Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: QIEJL1I2g8ey1RS+ZGDSmq2SYcxmaSM1GQ3Lr6T0ZEc=
Subject key identifier: 40:09:4E:BC:30:9F:FD:D9:F4:DD:4F:D5:5E:87:D5:3B:CD:27:98:2C
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019916BEC82DFC96A797243D0162AB67C94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1672
Signing time: Thu 04 Sep 2025 22:00:25 +0000
Manifest this update: Thu 04 Sep 2025 22:00:25 +0000
Manifest next update: Fri 05 Sep 2025 22:00:25 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: 32o/Y/CgH2rzd7k88HOesKH4lW9SQoNYksLke+9PaqE=)
3: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:c8:2d:fc:96:a7:97:24:3d:01:62:ab:67:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Sep 4 22:00:25 2025 GMT
Not After : Sep 5 22:00:25 2025 GMT
Subject: CN=40094ebc309ffdd9f4dd4fd55e87d53bcd27982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:14:ce:fe:09:6b:7e:6d:cc:53:0d:5b:ac:b4:
2d:03:0b:13:8a:f5:a4:77:f4:21:88:c9:fb:f2:04:
d8:99:60:b2:29:8a:c6:f0:54:57:bc:bb:8c:df:d6:
e6:0c:50:b1:59:06:37:2c:fa:9c:af:16:f5:a6:c4:
78:af:19:07:a2:66:e2:74:d5:0a:4e:65:4f:e0:0e:
0c:a3:52:9c:57:b7:13:aa:fb:65:d5:9c:51:06:39:
bc:04:1e:18:f5:25:51:58:97:0b:17:09:50:2a:75:
fe:d1:79:e6:66:c6:fd:b8:0a:bf:6c:c0:69:6d:54:
f5:f6:ff:49:95:7e:5f:b4:af:d0:25:72:53:78:87:
8d:31:cb:46:03:5a:1d:0a:f4:b7:70:2a:4c:37:f4:
62:39:1f:ec:c3:d1:3a:9c:c9:c6:82:94:38:cc:fc:
a7:28:d7:d7:1d:73:04:36:6f:82:db:97:5b:38:76:
b1:f4:5f:c4:30:18:5c:e9:4b:93:84:3a:ba:56:4b:
25:17:e5:05:d8:46:46:b8:80:79:7d:34:4f:67:3f:
e6:36:91:9c:81:0a:6d:bf:43:ba:c1:91:f7:ba:9e:
8b:c2:fe:6b:1b:c4:37:32:f9:65:de:a8:78:08:ac:
d1:e1:3c:8d:03:a9:32:a3:9c:01:38:14:a5:99:54:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:4E:BC:30:9F:FD:D9:F4:DD:4F:D5:5E:87:D5:3B:CD:27:98:2C
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:02:0b:18:40:05:2e:a1:e4:c1:8a:e4:dd:ac:72:a8:2e:a1:
02:c0:01:cc:cb:3d:1c:ea:00:7d:6b:69:4f:e4:b0:6c:45:79:
77:d3:4d:7b:49:53:4e:68:a9:14:22:2d:41:55:e8:13:73:6d:
35:78:49:ea:64:8d:36:07:e9:fa:cb:e8:ac:f2:04:d5:c0:a5:
57:ea:6f:7a:c9:56:ff:ac:c1:ed:58:24:81:99:d7:32:e7:40:
d0:c3:f4:57:80:d8:20:bf:07:e6:06:ad:f7:c0:b4:6a:d3:eb:
d1:4f:93:ca:62:75:86:8e:ab:65:24:23:f6:a0:6e:dc:bc:2a:
b5:34:a0:f0:aa:5c:df:2c:78:e9:31:54:66:9f:14:88:07:aa:
dc:bb:b9:a4:52:6f:0d:9f:a9:5a:a9:05:88:87:a0:cd:3d:3f:
78:f6:ba:67:35:a8:a7:68:45:ad:c7:f7:03:28:81:be:3f:f8:
6e:3e:84:6b:bc:05:9a:40:25:d3:8b:41:2c:7d:98:40:f1:b6:
bf:ec:af:07:cb:c6:1c:8f:66:b6:ac:a6:16:d6:83:f2:3b:32:
d4:23:c9:b3:63:5d:76:e8:0d:30:74:da:5f:ad:f1:56:b8:43:
a7:d1:bd:f7:4e:9a:a4:fd:2f:da:9b:a7:46:4c:25:af:12:5a:
02:1a:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:46 2025 by rpki-client