Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: IetXD2e2H6jDEYzrZfB9u0LUmg4BK3LZJAy2E+tu98M=
Subject key identifier: 34:94:2D:71:8D:57:D5:25:70:C0:95:45:EA:B9:50:44:48:8B:86:5A
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019A4E4FE38EE9ADCD1EF7663F54C5B24629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 05EE
Signing time: Tue 04 Nov 2025 10:00:49 +0000
Manifest this update: Tue 04 Nov 2025 10:00:49 +0000
Manifest next update: Wed 05 Nov 2025 10:00:49 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: iCCiuVHyi1Py5ynWOMpFhyMc9TpjW1zhwH/Q0E+qjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e3:8e:e9:ad:cd:1e:f7:66:3f:54:c5:b2:46:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Nov 4 10:00:49 2025 GMT
Not After : Nov 5 10:00:49 2025 GMT
Subject: CN=34942d718d57d52570c09545eab95044488b865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:d4:aa:40:92:ae:35:75:9f:4d:bf:50:39:
2c:d7:33:b1:46:80:10:b4:3b:72:ea:44:05:f8:b0:
e8:56:7d:d8:a9:de:0c:6c:33:60:6a:53:f9:2f:10:
7f:f7:b2:ab:eb:00:2e:eb:1e:2a:6d:24:84:c5:23:
da:2f:80:28:8e:b6:5f:3c:51:e3:e3:7b:5b:f1:d8:
31:8b:51:09:ad:67:bf:0f:b0:2f:29:55:c4:66:c4:
9f:ae:fc:7d:8d:be:3f:d4:e1:9d:e6:e2:1c:e6:3e:
36:8a:03:5f:08:0a:e7:d9:a6:75:52:f7:22:32:fa:
11:38:ef:53:a4:51:01:33:02:af:69:da:4d:31:a4:
81:22:9f:30:10:08:2c:c7:c4:4c:23:e2:d0:5e:77:
63:24:0a:30:b2:ab:ca:34:85:b5:2b:64:d5:80:0d:
55:c9:03:56:40:98:f0:cd:f6:87:63:76:8c:7c:be:
c8:d9:51:0b:70:70:6d:dc:1d:08:e4:bb:01:0e:7e:
3e:ab:14:1f:33:45:e0:74:08:cc:cf:b4:e5:76:19:
06:03:2e:6c:d0:a2:cb:d6:b9:7e:bd:f1:e5:e7:50:
a0:d0:b3:44:4a:84:3d:4e:d4:7a:c9:06:73:f8:81:
9d:82:d8:b6:84:5e:0c:3f:06:bd:77:af:7c:4f:30:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:2D:71:8D:57:D5:25:70:C0:95:45:EA:B9:50:44:48:8B:86:5A
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f6:79:e7:14:82:80:b4:d4:e6:ba:21:0a:5b:40:53:91:78:
6d:44:c7:96:1b:76:f6:3a:e3:98:ca:e0:02:a4:4b:70:f4:af:
b8:13:51:cd:51:2a:8a:ff:90:0a:38:9c:fd:a3:99:1c:75:1a:
11:79:38:89:f9:86:01:33:8f:6e:82:3b:49:00:84:88:ef:55:
7d:f2:4d:e2:1f:6d:ae:d1:19:39:40:3e:52:cc:33:8a:90:8a:
f4:fb:3a:6f:13:73:77:01:7f:77:bc:b5:4a:b3:6d:dc:54:df:
6c:bb:20:f4:8a:9d:27:51:8b:60:da:88:e3:b8:5d:52:db:df:
21:30:e2:13:d8:20:8a:9c:45:69:c9:0d:3b:08:f6:05:94:e8:
45:bb:86:5c:64:d6:62:72:bf:40:61:f1:68:b2:b5:43:cb:a5:
9c:7e:8a:61:99:c0:6f:47:70:b9:7e:72:85:c0:3f:40:ee:fc:
15:c4:af:20:31:42:28:01:cc:34:6f:7a:6b:67:dd:0d:9c:39:
c3:60:82:45:8c:7f:9e:89:1f:ea:d1:21:eb:77:7f:86:3d:ce:
df:43:a3:55:a6:93:81:c8:4e:dc:99:86:80:3a:5a:b6:f7:eb:
70:2e:a3:a2:01:17:c1:63:41:10:f4:2b:b9:29:cb:ce:7c:57:
30:af:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:31 2025 by rpki-client