Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: oJuBz8LKEPyh5M1gEU3sucDKdhIYtC0R9f77ShN8cJ8=
Subject key identifier: 77:1A:BD:90:01:D5:F1:79:FE:2D:9B:09:9D:7C:F4:1E:59:57:A0:CF
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 019A4DAAB157589959233E985DC11C11E6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 1662
Signing time: Tue 04 Nov 2025 07:00:23 +0000
Manifest this update: Tue 04 Nov 2025 07:00:23 +0000
Manifest next update: Wed 05 Nov 2025 07:00:23 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: OEMQ5TMNEs3S6Wui9b4qw4S47uxmVvts3116sTyU6y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b1:57:58:99:59:23:3e:98:5d:c1:1c:11:e6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Nov 4 07:00:23 2025 GMT
Not After : Nov 5 07:00:23 2025 GMT
Subject: CN=771abd9001d5f179fe2d9b099d7cf41e5957a0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:2e:3d:f0:31:92:18:5b:17:4d:5f:34:67:
06:ea:33:25:d8:19:55:d2:48:78:8b:af:c9:3f:17:
9e:3a:a4:8e:07:c5:d6:45:e4:ad:e6:ed:a7:e4:5e:
a2:c4:72:ff:15:52:08:de:db:f4:12:04:35:db:54:
c7:af:98:27:d1:81:1d:a0:66:ef:1c:c3:0b:45:25:
78:d9:af:52:73:42:1f:69:2a:93:ca:d0:1c:aa:5a:
be:c4:a8:2e:13:1f:67:1d:95:74:ad:a0:87:01:5b:
ae:26:77:b8:57:a2:4d:2a:79:e6:f8:a1:f7:ef:43:
ef:f9:e0:e7:7d:3e:6e:3c:7f:c8:b2:6c:a1:d0:5f:
0d:18:d2:af:22:ca:e8:1f:ac:cd:8a:c4:a2:56:94:
58:37:73:8e:aa:a9:40:37:96:86:c5:e3:51:6d:fb:
93:d7:65:0d:0f:e1:ee:51:24:5a:8d:49:b7:2f:94:
4d:d7:0f:de:79:e4:8c:e9:f2:f1:6c:36:80:a7:e3:
64:9c:48:20:76:b0:81:5f:de:20:05:a9:e1:1a:49:
fb:aa:98:b7:63:fa:d0:ac:d7:89:a3:c3:b2:0a:63:
6f:c2:9d:92:dc:05:ab:43:9b:7a:0c:5f:60:a3:14:
db:5b:84:fe:cd:f9:68:29:a1:6d:d4:fd:a9:d5:c0:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1A:BD:90:01:D5:F1:79:FE:2D:9B:09:9D:7C:F4:1E:59:57:A0:CF
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:eb:84:33:97:43:5d:e9:34:6f:b4:37:51:29:6f:3d:cc:64:
31:bb:68:af:a0:91:97:0c:cb:eb:c7:48:2a:15:7d:11:51:e8:
0d:03:59:f8:5e:19:b7:68:64:49:f2:b7:b5:ab:af:f5:dd:36:
4e:f6:e5:96:fa:fe:80:8d:17:8f:fe:e4:c2:2b:82:ab:ec:58:
18:41:0f:19:a2:8a:f9:d7:e2:e8:e6:9a:39:1c:5d:4d:5b:75:
07:9e:bc:46:3e:4a:5a:00:4f:d5:9e:88:cf:70:ca:0d:e3:b1:
d2:c0:6f:a2:ce:c3:7d:df:54:36:f6:d5:0f:36:c2:42:c0:d6:
0c:27:e6:30:5b:64:8b:78:7e:a7:42:92:4d:49:d4:6e:19:d5:
a5:15:50:fb:d8:65:cb:4c:23:be:2e:d0:47:78:e5:c9:a9:4b:
75:35:9f:7f:a9:f1:0d:27:6a:5c:d2:81:08:36:46:73:e8:4b:
1a:2f:01:0d:33:56:bb:1c:c0:4e:37:e8:47:8a:a5:47:9d:35:
3d:8d:de:d3:bd:d9:29:1b:7d:82:9a:38:72:8c:ac:b3:ed:04:
9d:12:df:cf:2b:5a:d5:35:e6:a4:8e:1f:3d:39:d9:d0:87:a2:
8d:ac:f7:a7:b6:dc:ea:29:e6:d1:78:4a:8e:1a:bb:af:e2:39:
be:ad:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:00 2025 by rpki-client