Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: VMTMxnFpaHyj2mPt+KzLSiGNPa281sh7RDaAOCzC1iw=
Subject key identifier: B3:AE:70:B8:CE:74:9E:87:FB:61:37:F5:9D:2C:59:E9:F2:E9:0B:58
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 019922557BF96E07B2EEEA5571EFCD58988B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 15C7
Signing time: Sun 07 Sep 2025 04:00:51 +0000
Manifest this update: Sun 07 Sep 2025 04:00:51 +0000
Manifest next update: Mon 08 Sep 2025 04:00:51 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: EmO1hhwGzVRDGe1PI1OZyF12+L0UY2XkhOTH0ZWT58c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7b:f9:6e:07:b2:ee:ea:55:71:ef:cd:58:98:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Sep 7 04:00:51 2025 GMT
Not After : Sep 8 04:00:51 2025 GMT
Subject: CN=b3ae70b8ce749e87fb6137f59d2c59e9f2e90b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:62:83:3a:d3:76:ea:76:64:3b:1e:64:c9:
83:7e:69:58:3c:8b:be:97:53:ce:7a:25:86:92:99:
40:9c:e1:2f:84:db:1a:37:f9:48:8f:3c:af:f4:18:
83:0c:14:2f:d0:c9:95:31:8b:81:1f:d3:84:ec:b3:
2e:36:a6:65:c3:05:ae:c9:34:68:29:0b:43:52:10:
19:37:3b:b2:11:72:d4:c8:ab:dd:40:87:dd:fb:8d:
58:74:3f:76:d3:8e:f8:0a:7c:c1:95:f2:a6:d2:89:
f8:b6:60:50:ab:0c:ff:14:57:90:dd:b2:3a:ec:e8:
a1:ed:a3:48:55:e0:f0:b4:11:7e:ab:a4:e4:96:49:
4e:c0:c0:32:78:5e:18:1d:15:5f:bd:7c:1d:ab:17:
3a:b6:d7:ed:ba:a0:84:33:93:cf:6c:01:93:d4:5e:
fd:4b:3c:97:04:20:99:16:b8:1e:a9:91:e4:cd:64:
05:a9:1c:ea:36:1d:c4:7a:17:51:4f:e5:3e:d2:37:
33:73:07:b8:72:d2:2f:7b:be:c7:6b:bd:62:78:b4:
08:1a:21:4d:19:c7:f4:cf:80:88:f7:95:bd:63:40:
bd:88:36:4a:1d:4d:13:c0:1e:3f:97:70:13:04:ba:
eb:48:9e:a2:58:97:6c:1a:c4:53:b7:06:49:3b:b7:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AE:70:B8:CE:74:9E:87:FB:61:37:F5:9D:2C:59:E9:F2:E9:0B:58
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:09:0f:bf:29:1a:78:f0:ba:08:72:f3:20:a9:f5:5d:fc:
67:e0:cc:57:a7:65:da:d2:95:71:32:7f:41:a7:c0:35:21:18:
e2:d8:91:85:8e:39:54:a9:3b:82:8e:82:e6:40:f0:dd:53:ad:
d6:80:ee:75:09:14:cb:9d:63:10:3e:95:85:9b:42:48:e1:3e:
37:61:35:65:80:fb:9c:d5:11:20:2b:32:78:2e:fb:d3:5e:0b:
82:82:83:0b:54:65:3f:ce:88:43:f9:59:81:90:43:2c:15:aa:
d5:dd:b2:fe:6a:3e:15:a6:c4:d0:e7:74:60:9c:10:0c:45:b4:
d2:da:f0:ed:43:ef:18:18:67:db:9b:fb:59:51:2e:92:64:69:
25:67:b2:13:91:cd:97:99:f5:ab:ed:60:42:e5:4c:f2:44:7e:
46:6d:a0:c7:06:a0:46:29:f9:56:17:61:37:24:94:5e:62:e0:
37:a2:b7:30:a7:53:29:16:1d:74:e2:eb:cb:87:a4:cf:c3:ac:
3a:59:fd:d1:75:c7:d4:3f:99:8c:32:15:a8:ba:25:85:a4:a5:
66:82:56:54:09:e3:e7:f2:22:df:10:8f:15:1c:f8:af:74:92:
e3:fb:8d:dd:2a:f0:f9:1d:2d:2d:a2:e6:24:8f:ee:54:fd:dc:
23:82:c8:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVXv5bgey7upVce/NWJiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTNkMGJiNDIyYjBiY2E3MDY3MTZjMjBmN2FkNThkZDI3
NjU0NzEwHhcNMjUwOTA3MDQwMDUxWhcNMjUwOTA4MDQwMDUxWjAzMTEwLwYDVQQD
EyhiM2FlNzBiOGNlNzQ5ZTg3ZmI2MTM3ZjU5ZDJjNTllOWYyZTkwYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUBigzrTdup2ZDseZMmDfmlYPIu+
l1POeiWGkplAnOEvhNsaN/lIjzyv9BiDDBQv0MmVMYuBH9OE7LMuNqZlwwWuyTRo
KQtDUhAZNzuyEXLUyKvdQIfd+41YdD920474CnzBlfKm0on4tmBQqwz/FFeQ3bI6
7Oih7aNIVeDwtBF+q6TklklOwMAyeF4YHRVfvXwdqxc6ttftuqCEM5PPbAGT1F79
SzyXBCCZFrgeqZHkzWQFqRzqNh3EehdRT+U+0jczcwe4ctIve77Ha71ieLQIGiFN
Gcf0z4CI95W9Y0C9iDZKHU0TwB4/l3ATBLrrSJ6iWJdsGsRTtwZJO7ddKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOucLjOdJ6H+2E39Z0sWeny6QtYMB8GA1UdIwQY
MBaAFL2j0LtCKwvKcGcWwg961Y3SdlRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEt
ZjIzMjgzNjAxNzY0LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEtZjIzMjgzNjAxNzY0
LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexQJD78p
Gnjwughy8yCp9V38Z+DMV6dl2tKVcTJ/QafANSEY4tiRhY45VKk7go6C5kDw3VOt
1oDudQkUy51jED6VhZtCSOE+N2E1ZYD7nNURICsyeC77014LgoKDC1RlP86IQ/lZ
gZBDLBWq1d2y/mo+FabE0Od0YJwQDEW00trw7UPvGBhn25v7WVEukmRpJWeyE5HN
l5n1q+1gQuVM8kR+Rm2gxwagRin5VhdhNySUXmLgN6K3MKdTKRYddOLry4ekz8Os
Oln90XXH1D+ZjDIVqLolhaSlZoJWVAnj5/Ii3xCPFRz4r3SS4/uN3Srw+R0tLaLm
JI/uVP3cI4LI+w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:20 2025 by rpki-client