Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: u3rFs+WlEGmDUN27kvgbtNyvzAamjrnRyw+i5hUD6gg=
Subject key identifier: 3A:8F:D9:58:18:4B:D1:B2:AA:5F:05:C4:C4:29:E2:A4:DC:11:4F:07
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 019A72258AC20101C7D4DA2FE76A113F37B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0948
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: tLR6ghOZxixc4o+alvYRAvD+XwC2sY7Vwf9UjuMtcQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8a:c2:01:01:c7:d4:da:2f:e7:6a:11:3f:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=3a8fd958184bd1b2aa5f05c4c429e2a4dc114f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:62:cc:0e:7c:b8:8d:50:9a:bd:87:95:0c:
a1:04:01:4e:1f:27:3d:1e:fc:7b:08:d6:cd:55:6a:
f7:f8:9e:8e:c1:54:fe:ed:19:71:62:70:b5:af:5d:
17:d8:f3:42:73:85:2b:4f:85:9e:46:d8:58:81:a5:
9f:c8:54:88:22:84:f5:19:b1:c3:f2:bf:3d:05:83:
cd:ea:e3:48:a8:af:b1:ce:0a:f4:87:45:82:db:27:
65:a7:26:b7:bc:29:72:b7:ad:2c:61:b3:e4:a0:4c:
99:33:23:5e:d7:d3:ec:36:68:dc:84:a0:4e:88:7f:
3b:2e:c9:94:c6:01:79:a1:23:af:a2:14:62:c9:ec:
70:70:f4:a1:e0:03:a4:af:16:90:f3:a7:f2:3c:cc:
ee:71:8a:78:4b:17:1e:44:33:e7:56:9a:1b:a0:06:
39:e0:9a:33:9b:af:4f:ef:45:03:ad:c1:a6:80:d3:
42:28:48:f1:dc:b0:f7:84:e9:e8:09:c8:d9:4f:05:
24:9d:32:eb:ac:40:2d:9e:b8:47:d9:24:da:60:e7:
b0:a1:51:25:a5:52:fc:8c:fb:66:e0:77:f2:44:3e:
7a:cf:02:da:ca:a0:03:ac:15:d9:82:89:2c:79:66:
f6:df:00:1a:25:bc:3c:e3:d1:a0:95:2b:d6:e8:39:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:D9:58:18:4B:D1:B2:AA:5F:05:C4:C4:29:E2:A4:DC:11:4F:07
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:d2:2b:31:96:fc:58:56:6d:e0:5e:bc:4e:d5:f4:c8:b5:
70:43:83:59:47:61:ab:f3:5b:74:fc:67:61:c3:3c:28:97:16:
47:a4:7c:ac:20:70:18:bc:af:c4:b4:9c:52:31:10:07:d0:8c:
c2:8c:8e:a4:0b:e8:94:27:93:00:94:08:aa:f1:8e:0b:c3:ad:
19:ad:2d:be:e5:58:56:8f:1b:83:cc:02:19:19:b1:42:4c:16:
9d:1f:14:7e:e3:8f:75:f6:0d:28:4d:18:80:22:4b:51:d5:c7:
46:af:6e:fe:a4:02:61:a7:ff:c1:22:57:42:71:6c:be:5e:a2:
22:07:69:d2:2a:2f:85:f5:99:12:8e:d9:e8:b8:56:7d:f9:b4:
ab:45:2d:3f:dd:1b:34:9e:30:4b:00:e9:2d:d4:c8:d8:a8:62:
0c:3b:2e:3c:6e:22:5e:70:45:a8:ff:3a:b9:8a:71:0d:cd:17:
ef:c1:8d:14:c2:19:a6:bf:13:9f:5c:21:a3:65:4d:22:13:9b:
19:b6:73:74:f2:f7:3c:f6:90:72:90:99:64:41:4a:15:1c:f7:
96:6b:64:d8:11:23:cd:5e:66:b4:a5:9f:e5:a6:b0:03:45:d7:
34:bf:6c:35:7d:85:59:13:a7:c1:76:7d:72:9e:56:2a:3d:37:
94:cf:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:37 2025 by rpki-client