Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: vxqDyy3MvtSDY8/85dC7ZCV7s24P3TM0zhrLe6I5W1U=
Subject key identifier: C0:8C:C6:40:9A:21:43:F2:74:CC:CB:43:CC:5B:54:5F:5E:3C:58:EF
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 0198D515830DCBFE06DD97DA303C46441744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: qQMQa+k0JIC7B3uwLv5r0EnQaTbLkBmFzp5hFHMGenc=)
3: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:83:0d:cb:fe:06:dd:97:da:30:3c:46:44:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=c08cc6409a2143f274cccb43cc5b545f5e3c58ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:b5:16:71:08:8b:27:54:56:29:db:70:57:
c6:a6:86:db:f8:aa:c8:f5:b4:61:79:fa:ab:bf:bb:
75:80:ae:77:71:34:61:ba:b6:b9:27:4d:e4:8a:45:
be:31:29:d2:60:c2:3b:62:23:a4:f6:f7:35:8a:87:
7b:fa:0e:91:29:f4:f6:d8:9a:9c:83:fc:ea:e8:ac:
51:28:35:bb:5d:bf:39:dc:df:5c:7e:4f:8a:1e:5e:
7a:48:94:71:4c:dd:be:63:36:98:47:5e:82:4a:ed:
28:f5:b6:71:9a:f7:0c:2f:ae:63:0b:2b:f8:8d:1d:
47:df:e8:34:e0:7d:11:70:61:47:3e:bc:58:b7:02:
56:93:5d:06:29:82:4b:50:e7:36:22:35:ab:1d:bc:
a9:4a:1a:0a:90:ab:e2:77:cf:f7:1f:b1:26:23:93:
0b:24:15:58:5c:ec:cf:b5:44:69:40:6c:13:91:88:
62:46:d5:92:0c:5b:70:96:9f:59:5e:f9:8c:51:1f:
8c:96:e3:74:ab:48:70:03:85:39:ed:f0:00:0c:91:
55:b7:e3:ff:0a:96:11:e3:ac:65:67:5e:dd:01:19:
56:36:5a:5d:02:4a:19:60:f1:cc:55:46:3e:ac:39:
27:a4:ba:35:0f:16:27:54:8b:f3:5e:25:49:6d:db:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:C6:40:9A:21:43:F2:74:CC:CB:43:CC:5B:54:5F:5E:3C:58:EF
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:f1:11:25:ac:bf:b7:77:87:12:94:c4:04:06:cb:7c:e8:fb:
12:a0:07:9f:17:a3:08:ce:97:eb:a7:e4:87:70:51:77:b8:73:
6f:b6:b9:62:13:b3:03:12:93:f2:48:13:58:76:fc:3f:46:90:
6b:63:0a:af:0e:18:b5:95:da:e1:f1:c8:4a:fc:82:13:75:8c:
05:c3:08:82:6e:4c:da:b3:7a:f8:e7:2b:7a:24:e1:80:cb:17:
60:f0:82:cc:0f:7d:3a:17:a3:0c:ba:e0:ed:b0:26:75:e0:0f:
e3:ac:9a:39:5f:3e:c1:31:4f:03:83:94:55:78:a6:cb:1f:06:
c0:dc:de:a5:f2:0e:d4:c7:7c:a3:f5:4c:3a:9b:3e:5a:68:ed:
46:60:7a:d4:50:bd:64:87:2b:bd:36:0a:92:75:48:43:2a:10:
7d:04:e2:fd:9c:b5:41:b7:17:69:cd:8c:31:29:25:00:55:9d:
4e:a6:1a:fe:9f:af:42:e7:2d:3f:8a:34:4d:61:7c:6a:40:03:
bf:fe:36:91:22:6b:66:0f:61:08:2e:21:4f:fd:e2:89:c7:2e:
cc:0d:f6:33:37:c2:5d:18:2f:a0:d3:40:a1:a2:a2:7c:bf:e3:
34:cc:24:e3:b6:46:41:45:80:f7:0f:b2:24:ba:25:13:47:7c:
8f:26:27:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:56 2025 by rpki-client