Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: McpLlNrv0QI8pDiMtV3iAygg1WdWPWPaMpQ3rfWVdwA=
Subject key identifier: FD:0B:21:8B:3B:A0:F8:AA:12:CB:CA:1E:E2:93:03:49:5F:03:A9:EE
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019A04ECA2385109AE261157DF88A7968899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 05C8
Signing time: Tue 21 Oct 2025 04:00:07 +0000
Manifest this update: Tue 21 Oct 2025 04:00:07 +0000
Manifest next update: Wed 22 Oct 2025 04:00:07 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: sTQcm2kSEB53rNYMZXfENHoEzUBF9xlP4h/aD1ftfUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ec:a2:38:51:09:ae:26:11:57:df:88:a7:96:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Oct 21 04:00:07 2025 GMT
Not After : Oct 22 04:00:07 2025 GMT
Subject: CN=fd0b218b3ba0f8aa12cbca1ee29303495f03a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:23:20:b3:e8:1f:16:cb:68:fe:69:54:86:
73:24:84:f4:73:de:85:cf:07:dc:1d:9c:2a:25:2c:
dd:d2:f1:11:b4:35:8e:50:55:e0:da:49:96:26:aa:
76:7b:c0:2b:b8:1d:70:74:51:3f:3f:5e:0e:8c:d4:
59:60:0e:1c:38:ec:93:e6:6d:56:32:eb:e5:a0:9e:
3b:40:42:0e:a8:3a:05:7d:22:75:d5:70:5e:6b:f5:
2e:8d:aa:36:d5:21:5b:c3:55:90:db:76:b2:41:94:
4e:c2:5e:6f:b8:f5:3d:f1:f5:64:84:d5:65:be:29:
68:9d:f6:b6:12:08:f1:db:ef:75:df:17:35:66:f5:
61:33:e2:8b:db:9b:d8:98:48:75:a2:78:0e:bf:09:
a7:86:6f:9c:44:45:e5:48:eb:b4:27:93:43:12:81:
ad:88:bf:e1:ca:3a:69:c2:ff:ff:8c:bd:b9:e8:3a:
84:e2:9f:c2:31:17:ee:4a:c2:a3:dc:14:46:bd:b6:
85:3f:70:f0:90:c0:32:53:cc:07:c3:2a:1a:3a:7b:
eb:32:81:54:ca:8c:d7:c8:83:82:da:d2:c5:cc:19:
53:78:69:96:7f:c7:64:62:d8:d1:23:e5:a9:a4:e0:
44:1c:7c:57:c8:02:30:5b:bb:7e:b6:fc:10:42:b5:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:21:8B:3B:A0:F8:AA:12:CB:CA:1E:E2:93:03:49:5F:03:A9:EE
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b4:8f:51:85:7d:e8:c4:c1:45:bd:e7:5f:2e:d6:a9:cb:a5:
47:8b:bb:36:c0:de:58:2b:b0:68:1b:24:01:e3:1b:36:79:f3:
84:d0:1a:36:ea:5e:48:50:2e:09:db:8b:b7:20:06:1a:56:fa:
ef:f1:02:78:86:bb:d5:47:4c:27:81:10:24:e7:3a:89:e2:79:
41:1c:ed:89:03:2e:dc:bc:1f:4d:09:3c:9a:65:96:d1:66:19:
14:a7:6d:96:5e:cf:e9:34:98:7e:12:11:53:36:d1:7a:69:4e:
72:04:b1:1d:0d:b0:a6:d7:eb:8c:4b:94:c4:9b:d3:fd:3f:8d:
e0:74:f1:ed:65:aa:e7:a0:ca:5a:29:f7:21:12:47:7c:90:24:
f4:78:d4:e2:3b:52:da:33:fe:d4:23:be:5c:11:0c:e3:e8:35:
98:4a:58:01:b3:6e:7f:68:13:12:61:52:eb:52:86:65:54:11:
e0:b5:ad:27:b0:5b:b1:37:59:6b:34:db:4e:02:1c:38:1c:e2:
a9:48:4b:25:c0:f5:61:f5:70:da:5f:76:ce:d9:ee:37:d2:6e:
c3:b4:6e:5d:9e:d8:f2:65:cf:ee:20:99:0a:32:77:3f:cb:ec:
46:02:c5:74:82:b9:8c:3b:2c:ac:c1:b0:19:43:f0:7e:7a:93:
c0:8d:2d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoE7KI4UQmuJhFX34inloiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjUxMDIxMDQwMDA3WhcNMjUxMDIyMDQwMDA3WjAzMTEwLwYDVQQD
EyhmZDBiMjE4YjNiYTBmOGFhMTJjYmNhMWVlMjkzMDM0OTVmMDNhOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVEjILPoHxbLaP5pVIZzJIT0c96F
zwfcHZwqJSzd0vERtDWOUFXg2kmWJqp2e8AruB1wdFE/P14OjNRZYA4cOOyT5m1W
MuvloJ47QEIOqDoFfSJ11XBea/Uujao21SFbw1WQ23ayQZROwl5vuPU98fVkhNVl
vilonfa2Egjx2+913xc1ZvVhM+KL25vYmEh1ongOvwmnhm+cREXlSOu0J5NDEoGt
iL/hyjppwv//jL256DqE4p/CMRfuSsKj3BRGvbaFP3DwkMAyU8wHwyoaOnvrMoFU
yozXyIOC2tLFzBlTeGmWf8dkYtjRI+WppOBEHHxXyAIwW7t+tvwQQrUbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0LIYs7oPiqEsvKHuKTA0lfA6nuMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLSPUYV9
6MTBRb3nXy7WqculR4u7NsDeWCuwaBskAeMbNnnzhNAaNupeSFAuCduLtyAGGlb6
7/ECeIa71UdMJ4EQJOc6ieJ5QRztiQMu3LwfTQk8mmWW0WYZFKdtll7P6TSYfhIR
UzbRemlOcgSxHQ2wptfrjEuUxJvT/T+N4HTx7WWq56DKWin3IRJHfJAk9HjU4jtS
2jP+1CO+XBEM4+g1mEpYAbNuf2gTEmFS61KGZVQR4LWtJ7BbsTdZazTbTgIcOBzi
qUhLJcD1YfVw2l92ztnuN9Juw7RuXZ7Y8mXP7iCZCjJ3P8vsRgLFdIK5jDssrMGw
GUPwfnqTwI0ttQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:04:48 2025 by rpki-client