Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: FiWl8Gnws3DwIX5uDc3k9yUx6awgLhzLJy79Pb20tuY=
Subject key identifier: 3A:7F:3F:FF:15:D4:21:6D:59:12:CC:21:64:10:16:0C:3D:43:A9:E0
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0198752B7733DFD20F312F21B3DA53D1F789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 04F9
Signing time: Mon 04 Aug 2025 13:00:39 +0000
Manifest this update: Mon 04 Aug 2025 13:00:39 +0000
Manifest next update: Tue 05 Aug 2025 13:00:39 +0000
Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=)
2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: AOHGv0Dk74ZHktA44QRARNVigj4wjTeViXb+PiZjZbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:77:33:df:d2:0f:31:2f:21:b3:da:53:d1:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Aug 4 13:00:39 2025 GMT
Not After : Aug 5 13:00:39 2025 GMT
Subject: CN=3a7f3fff15d4216d5912cc216410160c3d43a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:9a:03:34:db:d5:3a:13:2d:2a:f6:55:54:
04:9f:51:c4:d7:10:4a:5a:ef:6e:4f:e5:28:09:c4:
94:68:a1:23:33:c0:0b:4c:3e:86:2e:74:a4:7e:bf:
1c:0c:aa:10:ba:c3:f4:89:99:68:98:88:ea:fa:2b:
91:02:af:a9:a3:0d:38:a4:39:b6:33:db:9a:85:23:
42:fc:91:fd:21:fb:5b:2a:6c:47:ed:ab:01:f0:fd:
ff:93:f6:6e:74:2e:6d:0a:5e:88:47:a8:03:10:25:
dd:87:bf:26:db:ef:eb:5d:54:06:37:a7:93:0a:4c:
18:4a:9c:43:0e:81:70:76:ad:7d:52:5e:e7:cc:5c:
83:17:93:50:c0:b3:e8:e4:f7:a7:db:02:04:31:24:
f0:85:1c:e0:c5:8f:7d:2a:f1:f8:6b:8b:06:fc:c4:
e3:c3:b0:dc:ef:f5:84:e8:02:d6:36:18:ca:89:64:
77:03:3f:dc:cd:e7:78:56:9c:e7:73:6f:16:ec:eb:
8d:fd:a8:24:23:42:e7:3f:2e:b9:ac:b2:7f:ac:11:
30:88:9f:77:f4:6d:64:80:14:ad:07:48:cf:a6:ff:
b0:42:35:ec:70:95:20:c8:f9:02:9e:0e:a8:c1:25:
9f:57:17:60:be:cd:a1:d2:29:e7:b4:64:d6:f4:dc:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7F:3F:FF:15:D4:21:6D:59:12:CC:21:64:10:16:0C:3D:43:A9:E0
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:49:ed:cc:81:0a:ff:b4:ca:08:8d:b0:ed:46:48:6f:e9:ed:
df:ad:9b:2d:e2:1a:85:38:a9:ff:33:b2:8d:f6:85:80:01:4c:
f4:b3:b5:0f:a8:18:f2:54:d8:df:be:5b:f7:cf:7c:d2:d7:27:
c4:39:4f:5e:b9:62:5a:97:ce:27:8b:e4:d0:1e:07:b5:81:3b:
0f:40:7f:04:2d:9d:3b:82:c7:68:24:8f:e6:06:f4:8f:ee:2d:
8c:db:c0:d4:da:da:be:fc:79:6a:33:ff:8e:ce:a1:f8:e6:73:
de:e0:f5:06:1d:16:a0:9c:7d:fd:bf:55:2e:b2:8a:d2:0b:9d:
bb:ee:f5:b5:09:c2:bb:9a:3a:19:0a:66:33:06:9b:e0:06:ea:
3c:c6:33:58:26:a4:1a:79:e3:0b:f0:55:8f:6c:82:c0:bd:b0:
9d:02:ef:1d:d5:db:7f:1c:4e:2b:d5:f6:a1:9c:20:17:ea:e7:
a8:3b:cf:46:b0:96:0c:a5:8a:c5:cb:93:8e:c8:1c:8d:ea:e6:
6c:01:76:dd:e6:db:15:89:77:eb:bb:0a:c5:9f:cd:73:30:17:
64:59:05:0a:46:0d:bf:bd:38:ec:fb:e6:3b:4e:f6:dc:c9:3d:
4f:37:77:a7:55:fa:ad:3e:e1:19:8e:2e:6d:a2:6b:e8:da:f2:
dd:92:3c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K3cz39IPMS8hs9pT0feJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjUwODA0MTMwMDM5WhcNMjUwODA1MTMwMDM5WjAzMTEwLwYDVQQD
EygzYTdmM2ZmZjE1ZDQyMTZkNTkxMmNjMjE2NDEwMTYwYzNkNDNhOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4yaAzTb1ToTLSr2VVQEn1HE1xBK
Wu9uT+UoCcSUaKEjM8ALTD6GLnSkfr8cDKoQusP0iZlomIjq+iuRAq+pow04pDm2
M9uahSNC/JH9IftbKmxH7asB8P3/k/ZudC5tCl6IR6gDECXdh78m2+/rXVQGN6eT
CkwYSpxDDoFwdq19Ul7nzFyDF5NQwLPo5Pen2wIEMSTwhRzgxY99KvH4a4sG/MTj
w7Dc7/WE6ALWNhjKiWR3Az/czed4Vpznc28W7OuN/agkI0LnPy65rLJ/rBEwiJ93
9G1kgBStB0jPpv+wQjXscJUgyPkCng6owSWfVxdgvs2h0inntGTW9Ny4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp/P/8V1CFtWRLMIWQQFgw9Q6ngMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0ntzIEK
/7TKCI2w7UZIb+nt362bLeIahTip/zOyjfaFgAFM9LO1D6gY8lTY375b98980tcn
xDlPXrliWpfOJ4vk0B4HtYE7D0B/BC2dO4LHaCSP5gb0j+4tjNvA1Nravvx5ajP/
js6h+OZz3uD1Bh0WoJx9/b9VLrKK0gudu+71tQnCu5o6GQpmMwab4AbqPMYzWCak
GnnjC/BVj2yCwL2wnQLvHdXbfxxOK9X2oZwgF+rnqDvPRrCWDKWKxcuTjsgcjerm
bAF23ebbFYl367sKxZ/NczAXZFkFCkYNv7047PvmO0723Mk9Tzd3p1X6rT7hGY4u
baJr6Nry3ZI8kg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:22 2025 by rpki-client