Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: FqY7luOs7SkfrLt+3h/HkyFH3f5d3KV23DZwQl86jL8=
Subject key identifier: 87:27:82:A1:ED:8A:D7:24:98:CA:BE:9B:6B:1A:8D:65:87:16:E1:B2
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 0196AA67B189492A6C83940E70FEECF6F151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1122
Signing time: Wed 07 May 2025 11:00:44 +0000
Manifest this update: Wed 07 May 2025 11:00:44 +0000
Manifest next update: Thu 08 May 2025 11:00:44 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: t6YK4SiaF8lTAfS83Tz9E0+4mvcGsQEA9BBrSIq9lKE=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:b1:89:49:2a:6c:83:94:0e:70:fe:ec:f6:f1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: May 7 11:00:44 2025 GMT
Not After : May 8 11:00:44 2025 GMT
Subject: CN=872782a1ed8ad72498cabe9b6b1a8d658716e1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:26:2f:c6:0f:0d:7d:ba:4e:72:b1:4e:11:
92:ed:7f:4e:98:e9:03:c1:aa:56:fe:ab:26:73:21:
8d:85:6d:8a:fe:5a:bf:74:ca:16:48:93:3b:6a:8e:
85:5c:e7:ef:e3:d5:31:60:3c:36:8c:ef:11:8a:ae:
22:52:5e:3a:70:8c:01:2c:ac:93:86:39:07:db:29:
d4:57:f5:d9:c4:32:8e:b3:d9:7d:82:c1:92:87:63:
50:90:97:dd:63:fb:2e:31:bc:00:96:93:13:08:e9:
c3:c7:db:f9:23:5e:5e:ef:45:8e:76:54:52:f0:47:
97:f0:a6:52:7e:77:aa:6a:ad:84:4f:8c:ef:f4:9d:
09:ae:a5:3f:e6:88:35:06:ad:c3:c6:c2:73:c0:18:
60:c3:e1:7f:a8:6d:60:61:1f:f0:95:bb:d0:33:37:
e7:b1:10:f0:02:98:58:b4:cc:67:5c:5e:5e:dd:ce:
cb:be:30:88:7a:d7:f5:d9:4a:b8:97:b1:c0:28:fa:
b0:3a:30:20:81:42:0e:d8:bd:c8:0f:4f:9a:5d:b6:
23:99:36:3f:af:b7:c8:f8:5b:55:be:09:2a:a1:68:
bd:f6:ce:63:87:df:14:32:4d:71:6c:c7:6e:bd:6f:
bb:dc:c8:97:10:88:2e:1b:1d:31:61:de:39:82:4c:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:82:A1:ED:8A:D7:24:98:CA:BE:9B:6B:1A:8D:65:87:16:E1:B2
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ac:67:3e:34:10:33:ec:5c:aa:8b:06:1d:88:07:34:04:4e:
48:dc:9b:eb:c0:28:fb:97:72:5c:2d:ad:b6:d8:09:a3:0f:58:
09:73:21:08:59:5e:c1:00:71:c7:1b:c5:41:72:82:b2:ab:8c:
ca:a0:92:73:6d:dc:9b:ff:6a:52:9d:82:b4:4d:9f:ba:6b:22:
22:ef:2f:b2:5b:c6:e4:2a:1a:e4:f4:ac:3d:f5:83:b4:d3:ae:
38:d8:14:d6:c0:e3:6f:7b:51:58:41:dc:95:47:00:d2:bc:7f:
cb:a5:1b:9e:b2:f1:84:b7:b3:0c:89:bc:81:91:b8:dd:c0:a9:
9b:f4:42:d8:e6:5b:9f:fa:a2:a9:d3:08:9f:2f:ef:1c:ad:27:
97:8c:77:b3:5f:ab:42:58:d6:67:bf:0a:aa:96:35:33:16:97:
7b:00:7a:2f:d3:b1:bb:37:d7:59:5d:e6:6d:1f:fb:fd:09:f0:
53:6a:ef:fc:e0:14:81:24:8f:ed:5d:ac:3d:a9:3d:2c:e7:8b:
ba:4e:d5:2f:ef:e4:63:09:78:87:1b:b3:71:f9:35:87:21:0f:
34:05:8a:d5:04:67:95:05:b2:04:8c:0a:52:d7:05:ca:bf:90:
72:97:11:cd:24:9e:1e:e7:09:d1:28:0e:11:1c:6c:23:59:19:
f1:27:9d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqZ7GJSSpsg5QOcP7s9vFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3
NDJjNzAwHhcNMjUwNTA3MTEwMDQ0WhcNMjUwNTA4MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg4NzI3ODJhMWVkOGFkNzI0OThjYWJlOWI2YjFhOGQ2NTg3MTZlMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TUmL8YPDX26TnKxThGS7X9OmOkD
wapW/qsmcyGNhW2K/lq/dMoWSJM7ao6FXOfv49UxYDw2jO8Riq4iUl46cIwBLKyT
hjkH2ynUV/XZxDKOs9l9gsGSh2NQkJfdY/suMbwAlpMTCOnDx9v5I15e70WOdlRS
8EeX8KZSfneqaq2ET4zv9J0JrqU/5og1Bq3DxsJzwBhgw+F/qG1gYR/wlbvQMzfn
sRDwAphYtMxnXF5e3c7LvjCIetf12Uq4l7HAKPqwOjAggUIO2L3ID0+aXbYjmTY/
r7fI+FtVvgkqoWi99s5jh98UMk1xbMduvW+73MiXEIguGx0xYd45gkwMQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcngqHtitckmMq+m2sajWWHFuGyMB8GA1UdIwQY
MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct
MzM4OTg2MTc2YjFmLzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm
LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqxnPjQQ
M+xcqosGHYgHNAROSNyb68Ao+5dyXC2tttgJow9YCXMhCFlewQBxxxvFQXKCsquM
yqCSc23cm/9qUp2CtE2fumsiIu8vslvG5Coa5PSsPfWDtNOuONgU1sDjb3tRWEHc
lUcA0rx/y6UbnrLxhLezDIm8gZG43cCpm/RC2OZbn/qiqdMIny/vHK0nl4x3s1+r
QljWZ78KqpY1MxaXewB6L9OxuzfXWV3mbR/7/QnwU2rv/OAUgSSP7V2sPak9LOeL
uk7VL+/kYwl4hxuzcfk1hyEPNAWK1QRnlQWyBIwKUtcFyr+QcpcRzSSeHucJ0SgO
ERxsI1kZ8Sedsw==
-----END CERTIFICATE-----
Generated at Wed May 7 16:09:27 2025 by rpki-client