Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: +ShnidViRMQNbLCD+XrcTEz2pn51XY+WDHd1SAMb5wM=
Subject key identifier: BA:09:51:CB:C2:84:A7:83:11:F6:18:73:CD:F1:E1:89:49:7A:B3:56
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0198D5BC07BE28CC040EB860803265FA747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 052B
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: qyNwM7qZd59bE4rwQfzG7L6/PJ0JHAxRJEzFqek2bIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:07:be:28:cc:04:0e:b8:60:80:32:65:fa:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=ba0951cbc284a78311f61873cdf1e189497ab356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:90:8a:d0:31:99:89:42:94:2a:74:b6:4e:
b5:81:19:96:89:7b:a1:53:80:43:3a:e6:13:7a:0a:
06:27:0a:1f:ec:ca:86:9f:30:91:31:68:61:d8:19:
64:76:b1:91:a9:31:ba:6a:7f:4d:51:58:3c:30:9b:
92:c4:4a:0d:e1:d0:20:b0:05:2c:c3:15:33:1e:0e:
16:4c:0c:a8:56:30:2c:0a:06:31:28:5c:41:1a:a8:
ff:21:95:5c:c8:4e:7b:bd:42:48:20:dc:4e:b7:29:
e0:76:07:12:0a:51:40:ec:f3:2f:b8:59:82:1a:0a:
04:f7:ca:b7:6b:c4:57:cf:a2:e7:1f:1a:63:71:c8:
ae:39:f1:10:9d:ca:a8:76:ed:6a:8f:42:80:8b:77:
5c:04:7c:d0:af:ac:50:f9:33:0a:a4:4e:d9:d3:dd:
cc:55:19:c8:ec:50:61:16:fe:af:96:ac:75:11:00:
1f:dd:82:9b:c1:10:a5:62:6a:82:f7:0e:72:47:a3:
71:21:36:66:49:9f:6a:93:93:20:0b:ce:6d:70:9c:
ca:cc:1a:61:c9:32:4d:c3:8d:d0:64:f8:0f:68:75:
a6:72:31:b8:88:00:e9:36:68:10:92:27:40:33:c7:
02:19:ae:33:95:eb:cc:d3:fa:d5:49:df:cc:ee:db:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:09:51:CB:C2:84:A7:83:11:F6:18:73:CD:F1:E1:89:49:7A:B3:56
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:28:bd:4c:09:0d:2b:83:aa:21:83:38:e0:ac:64:d2:3c:
0d:76:f3:15:44:ec:10:df:2a:d7:67:a8:18:aa:e3:6c:11:b6:
08:b0:c3:9c:c4:5d:74:78:7e:3d:7f:e7:b9:16:6b:0e:81:dc:
d9:d4:15:72:a9:6a:38:7e:39:fa:4e:4c:19:9f:4d:b1:b4:fc:
32:01:28:68:cd:45:2d:d9:62:75:96:42:d3:95:b3:63:b4:e4:
dc:c0:a4:09:e0:d5:94:b5:ef:6b:eb:a7:d6:b5:c8:39:9e:b5:
32:6b:14:34:92:b6:16:f4:9b:2b:3b:65:7f:ba:e5:25:00:50:
2a:42:91:27:3f:79:dc:d7:8f:a2:86:b4:45:46:6e:10:bc:ee:
f5:af:6b:ff:6e:f3:ee:eb:0f:75:1e:26:4f:3f:eb:f7:07:9b:
66:5b:e0:15:00:cf:ed:ed:62:25:8a:21:b2:c1:5c:f9:84:ad:
aa:bf:3f:98:e0:2f:60:04:3f:32:01:2a:3c:27:5f:b3:97:7e:
27:1b:a0:88:4e:eb:f3:b2:80:8e:dc:86:ed:b6:2e:eb:d3:61:
6a:2c:a2:7e:6f:cf:7b:cf:8f:01:e8:0a:08:95:98:a0:80:d5:
09:3c:09:f9:76:8c:79:ce:a6:8c:61:2d:1b:60:5e:52:c2:41:
d9:eb:fe:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAe+KMwEDrhggDJl+nR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjUwODIzMDcwMjA2WhcNMjUwODI0MDcwMjA2WjAzMTEwLwYDVQQD
EyhiYTA5NTFjYmMyODRhNzgzMTFmNjE4NzNjZGYxZTE4OTQ5N2FiMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/qQitAxmYlClCp0tk61gRmWiXuh
U4BDOuYTegoGJwof7MqGnzCRMWhh2BlkdrGRqTG6an9NUVg8MJuSxEoN4dAgsAUs
wxUzHg4WTAyoVjAsCgYxKFxBGqj/IZVcyE57vUJIINxOtyngdgcSClFA7PMvuFmC
GgoE98q3a8RXz6LnHxpjcciuOfEQncqodu1qj0KAi3dcBHzQr6xQ+TMKpE7Z093M
VRnI7FBhFv6vlqx1EQAf3YKbwRClYmqC9w5yR6NxITZmSZ9qk5MgC85tcJzKzBph
yTJNw43QZPgPaHWmcjG4iADpNmgQkidAM8cCGa4zlevM0/rVSd/M7tspIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoJUcvChKeDEfYYc83x4YlJerNWMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPYovUwJ
DSuDqiGDOOCsZNI8DXbzFUTsEN8q12eoGKrjbBG2CLDDnMRddHh+PX/nuRZrDoHc
2dQVcqlqOH45+k5MGZ9NsbT8MgEoaM1FLdlidZZC05WzY7Tk3MCkCeDVlLXva+un
1rXIOZ61MmsUNJK2FvSbKztlf7rlJQBQKkKRJz953NePooa0RUZuELzu9a9r/27z
7usPdR4mTz/r9webZlvgFQDP7e1iJYohssFc+YStqr8/mOAvYAQ/MgEqPCdfs5d+
JxugiE7r87KAjtyG7bYu69Nhaiyifm/Pe8+PAegKCJWYoIDVCTwJ+XaMec6mjGEt
G2BeUsJB2ev+wQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:58 2025 by rpki-client