Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: t4OLVKkWy8fKCIWqvnr7/BdTbBirx+Qf0ksJ8Hk/QiQ=
Subject key identifier: 85:9B:A3:0C:D6:6B:D9:88:9E:8D:E7:BF:45:28:F8:B6:B9:8A:FE:BE
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 019A4F2B45B8B55C39C48C8D04B1B92B1FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1305
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: qOYQ77tMQMQZUuF1ufutLS1OpDgtpkwzm4nFFSAcNnA=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:45:b8:b5:5c:39:c4:8c:8d:04:b1:b9:2b:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=859ba30cd66bd9889e8de7bf4528f8b6b98afebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:5c:e5:92:86:d2:e9:33:35:6c:ed:a6:b8:
06:bb:66:f4:f8:15:d3:5f:a2:f2:ff:f2:20:63:1e:
19:0f:7c:16:b9:ae:69:e9:27:af:92:bf:85:34:a0:
a0:62:61:b8:89:67:96:40:4b:2d:fa:f0:2e:15:df:
0c:00:99:68:7a:d5:03:6c:a2:52:22:29:30:c7:1c:
f9:90:58:39:5d:0c:7c:db:87:db:48:74:1d:16:35:
db:37:9a:a0:59:49:8d:5c:4d:cc:37:9f:7a:70:24:
17:00:dd:18:4e:c5:2c:fc:a9:ce:05:55:36:f1:8f:
35:6d:ca:40:86:98:48:12:5c:bf:91:b9:0d:e5:8f:
65:61:b2:64:8e:7e:17:b1:02:74:a0:5a:62:51:8e:
5e:a9:53:b4:a3:4a:6c:3d:54:e4:2c:b8:9b:65:2f:
85:af:04:fe:8d:00:93:af:22:b0:11:fa:a4:24:2b:
0b:4b:37:98:32:6a:43:9e:88:35:a9:44:e7:9b:fa:
5c:e6:15:53:8e:c8:74:be:db:48:73:dc:d9:5f:a3:
14:98:df:76:96:6f:08:b4:82:02:8d:e6:96:fb:5e:
e4:3e:4b:35:b6:db:76:e1:8d:ab:3e:64:fe:b9:71:
3b:9f:dd:f8:33:eb:55:2e:8e:27:6e:15:94:49:e0:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:A3:0C:D6:6B:D9:88:9E:8D:E7:BF:45:28:F8:B6:B9:8A:FE:BE
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:7c:13:e4:16:69:49:db:28:7c:d3:a3:c5:61:ef:1c:ef:
be:e2:45:99:26:8b:1e:61:db:56:20:42:d1:ec:47:f8:91:e9:
50:5e:0a:71:0b:63:91:37:1d:87:7c:ca:32:9d:e5:d2:4e:84:
98:23:7c:0a:df:cf:fd:c2:27:dd:e1:4a:30:b9:6a:45:f1:5d:
cf:22:d4:8c:2a:f4:70:02:78:bf:77:64:8d:67:1d:14:5b:15:
ce:18:8f:42:e3:76:ff:76:3a:23:8f:a0:99:e5:c5:16:6a:e4:
6f:97:ca:96:38:1c:c3:b0:1c:30:34:f9:d3:81:7c:c5:52:d7:
83:54:eb:75:6a:91:96:57:2f:6a:c9:b6:dd:44:23:2e:a7:01:
be:27:55:13:3b:20:de:aa:48:38:c3:cb:71:40:a8:89:d6:17:
7b:4a:30:0c:f1:d9:19:c8:00:81:59:2c:d4:5d:9d:11:d9:9b:
01:72:85:a8:19:ff:85:8b:40:8e:6e:91:cd:fd:de:65:ae:79:
2d:6c:76:bb:d3:2a:51:32:5f:8b:03:40:6f:a8:33:2f:06:ee:
d1:b2:e8:67:d7:14:30:2d:4d:55:77:42:f5:cd:ba:ff:89:06:
f5:07:f8:14:aa:85:14:d7:cb:eb:06:c2:26:f3:9e:4a:f3:6b:
85:df:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:18:58 2025 by rpki-client