
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: AbLK7oz/7XDPZnpzYolrM+djbHt/AbdTQ0h0IKgw9Fw=
Subject key identifier: 98:38:26:97:4C:28:E0:16:F2:BD:61:17:1E:85:3E:3F:2D:36:AF:D8
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 01962AF2A3276ACC23CB68F30C1119A9F419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 10E0
Signing time: Sat 12 Apr 2025 17:01:06 +0000
Manifest this update: Sat 12 Apr 2025 17:01:06 +0000
Manifest next update: Sun 13 Apr 2025 17:01:06 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: sMAtKIgWQuZx3ayoaaRlGpB4lGWsWB2MiGVy+uv1/ds=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:a3:27:6a:cc:23:cb:68:f3:0c:11:19:a9:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Apr 12 17:01:06 2025 GMT
Not After : Apr 13 17:01:06 2025 GMT
Subject: CN=983826974c28e016f2bd61171e853e3f2d36afd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:56:37:fd:da:72:3b:f8:c0:9a:2e:5c:85:
8a:f0:0b:73:c7:67:80:06:00:94:bf:15:ad:09:10:
ff:6d:03:80:81:8d:1a:56:af:e5:4c:4c:8a:1c:98:
78:87:27:5a:80:c5:b4:f5:db:7d:97:ef:cb:97:e2:
eb:90:d6:2f:5e:1a:f6:21:17:26:8e:d4:f9:9f:29:
54:e2:17:02:9c:5e:20:2c:8e:01:b8:89:e1:28:3a:
18:58:c4:65:9a:e1:cc:a3:90:3f:64:90:a8:a1:29:
d1:0b:4d:94:7e:73:b8:c4:01:83:7b:b2:b2:55:4e:
f8:1f:f2:7f:bc:fe:04:6d:c3:e3:c9:37:d3:b7:0c:
d6:b5:ba:0a:15:86:cf:79:b2:8a:30:a1:40:3e:e3:
6c:7f:8c:51:8e:b7:59:18:59:59:25:f0:23:be:7b:
41:65:83:b5:25:d1:8f:b2:7a:c6:c4:9e:57:d5:91:
e6:52:84:1c:ed:02:52:a3:2b:27:5e:28:95:d8:3b:
3d:8a:6c:d2:70:3d:f3:fb:99:8f:29:31:4c:a1:6d:
82:b1:50:6a:9b:65:f8:cf:d2:21:93:e8:74:fe:d0:
c8:5c:76:ee:d9:3c:10:5c:66:cf:04:d0:0b:29:be:
05:49:85:6a:74:fa:db:76:98:b6:29:04:75:aa:d1:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:26:97:4C:28:E0:16:F2:BD:61:17:1E:85:3E:3F:2D:36:AF:D8
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cf:c9:84:b8:c0:6e:5e:a4:ba:01:8d:8b:6d:67:5f:7c:0b:
8f:e0:1f:c0:1b:8e:c4:a7:45:c9:01:f0:5c:bf:83:cb:64:ca:
d1:7b:55:e2:85:16:27:35:c6:e8:24:fa:15:b3:de:93:71:25:
81:d9:f5:c4:0b:fc:9a:fd:46:47:3e:90:9c:65:b1:f3:d4:4a:
44:d1:87:ec:35:3e:27:4e:4c:7c:fa:bb:75:e4:a4:5c:e3:4b:
45:cd:01:a6:1b:bc:dc:b3:2d:88:ed:19:28:25:3d:2e:36:71:
bd:7a:fb:46:f2:a4:e0:8c:ac:05:26:e3:b0:48:a1:f9:02:9b:
08:8e:7b:2f:f5:f6:17:0f:f4:17:79:9f:d5:9d:3f:27:0b:23:
9c:d2:f3:5f:ae:3e:17:19:21:1f:52:2e:c2:1e:88:24:b4:e2:
20:05:3c:37:31:b9:7b:96:1d:26:e6:b5:32:64:1a:7f:76:9d:
13:c9:4d:96:1e:bd:53:ad:6f:26:83:ef:c9:5b:b9:8e:6d:91:
01:2a:e9:da:92:34:03:74:0b:f4:8c:6b:3a:93:ce:19:08:e4:
62:6b:45:5c:c3:a3:00:85:69:e4:76:f4:e0:08:00:f6:8c:29:
03:5b:ba:d9:eb:f1:96:88:7a:5d:32:61:56:87:76:eb:0b:62:
35:c7:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:07:30 2025 by rpki-client