Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File: vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier: obxL4Qz69YbF9FKx/kV8clER9TtjwQLbN2ytmmDAVgc=
Subject key identifier: 00:9F:45:47:77:8D:0B:FF:AD:46:C7:96:27:31:CB:77:49:C4:D4:3A
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 019A4DE1847E37B60FE91BBF47298E0C7166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number: 1029
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: kzYi/sSu9SYwAaKk9JU7ubxOL60oEcvyC3S0zen8P0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:84:7e:37:b6:0f:e9:1b:bf:47:29:8e:0c:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=009f4547778d0bffad46c7962731cb7749c4d43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:af:1e:a2:8b:74:6a:6e:f8:69:19:e4:a2:
61:ac:06:c5:40:9f:c1:4c:f9:1b:e3:41:b7:84:0f:
11:fe:1b:d9:51:8b:e0:b2:6a:c7:97:e2:38:34:80:
1d:64:a2:01:c4:0b:e8:51:13:6d:3a:98:b7:54:af:
83:75:fd:9a:0d:dc:c6:ff:80:57:b1:44:2a:e5:14:
14:e8:64:ac:7b:06:fa:fb:91:7c:81:c2:a3:b3:b2:
2b:36:03:06:e2:13:81:ce:1d:72:8d:4c:2e:eb:1a:
a8:23:50:db:81:d1:a3:24:5f:13:a3:74:08:ed:0f:
32:dc:60:21:80:8c:4c:79:94:24:ba:ac:49:0b:a4:
5b:cd:47:47:9e:b3:2e:5d:e7:d1:42:14:50:5d:ff:
81:6b:fc:91:e3:b3:84:cc:4b:a5:cc:77:00:da:61:
9e:15:e9:59:a6:79:28:31:21:2c:1c:ff:07:2e:f9:
85:f2:a4:83:a6:79:81:2f:96:1e:d5:19:01:c2:7d:
da:a5:81:bb:0a:13:57:2b:ba:3e:4d:cb:31:a6:70:
a8:ca:d0:11:80:ab:9a:a7:c5:f1:1d:2d:9b:bf:81:
f6:60:e1:d3:d2:08:9b:b9:97:58:57:d9:46:2d:6d:
2a:a1:9c:bd:64:5e:f3:fb:f9:ca:48:50:75:b2:c8:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:45:47:77:8D:0B:FF:AD:46:C7:96:27:31:CB:77:49:C4:D4:3A
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:b8:f4:d1:9f:27:00:f1:07:c8:bb:d4:c8:36:ed:37:f2:
7e:18:3a:12:64:5b:f0:45:5b:dc:05:b0:f0:d8:bb:e3:0b:dc:
77:52:84:24:87:0d:e6:df:0c:12:86:3f:d8:72:9f:ee:f8:42:
56:1c:8d:3c:72:b8:4f:42:36:c8:25:3c:80:dc:69:94:ba:8f:
4f:9c:3e:ce:ea:c2:51:b3:d4:ad:10:60:d2:2f:8c:d6:1d:c8:
42:a7:70:8d:8b:46:b1:3e:1c:73:df:74:c6:3d:c3:5a:a3:ed:
c1:d3:d2:ee:fc:bd:79:ab:a8:69:3e:65:64:c3:ec:f1:b0:d2:
b0:46:e9:fa:40:9a:28:91:7c:ab:25:b1:52:8b:05:9d:01:ed:
34:f6:da:a0:e1:9b:ac:9e:0e:4c:55:81:d1:a7:83:07:f0:6a:
37:90:fa:cc:1a:b7:32:85:7a:91:23:1a:5b:34:bf:78:56:1d:
7d:4c:54:b9:64:01:3d:8a:71:e0:c9:24:4d:57:c1:0b:f6:c8:
ff:09:85:8f:f2:d5:f4:95:6f:35:95:d5:97:c1:e7:30:1d:ed:
84:83:9b:5b:9c:da:f0:11:f4:85:8a:43:3d:f0:b6:af:88:ef:
b1:4c:40:06:d6:eb:57:7a:74:02:c0:1d:34:ed:62:98:ea:b2:
3b:9f:62:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4YR+N7YP6Ru/RymODHFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjUxMTA0MDgwMDE2WhcNMjUxMTA1MDgwMDE2WjAzMTEwLwYDVQQD
EygwMDlmNDU0Nzc3OGQwYmZmYWQ0NmM3OTYyNzMxY2I3NzQ5YzRkNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHOvHqKLdGpu+GkZ5KJhrAbFQJ/B
TPkb40G3hA8R/hvZUYvgsmrHl+I4NIAdZKIBxAvoURNtOpi3VK+Ddf2aDdzG/4BX
sUQq5RQU6GSsewb6+5F8gcKjs7IrNgMG4hOBzh1yjUwu6xqoI1DbgdGjJF8To3QI
7Q8y3GAhgIxMeZQkuqxJC6RbzUdHnrMuXefRQhRQXf+Ba/yR47OEzEulzHcA2mGe
FelZpnkoMSEsHP8HLvmF8qSDpnmBL5Ye1RkBwn3apYG7ChNXK7o+TcsxpnCoytAR
gKuap8XxHS2bv4H2YOHT0gibuZdYV9lGLW0qoZy9ZF7z+/nKSFB1ssh/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACfRUd3jQv/rUbHlicxy3dJxNQ6MB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZm49NGf
JwDxB8i71Mg27Tfyfhg6EmRb8EVb3AWw8Ni74wvcd1KEJIcN5t8MEoY/2HKf7vhC
VhyNPHK4T0I2yCU8gNxplLqPT5w+zurCUbPUrRBg0i+M1h3IQqdwjYtGsT4cc990
xj3DWqPtwdPS7vy9eauoaT5lZMPs8bDSsEbp+kCaKJF8qyWxUosFnQHtNPbaoOGb
rJ4OTFWB0aeDB/BqN5D6zBq3MoV6kSMaWzS/eFYdfUxUuWQBPYpx4MkkTVfBC/bI
/wmFj/LV9JVvNZXVl8HnMB3thIObW5za8BH0hYpDPfC2r4jvsUxABtbrV3p0AsAd
NO1imOqyO59igg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:31 2025 by rpki-client