Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: 6Zo5ztz+Ou1qFQf36s55T3oBEXfJjsEYjQLTRBRCNks=
Subject key identifier: CC:40:38:7F:46:AE:CA:0D:2F:23:2D:62:AD:24:9B:CC:E0:0E:04:10
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 0197C048EA671A798A677C50A69EF6FAD5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 15B8
Signing time: Mon 30 Jun 2025 10:01:33 +0000
Manifest this update: Mon 30 Jun 2025 10:01:33 +0000
Manifest next update: Tue 01 Jul 2025 10:01:33 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: xSuEkCHA8aUSogR7adsYpnqFQz670+2bYVx7rKYODH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:ea:67:1a:79:8a:67:7c:50:a6:9e:f6:fa:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Jun 30 10:01:33 2025 GMT
Not After : Jul 1 10:01:33 2025 GMT
Subject: CN=cc40387f46aeca0d2f232d62ad249bcce00e0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:1f:ac:30:d3:71:e5:1a:f3:df:4d:f2:99:
4e:8d:44:84:61:de:06:1b:57:97:24:f3:f4:ea:54:
40:a3:81:e7:e0:86:4a:53:f3:f6:2c:ca:4c:3f:1f:
c8:5b:f2:4e:40:97:1e:2a:b2:da:12:ff:40:ff:00:
af:a1:6f:13:4e:bd:a1:23:d3:07:0d:dc:c5:8c:46:
1d:9e:b3:b3:82:21:85:64:23:dd:13:01:6a:94:f5:
0a:29:b2:f8:a8:32:df:5a:5f:05:73:a9:b8:a1:32:
8a:7e:4d:cc:24:17:e1:38:9d:5f:0f:e3:fe:69:6f:
14:7a:15:8c:4a:2e:dc:38:b7:f0:d6:b4:3d:b7:e6:
96:b4:46:d1:0f:d7:9e:75:63:63:ac:85:79:38:d8:
78:e7:6f:cd:0e:5f:c5:50:4c:91:95:4b:6c:35:5b:
0a:14:38:c1:a2:d0:90:2f:06:5c:1c:75:ae:58:29:
af:af:ec:92:15:46:c6:9e:9c:2d:91:d9:c6:ec:de:
64:a0:e9:bf:39:0f:0c:c8:b8:99:d0:f1:78:d4:3f:
98:ca:1a:ba:fb:1c:77:8e:26:b2:99:89:79:b3:9f:
b7:b3:4c:c2:dd:a3:6e:6b:24:41:29:02:55:d3:4d:
2f:be:33:de:3b:99:be:83:68:a3:9d:07:a4:a3:81:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:38:7F:46:AE:CA:0D:2F:23:2D:62:AD:24:9B:CC:E0:0E:04:10
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d6:6e:f7:ae:c2:ef:85:10:34:a7:c5:ba:10:45:b4:44:d4:
65:e8:d3:a4:45:ed:be:ac:60:6f:48:88:eb:0f:9d:97:1f:51:
19:e3:01:93:f4:41:83:2d:02:b7:ca:b9:d8:6b:07:bd:08:1c:
7b:48:86:eb:c0:75:17:fa:8c:3e:a4:ac:56:05:52:d9:c6:90:
50:5c:03:86:5b:f4:a7:6c:fd:83:54:a5:8f:84:49:af:48:09:
b6:e6:8a:d1:2d:0f:55:e0:29:16:4e:83:4a:6c:3c:af:e6:56:
2f:88:67:51:da:73:be:26:0a:bf:50:fa:3b:7f:36:47:17:ef:
9d:fb:cb:42:6c:ef:60:6d:f8:94:78:13:f9:fd:e7:cf:5c:b8:
29:e1:8c:fb:bb:4b:37:29:c8:bd:6c:41:eb:e6:24:e8:8d:a6:
df:d4:13:ee:46:53:02:d2:72:7a:bf:50:ef:5c:87:95:ae:80:
c2:2e:28:c1:47:5a:c6:cc:cc:c2:1a:df:f5:60:39:26:af:c6:
48:e3:06:21:5e:66:d1:b0:10:d4:38:f7:e9:7d:bc:21:1f:38:
55:a5:a3:d7:d1:6c:ce:9e:4a:c4:7e:8a:c1:90:c2:03:67:8c:
ca:98:ed:9e:d6:28:a2:27:ba:82:32:d9:7b:1b:9f:4b:93:b4:
60:6c:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:16:14 2025 by rpki-client