
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: 376MWfKeR7UjThqQDPIgBQYr9rQoR7GyLlaEF+l/F/8=
Subject key identifier: CA:37:19:EC:92:32:DB:B6:61:50:0F:D5:B5:B1:65:8F:76:18:C8:02
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 0198D6CD98C3633635E77533922DCCEBDCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0873
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: nESlATmkidrvITYm+jK0AQlCeG1PhluXkh+eakK07zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:98:c3:63:36:35:e7:75:33:92:2d:cc:eb:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=ca3719ec9232dbb661500fd5b5b1658f7618c802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:0c:be:3a:de:a3:e0:41:04:3c:b6:a4:e4:
b0:ec:05:d9:8b:56:60:bd:32:a2:04:48:be:6a:93:
5e:11:98:01:ab:ea:fa:49:c6:d4:36:38:84:ef:ae:
09:7a:3f:26:1d:46:5a:ac:5a:86:c7:ef:42:7f:17:
13:67:aa:a0:47:15:f2:5a:06:3c:f2:e7:2d:4d:1b:
5f:28:5e:78:38:e2:7c:ae:61:be:ef:9d:15:93:24:
48:8c:24:e5:9f:dd:7e:83:28:7e:63:de:f1:13:49:
38:a0:6c:9f:fa:33:83:92:10:89:7a:64:57:b0:45:
d5:b3:dd:53:eb:6c:2c:0e:b9:f2:55:4e:35:cb:2b:
29:89:c7:e9:6c:cb:06:07:f9:c6:64:c1:bb:f2:8d:
8e:30:ea:f9:93:7c:d4:73:5c:6d:03:21:74:2f:ea:
86:6e:fa:20:18:3b:d7:6f:da:93:6b:75:ae:e2:5a:
41:29:60:37:d1:cb:8e:48:b1:c9:a3:a0:84:80:c4:
ca:d4:03:bd:47:78:92:b7:b7:4d:fa:62:bb:0c:49:
8e:84:3f:5a:84:f8:82:1c:08:93:75:82:de:89:44:
45:22:c2:ad:b1:5a:48:3d:35:11:f1:2f:b2:1e:a3:
89:88:cd:8f:b2:b7:11:28:f0:62:8e:1b:c3:4d:85:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:19:EC:92:32:DB:B6:61:50:0F:D5:B5:B1:65:8F:76:18:C8:02
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6f:fb:d0:8a:10:ea:db:2d:be:a3:75:e1:7a:1f:41:84:13:
a4:0f:f5:00:90:1e:93:10:5f:9c:a9:5d:27:4d:ba:e6:4e:e7:
1e:0c:33:3f:86:ef:f5:1b:73:4e:46:84:a7:e5:e9:a3:70:f0:
e9:8b:61:36:5d:db:cd:7f:df:b4:eb:7b:72:7c:9e:b6:6f:fe:
97:4a:0d:fc:f8:70:0b:89:c5:af:b8:42:ea:7f:20:ed:f9:4e:
5d:89:45:f9:4b:01:35:3c:cc:54:d0:d4:79:67:3f:d3:f4:08:
cf:63:5c:04:8e:fa:0b:b8:99:0d:73:20:7d:00:e5:52:95:16:
00:34:0f:99:d4:1d:ca:58:b5:0c:2c:83:f0:ed:62:0d:0c:c6:
70:6c:62:35:06:b4:bd:db:64:33:44:e8:49:47:22:d9:d5:de:
4a:9f:d8:22:3b:3f:9f:69:ac:65:11:54:92:97:40:76:48:1a:
18:61:74:b3:77:69:fb:a6:58:77:42:ba:c1:0b:58:10:1e:21:
67:e9:89:2b:8b:88:7f:c6:ee:58:56:58:c8:3f:47:01:63:47:
35:20:e0:01:60:73:e7:3b:04:61:22:6c:0a:9b:6d:6a:e7:cf:
cb:78:17:c8:08:60:84:ec:12:94:55:ec:43:35:f5:62:91:13:
8a:8f:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:03 2025 by rpki-client