Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: oeaQ9eT7V2Pa/4SJEYJNVaa9HMXLPJF0GtHMrR7jpWI=
Subject key identifier: 20:35:E4:E2:9D:DC:63:AD:54:54:2B:26:EA:4F:DC:38:D7:04:8F:CA
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 0197B7456D1261720A89485FEDC8EFC5A0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: K97DHFQwdTmxVBqIkQk1o4P57YPjBFuYvROLjXF5ZNQ=)
3: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6d:12:61:72:0a:89:48:5f:ed:c8:ef:c5:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=2035e4e29ddc63ad54542b26ea4fdc38d7048fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:c8:c5:02:c5:4e:3d:fc:5b:1c:0c:0a:e2:
b5:5e:2c:ec:20:08:cf:db:1d:ce:19:0a:01:59:ad:
52:30:89:0b:ba:dd:d7:bd:bc:6e:23:bd:cf:b6:50:
e5:fe:33:e6:df:9b:67:cb:8a:85:93:ca:01:5f:1a:
e8:95:04:f0:f0:a8:e7:d7:58:19:99:bb:66:96:c0:
87:d8:a0:88:23:9a:70:26:3b:c5:31:31:83:ca:c6:
26:18:7a:ab:81:23:6f:d4:49:30:c1:49:2d:22:6e:
29:9f:8e:88:e9:85:2d:ed:0c:dc:7e:6f:03:7c:09:
9d:ed:13:47:b5:39:a2:64:73:6f:ef:95:2a:b4:7f:
d5:2f:c1:6b:2f:fa:71:95:9f:4d:13:4c:a2:64:2b:
ca:6b:e6:37:16:68:d5:fb:50:a7:ef:4f:41:74:48:
13:2c:e2:6c:60:32:74:ca:06:74:1f:5b:a1:33:b7:
f9:c6:02:fe:11:0f:96:d3:a4:56:8c:b2:15:85:f0:
90:54:b1:a3:3f:da:f2:97:b0:25:51:84:95:6a:e1:
f4:a1:92:24:f7:6b:fd:60:1f:9e:e2:1b:04:87:ec:
42:cc:9f:d9:81:44:24:65:5f:47:3e:58:64:b9:2c:
b6:1c:2f:8b:bc:26:46:88:67:f0:cd:49:c3:28:56:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:E4:E2:9D:DC:63:AD:54:54:2B:26:EA:4F:DC:38:D7:04:8F:CA
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:55:50:7d:02:d9:22:f8:69:d8:c3:c5:30:1b:fe:ba:0e:
48:35:1e:58:6b:96:49:09:78:56:57:ac:24:cb:1f:22:0b:c6:
0a:0d:e7:9d:73:18:ec:dc:b2:56:c7:f5:42:69:2b:8d:c9:f7:
b4:e1:59:e0:13:a6:b6:a1:ac:51:fa:fc:d5:2f:88:e1:6f:db:
94:47:5e:41:c1:f7:1d:bf:66:47:0c:42:ef:9e:1e:83:76:da:
bd:f1:dd:d4:6c:15:1e:b0:8f:18:44:23:53:40:d5:4d:fd:84:
df:b3:66:6f:0f:cd:d2:ab:e5:7f:9c:68:8a:42:7c:6f:fa:78:
72:73:69:96:8b:b8:e0:2e:70:db:1d:6d:7b:f2:9b:9b:e5:38:
1d:5e:37:9e:ad:02:66:52:d0:52:92:02:a1:c3:9e:ab:40:ad:
fb:62:c1:ef:79:45:e8:4c:cc:30:92:b6:59:fd:33:43:88:aa:
ea:42:44:56:97:f4:8c:9c:04:71:7d:f3:8e:cd:7c:9a:ae:bc:
dd:88:da:90:c0:40:2c:7f:2f:64:9c:e6:76:79:21:6d:46:90:
a4:83:14:00:09:c3:fb:1d:cb:22:af:62:53:c9:a4:22:c0:c7:
db:94:9a:f5:c4:b3:a6:24:3a:6c:c8:cb:00:93:24:b4:30:b0:
c2:94:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:57 2025 by rpki-client