Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: rksPJHnxXWBGAZv9nYtGPqqMDy/wLStCWt7TPO8J6DA=
Subject key identifier: 10:5A:54:AE:D4:57:51:08:C2:E1:EE:C5:40:78:49:46:61:B4:0D:31
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 0199240D726BD76CF29DCFC8C87F3714EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 089B
Signing time: Sun 07 Sep 2025 12:01:24 +0000
Manifest this update: Sun 07 Sep 2025 12:01:24 +0000
Manifest next update: Mon 08 Sep 2025 12:01:24 +0000
Files and hashes: 1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: B8NgTX1j/LfzepaOiODPO2mJxBvuJ0fVb92t56d87ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:72:6b:d7:6c:f2:9d:cf:c8:c8:7f:37:14:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Sep 7 12:01:24 2025 GMT
Not After : Sep 8 12:01:24 2025 GMT
Subject: CN=105a54aed4575108c2e1eec54078494661b40d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:fb:89:8c:4f:5d:01:71:51:4f:6e:4c:fa:
b9:3c:3d:31:11:53:5c:72:9c:68:f9:4b:0d:5a:cb:
df:87:5e:84:05:30:6d:36:3f:f3:cd:37:8f:9d:9d:
37:7b:95:d8:25:1f:36:7d:ad:22:6b:e3:ca:0c:ca:
82:97:a0:ed:61:56:94:9c:67:f3:af:66:a9:e8:2b:
12:9d:b9:83:28:aa:9a:d8:bb:08:f2:af:d0:0d:0c:
a3:0e:03:82:21:02:e2:5d:25:04:6a:8f:1c:02:33:
69:11:a1:eb:76:0a:f6:da:c0:f7:61:b8:e6:50:16:
6f:2a:42:95:70:c2:4e:78:fc:94:24:ea:0f:76:17:
ea:ac:c3:a8:4b:71:bf:21:ff:cf:8b:7c:2f:e4:fe:
32:a9:12:70:2c:11:8a:aa:14:42:fb:39:a0:93:f2:
1a:2e:29:1f:52:39:8d:17:d5:5b:71:41:1e:cc:0e:
07:dd:da:93:47:b4:e3:da:25:eb:27:fe:21:53:6a:
58:25:10:8d:42:3b:f9:6a:72:2a:47:9a:44:5a:fb:
95:0d:74:44:6e:42:67:fb:da:97:4e:e3:25:0c:d4:
df:ed:91:30:19:d8:87:2e:59:86:da:a8:a3:2e:f5:
b5:58:c5:5c:e9:0f:4e:37:09:a3:98:30:ad:5a:84:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:54:AE:D4:57:51:08:C2:E1:EE:C5:40:78:49:46:61:B4:0D:31
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6d:93:be:00:51:70:a3:54:7f:fc:82:5d:f6:08:b2:ca:9f:
c5:38:d5:1f:59:7e:8f:4f:ec:f4:be:d6:ce:19:d3:96:c5:0d:
6c:a2:76:07:47:b4:a2:e1:7b:83:d9:f9:9f:d5:33:9e:b7:5e:
4d:01:d9:de:d9:4f:80:9d:cb:6a:20:03:17:67:fe:ef:05:0d:
56:f3:1a:8d:03:9a:e6:37:4d:89:70:08:09:ee:43:85:76:28:
7d:e8:cc:ff:f7:4f:16:03:b5:f6:99:58:9d:34:3e:d1:2c:99:
9c:59:c4:01:39:2d:c5:f0:e1:20:31:ff:f8:32:05:84:18:2c:
25:3c:6c:84:9e:71:de:21:ae:9c:3d:00:16:13:5c:a9:c1:ac:
e1:12:64:fd:a0:b3:b0:04:50:c9:ab:a9:02:32:12:84:40:9b:
0b:35:c5:6e:e9:9d:12:85:34:fa:7c:71:1d:ba:b7:17:fa:67:
cc:61:cd:62:58:b7:93:d5:05:e6:28:1d:68:1c:eb:a5:25:91:
ce:e5:de:25:9c:c4:02:5e:99:c7:c5:ca:7d:bc:cb:96:fe:91:
ab:1a:19:f3:c1:d0:c1:83:ce:2a:5b:2e:39:ae:37:6f:ae:1c:
07:9e:70:96:d6:42:30:a3:8b:4c:5c:1f:c7:48:9c:ee:fa:4d:
04:b0:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:36 2025 by rpki-client