Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: ak+zYBgHBbb8gCv0LrY/UnLXDnmjSKOyMOJTC/o2A9k=
Subject key identifier: 5E:67:F8:A9:4E:3B:5B:ED:4C:FD:A5:B5:C7:03:F4:8C:F2:0F:CC:1D
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 019A05C89BE7655165F5C5BC78D0EB832160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 12DF
Signing time: Tue 21 Oct 2025 08:00:24 +0000
Manifest this update: Tue 21 Oct 2025 08:00:24 +0000
Manifest next update: Wed 22 Oct 2025 08:00:24 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: CQCZo7ht+8VJjDB7dTIpNA2uhC5hlzDMIq8o9+KHYYU=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:9b:e7:65:51:65:f5:c5:bc:78:d0:eb:83:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Oct 21 08:00:24 2025 GMT
Not After : Oct 22 08:00:24 2025 GMT
Subject: CN=5e67f8a94e3b5bed4cfda5b5c703f48cf20fcc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:d0:a6:88:e6:0c:4f:43:4d:07:0f:13:65:
d9:56:e3:bc:f2:fe:8f:70:84:2b:00:e1:a7:35:94:
d0:08:05:57:e0:a8:ed:e1:47:5a:a5:af:09:c8:79:
e3:a8:d3:12:e8:f4:52:35:c0:88:f6:46:34:2f:60:
e3:14:df:54:f6:32:c7:7a:02:3c:5c:e3:8d:20:6c:
ca:76:88:28:36:1e:bd:25:dc:40:be:25:db:79:a7:
10:a3:19:2b:62:30:c2:e7:22:5f:92:21:de:4f:de:
58:01:7c:1f:c6:46:ea:60:e3:a4:c5:67:ec:d4:92:
ea:62:72:83:74:5d:17:d1:9c:70:30:e9:64:7e:4d:
65:0e:75:1a:02:83:55:aa:37:1e:ca:89:7c:9d:2e:
dc:07:7d:52:e8:8a:f9:70:fe:f6:a1:99:5f:56:e0:
ff:5f:d9:48:8e:4c:fc:15:db:61:e7:86:2b:45:f1:
18:1c:4a:38:61:f8:6b:7f:66:da:9a:7c:47:30:e6:
6f:8b:a1:09:8e:04:12:38:c6:94:d0:78:3a:31:5d:
f9:13:e2:79:c2:4d:c8:60:7c:3a:b8:01:be:c1:e8:
69:ac:e1:23:e2:d3:3a:84:19:07:ee:57:10:44:85:
f9:78:01:55:b8:0b:08:d8:cc:83:0b:6d:c9:cb:84:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:67:F8:A9:4E:3B:5B:ED:4C:FD:A5:B5:C7:03:F4:8C:F2:0F:CC:1D
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:08:4e:b6:56:7e:37:e5:4e:3f:24:fd:8f:20:4f:fe:72:
1f:6e:61:1b:ab:dc:7b:27:a1:e3:1a:f1:6c:cd:51:65:4a:a2:
04:6c:e0:f4:da:05:4a:46:af:e8:9e:86:a0:c1:ec:0b:7b:0e:
6d:1e:94:7c:62:91:fe:ed:e1:51:88:58:f2:46:68:97:8d:8f:
74:93:b9:d4:6f:33:92:c3:2b:eb:76:50:07:7e:ff:57:7f:53:
4a:20:31:1e:ba:2e:9a:16:38:c0:88:de:7c:11:96:88:0f:1d:
19:91:ef:b4:4f:01:96:82:19:5f:fb:a5:79:89:95:ad:65:d3:
13:02:72:cc:8b:54:62:21:b2:f9:73:62:af:d0:75:71:f8:82:
a8:c8:c9:ef:03:d3:46:27:2a:46:e3:16:a3:f8:a7:be:ec:e3:
04:81:7f:f5:76:79:37:a4:95:89:01:6f:f3:5f:04:5d:12:14:
8f:c1:3d:fe:2c:9a:8f:73:c4:e3:a5:8d:c3:32:5d:17:e8:6e:
d8:51:63:16:a2:d5:47:ac:9a:f6:25:83:3c:28:db:db:25:d8:
e1:f0:0d:8f:52:a7:26:40:34:aa:85:46:f0:b0:79:67:03:c5:
d0:5b:85:ff:c3:12:59:33:be:88:48:dd:d2:04:a1:a8:d1:af:
54:74:94:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFyJvnZVFl9cW8eNDrgyFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3
NDJjNzAwHhcNMjUxMDIxMDgwMDI0WhcNMjUxMDIyMDgwMDI0WjAzMTEwLwYDVQQD
Eyg1ZTY3ZjhhOTRlM2I1YmVkNGNmZGE1YjVjNzAzZjQ4Y2YyMGZjYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3QpojmDE9DTQcPE2XZVuO88v6P
cIQrAOGnNZTQCAVX4Kjt4Udapa8JyHnjqNMS6PRSNcCI9kY0L2DjFN9U9jLHegI8
XOONIGzKdogoNh69JdxAviXbeacQoxkrYjDC5yJfkiHeT95YAXwfxkbqYOOkxWfs
1JLqYnKDdF0X0ZxwMOlkfk1lDnUaAoNVqjceyol8nS7cB31S6Ir5cP72oZlfVuD/
X9lIjkz8Fdth54YrRfEYHEo4Yfhrf2bamnxHMOZvi6EJjgQSOMaU0Hg6MV35E+J5
wk3IYHw6uAG+wehprOEj4tM6hBkH7lcQRIX5eAFVuAsI2MyDC23Jy4QhzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5n+KlOO1vtTP2ltccD9IzyD8wdMB8GA1UdIwQY
MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct
MzM4OTg2MTc2YjFmLzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm
LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIYITrZW
fjflTj8k/Y8gT/5yH25hG6vceyeh4xrxbM1RZUqiBGzg9NoFSkav6J6GoMHsC3sO
bR6UfGKR/u3hUYhY8kZol42PdJO51G8zksMr63ZQB37/V39TSiAxHroumhY4wIje
fBGWiA8dGZHvtE8BloIZX/uleYmVrWXTEwJyzItUYiGy+XNir9B1cfiCqMjJ7wPT
RicqRuMWo/invuzjBIF/9XZ5N6SViQFv818EXRIUj8E9/iyaj3PE46WNwzJdF+hu
2FFjFqLVR6ya9iWDPCjb2yXY4fANj1KnJkA0qoVG8LB5ZwPF0FuF/8MSWTO+iEjd
0gShqNGvVHSU3A==
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:58:56 2025 by rpki-client