Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: zq9VAxSO51QOcIZNSzsWvkqcH11TTdF9Eb0w7NMxIiE=
Subject key identifier: A8:71:27:15:2B:BF:01:58:BC:89:9E:04:67:44:82:DB:7F:6D:BC:FC
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0199FB4614BC3E7571294BB58C2C7990A131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 05C3
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: x3gko+XzU5G2e38YzLhEDCuVVqEVJeKEwisWZ0Ghyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:bc:3e:75:71:29:4b:b5:8c:2c:79:90:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=a87127152bbf0158bc899e04674482db7f6dbcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:69:66:a0:33:8a:6c:53:a6:79:6f:96:98:
2c:83:6e:84:d4:c0:00:ae:0c:83:9e:c5:99:f4:51:
fa:b4:b5:78:1b:c2:4d:06:bc:d4:a3:61:b2:78:ce:
4d:52:4b:b9:2a:ca:b3:ce:e1:3c:d6:60:6d:bd:5e:
75:51:e7:5f:49:39:75:92:eb:a6:a6:8c:04:4c:b7:
7d:80:15:df:55:78:d0:27:e8:c6:3f:ab:b6:b3:f8:
32:79:34:e1:f5:21:7c:a1:43:1a:9d:f2:af:8a:50:
a9:a7:ed:f7:9a:fd:88:cc:4c:6d:a6:64:7c:6c:fc:
84:f3:65:8e:6f:46:dc:0d:49:ae:cb:c2:b8:4d:94:
5a:7f:d6:b3:9e:34:05:e1:22:bb:d2:eb:2f:db:69:
3b:73:17:f2:dd:14:b4:c3:af:f7:dd:ba:1e:c8:1a:
2a:e8:f4:a8:fa:f5:29:47:e1:9e:3c:9a:5b:d1:74:
26:f2:72:86:c0:6e:7d:9a:55:1a:87:1b:8f:42:0a:
fd:9a:ea:e2:40:6f:a8:85:f6:9e:d2:39:d9:ee:fd:
f0:7c:fd:ea:89:aa:af:c9:72:ba:59:22:22:48:fa:
dd:8c:46:cf:8b:7b:b1:09:83:65:c2:71:27:6a:ac:
27:14:7f:34:3c:22:e7:a8:7b:6f:87:cc:cb:90:a1:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:27:15:2B:BF:01:58:BC:89:9E:04:67:44:82:DB:7F:6D:BC:FC
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:7a:a5:d1:42:0c:ff:79:90:e7:4d:71:de:69:9f:cb:cd:
13:2b:7f:d3:00:09:30:d6:ab:08:b1:da:ee:ce:c5:1b:d4:b3:
6e:d3:8a:1e:cb:99:45:f2:d0:bb:76:54:25:55:41:73:d1:0e:
58:2e:a6:53:83:31:d3:95:4b:93:5b:4d:db:1d:7c:38:98:10:
32:bf:24:c3:60:19:d7:0f:f6:a3:17:88:8f:d9:dd:31:c4:c9:
bb:46:06:c8:da:ec:49:6b:d0:e5:97:d1:0d:62:e4:d2:c1:87:
07:ad:66:7a:03:2e:1c:9f:7d:ad:72:5d:89:8c:71:42:4a:8e:
a9:87:50:da:8f:79:be:33:61:2f:2a:c0:df:29:fc:7d:db:12:
0b:b0:07:36:d1:ef:4a:f5:17:7d:90:a8:d2:c5:13:d4:48:3e:
3b:5c:ad:2e:e3:b6:76:8c:ba:9f:aa:20:89:b7:74:53:36:b0:
f6:dc:0e:6b:50:f9:69:60:2c:6a:18:97:3a:59:78:20:51:40:
0a:50:cd:94:b8:78:80:44:73:89:9e:20:6f:6d:2f:f1:d6:47:
62:77:87:00:68:d3:f2:f1:06:9e:12:21:40:57:4b:4c:d5:ae:
88:15:cf:40:d3:1a:e4:eb:92:4a:78:2d:b9:5e:02:f2:09:13:
39:63:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:59 2025 by rpki-client