f4:be:c4:18:8e:
8e:f2:28:74:f6:9b:06:36:54:20:ac:ba:1e:26:d2:e8:43:98:
98:04:79:b8:65:28:6f:b7:12:79:f5:59:1d:ab:61:72:f8:6d:
2d:48:0e:ac:ad:13:e2:95:24:9e:bb:bf:a6:ed:5b:80:2d:cc:
f4:a9:82:28:07:bc:c7:42:6d:93:8a:ec:f0:ef:2e:fd:cf:0a:
d3:02:37:23:82:21:30:c5:9c:5b:8a:fc:cf:8b:46:19:c4:fb:
88:67:32:75:f8:8b:1e:4a:26:7f:17:a9:be:4c:ed:f5:9e:e9:
eb:fd:41:ba:70:77:ef:98:78:cd:44:84:15:ea:e4:a5:32:1e:
c3:d3:be:d3:f1:d7:dc:1f:6e:63:05:bb:ac:95:21:df:c9:f0:
25:5f:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client