Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: zJu2z5GIAaWSj1ZXCMCzmezQ6lYMv6PXJKNjdGeGK8U=
Subject key identifier: A4:C1:B9:E5:9B:E6:E7:4C:F5:71:D8:97:B5:AF:57:58:B4:E2:72:83
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019609799A9CDC6A0036FE34957A62FCBE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 14DD
Signing time: Sun 06 Apr 2025 05:01:26 +0000
Manifest this update: Sun 06 Apr 2025 05:01:26 +0000
Manifest next update: Mon 07 Apr 2025 05:01:26 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: L5HcuNzzuUfSlaGEOz7taRIjrSdTWPBVKgpYHhCz7v4=)
3: WlRHIXptT_S64nV3DW81yd2ZZKE.roa (hash: DKPLrRVX61PvJUwFkp98O053sj3SrffGgI9/nDZtIsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:79:9a:9c:dc:6a:00:36:fe:34:95:7a:62:fc:be:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Apr 6 05:01:26 2025 GMT
Not After : Apr 7 05:01:26 2025 GMT
Subject: CN=a4c1b9e59be6e74cf571d897b5af5758b4e27283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:a7:fd:6d:70:d6:ab:54:06:47:4f:34:0a:
b4:55:76:2a:5d:25:18:fa:86:d6:72:a6:4f:f1:7c:
17:e0:79:8b:2a:bf:8a:f3:c0:d7:48:2c:1a:11:c8:
73:cd:1c:ec:08:af:a5:2e:b8:03:a6:27:4b:72:6f:
11:d8:0b:b9:71:7f:b7:66:48:f6:31:b5:b7:60:f9:
fd:42:2a:96:6e:ac:42:5e:af:69:57:7c:af:92:ea:
f4:2a:88:ad:41:d6:db:83:4f:13:28:ed:78:9e:58:
6f:34:01:be:a2:4d:f8:c7:f6:eb:33:ec:b3:c2:88:
68:7e:12:56:72:54:f1:fb:bb:47:f5:52:d1:d7:3e:
99:80:09:56:bf:a1:c7:a4:03:8c:c1:de:9a:10:e0:
56:ff:4a:9a:9e:8c:84:b1:a8:b3:84:05:6a:69:6f:
65:88:8f:57:36:18:1f:59:2b:1d:b6:82:f3:9d:02:
a6:6e:0d:49:35:2a:6c:4a:94:c2:23:23:c2:80:8a:
12:03:62:81:58:45:87:47:98:d6:62:94:95:43:3b:
82:37:f0:b9:95:da:88:74:36:69:24:ee:49:bc:3d:
83:11:1c:50:24:8e:d3:62:6f:1d:8d:6a:b9:69:34:
99:56:07:5f:a0:11:ad:2d:f3:0e:d6:02:21:9e:c8:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:B9:E5:9B:E6:E7:4C:F5:71:D8:97:B5:AF:57:58:B4:E2:72:83
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:55:1c:45:eb:57:68:24:71:0f:b0:f0:07:17:a3:0f:3d:97:
36:fc:5d:bb:08:8c:27:45:11:58:87:16:64:25:ea:4d:2d:31:
3b:58:c7:50:c1:b9:29:44:fe:43:1d:ff:d8:07:93:2b:2d:04:
b9:1c:69:00:b2:ca:1c:29:69:c5:b1:6e:c5:86:01:10:1d:c7:
4c:e1:8d:ef:a6:58:0c:a3:28:69:95:06:2d:25:0e:77:1e:26:
42:d4:19:e0:d8:f0:49:a4:d2:23:23:7f:66:01:ec:57:13:61:
79:70:a4:00:7a:72:03:51:4c:8f:d7:15:12:9f:09:2a:76:29:
ce:46:21:93:a6:fa:74:0c:83:24:cb:55:d5:73:7a:82:95:66:
c1:2c:1b:61:80:83:6f:96:33:a6:9f:49:ad:71:25:db:c6:b0:
87:b6:88:9e:29:2e:93:6f:32:8c:44:50:af:a5:c7:6b:ac:53:
87:3c:08:63:e5:e8:99:73:50:b2:63:05:36:00:f9:85:8e:ce:
0e:5b:b4:31:5b:4b:87:d2:a2:cf:b2:0b:76:67:ee:94:20:59:
05:74:8c:1b:ff:ea:fb:84:c4:d9:04:7f:5a:0f:a7:a2:63:12:
e4:3a:81:da:58:3f:1a:d6:1b:b6:4a:1e:1b:76:75:08:78:a2:
59:aa:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:24 2025 by rpki-client