Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: hk9PIdYz5det0ZG9+X2cXQmynI6TB2pCu3ipXD8k6J0=
Subject key identifier: 47:A1:7B:A8:0F:78:A4:3D:41:15:5F:4D:44:77:A1:67:CF:79:0D:E6
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 0196AAD5456C2D6B992CED267D09F6EAFE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1531
Signing time: Wed 07 May 2025 13:00:25 +0000
Manifest this update: Wed 07 May 2025 13:00:25 +0000
Manifest next update: Thu 08 May 2025 13:00:25 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: iIPAZF5cDh5x1FG2/vBgmAs9wb+UVoLQSreSA33Zx3k=)
3: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:45:6c:2d:6b:99:2c:ed:26:7d:09:f6:ea:fe:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: May 7 13:00:25 2025 GMT
Not After : May 8 13:00:25 2025 GMT
Subject: CN=47a17ba80f78a43d41155f4d4477a167cf790de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:9b:19:3f:98:7c:45:4f:06:42:53:30:ea:
d5:33:cf:d4:ba:f9:6b:c9:f5:09:fd:c9:73:71:34:
53:36:47:49:02:eb:33:be:76:27:41:ab:47:46:e0:
00:66:c4:01:38:06:0c:21:4d:c3:5b:c5:16:bd:24:
ae:b8:9a:bd:90:e0:3d:ad:1a:33:33:b5:d7:3c:9b:
e5:1a:84:47:a3:39:ef:0b:37:85:0f:a5:e7:a9:3d:
59:11:5e:59:81:3a:a9:a3:43:11:68:24:ed:01:0c:
e9:77:6e:e2:4c:72:ec:50:24:f9:cc:88:fa:42:87:
6d:64:47:cf:55:85:10:5d:6a:68:f4:e8:76:2e:f2:
3b:bf:62:dd:af:f6:ee:99:9c:68:8a:ba:43:ad:67:
df:13:e6:f2:e4:72:e1:91:d5:bc:c2:d1:69:75:3c:
7a:64:7f:d5:9f:46:55:46:01:08:77:99:5e:ac:23:
71:3d:6f:f1:34:96:d3:24:6b:6d:c6:73:d6:b2:45:
16:9c:f5:c7:55:e3:29:68:9f:f8:76:a5:4b:ac:59:
f9:88:b4:d2:38:54:c9:25:a8:33:29:9c:5a:c8:a9:
28:d3:3a:0e:be:01:2a:72:cd:08:c1:c5:32:e6:7c:
9c:7f:0c:3f:6d:f8:a3:4c:b1:58:e2:fb:b3:9b:97:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:7B:A8:0F:78:A4:3D:41:15:5F:4D:44:77:A1:67:CF:79:0D:E6
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b0:09:f6:da:3d:d3:65:a4:b7:ec:e9:f2:41:ae:22:d5:3b:
7d:81:3d:58:80:20:ae:cb:f3:8a:7f:5f:58:ee:88:45:89:c8:
57:4d:0c:33:52:d9:66:ec:27:f8:f2:40:55:dd:33:9f:09:90:
f8:0c:0a:d6:b2:3d:63:b4:90:cb:97:4f:cc:1b:0c:c4:06:fa:
59:c7:00:35:97:f7:16:73:ec:11:ae:18:da:1c:27:a4:8d:f0:
bf:d9:8d:20:56:94:ab:2e:d0:30:52:23:8d:4f:2a:fe:5c:39:
df:0b:94:a9:af:c9:0d:04:01:4a:05:41:48:c6:d9:52:c6:d9:
55:d6:54:21:93:a3:c6:d1:0a:81:06:f1:3e:61:d5:88:3c:93:
3f:d5:b0:ec:2d:93:db:91:81:30:76:a6:9b:a4:dc:35:8a:9c:
b9:37:6b:1e:e5:c7:b4:76:70:7c:1c:98:d6:48:a6:3d:c5:67:
5c:9d:7d:de:a4:90:14:e6:2a:6f:16:58:b6:cc:95:67:35:b5:
75:6c:ca:2c:57:34:0a:88:51:5c:8a:37:87:fb:44:1a:4d:da:
a9:97:58:ab:9b:c4:d1:54:ea:b4:64:cd:ef:cf:1d:06:ca:fd:
b5:a4:9f:42:6c:79:7f:ad:6a:2f:7a:64:d5:06:c5:6e:6b:18:
f2:66:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:59:18 2025 by rpki-client