Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: V/p7eUtGb/YybDokJsgQ6XhQbgvSN/kbLOEe6t+DoLg=
Subject key identifier: 66:3F:7A:35:E2:44:62:DF:D7:C7:C7:0A:E0:BB:A0:06:A9:6D:27:BB
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 01974931792D4E7B57CA4F1E07FDA05B8583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 07:01:08 +0000
Manifest this update: Sat 07 Jun 2025 07:01:08 +0000
Manifest next update: Sun 08 Jun 2025 07:01:08 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: nSyYX3dLEv/nYX92wuaYBoMW8xA892PZIEol25ml1nA=)
3: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:79:2d:4e:7b:57:ca:4f:1e:07:fd:a0:5b:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Jun 7 07:01:08 2025 GMT
Not After : Jun 8 07:01:08 2025 GMT
Subject: CN=663f7a35e24462dfd7c7c70ae0bba006a96d27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:7d:ba:95:74:66:c7:8d:d7:72:17:26:42:
7c:94:c8:84:74:c8:0e:12:95:56:3c:c0:c9:71:82:
bf:37:ef:cc:94:08:d9:34:c1:b6:96:4e:36:db:e3:
48:5e:10:5a:84:41:94:1d:88:af:d9:ad:92:17:52:
ad:41:e1:4d:5d:23:38:91:2b:04:65:e3:3a:ea:39:
8d:27:c5:92:e7:be:6b:8a:14:ec:cd:55:4c:93:ba:
31:07:58:32:a4:9b:b8:41:39:3f:61:40:29:26:78:
dd:49:97:73:8a:7a:b3:8c:d3:a0:9c:3e:bb:f4:ee:
d3:2a:f3:66:d1:40:69:7a:fe:d3:41:dd:46:c4:67:
3a:aa:75:17:17:db:28:b0:0f:ce:37:28:5c:1a:29:
27:b0:5d:6d:b3:be:6c:a9:c0:84:68:ae:1c:ae:24:
74:16:a0:f4:f5:b7:17:e3:50:02:64:06:94:b5:73:
d8:14:84:01:ae:81:2f:19:da:26:94:fb:37:36:e1:
ea:e2:53:38:bc:8b:af:b7:ec:fc:06:40:35:ef:15:
d5:a9:d6:34:61:5d:60:44:a2:7d:4d:f9:60:c2:c9:
74:7a:e7:23:23:fc:8a:72:94:1d:ce:ea:aa:f7:8b:
eb:ac:4c:ba:97:56:ec:48:f3:3f:f7:37:a2:56:b8:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:7A:35:E2:44:62:DF:D7:C7:C7:0A:E0:BB:A0:06:A9:6D:27:BB
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:f1:65:5e:dc:0a:39:0c:93:95:e0:0b:5f:05:34:47:5c:a9:
28:9b:6a:1f:5e:f7:2b:ae:da:b6:fc:8c:7d:f7:16:d8:85:04:
b1:80:f3:88:11:04:fc:07:27:85:87:bb:cf:1b:c8:2f:a5:3a:
ea:d7:d7:7a:46:20:92:fc:e6:75:9e:de:f9:b7:0a:96:b5:d8:
a9:6f:f8:8e:a7:d7:4d:e4:d5:2e:57:48:f3:40:93:86:58:ec:
60:88:96:e8:3a:26:00:ce:b5:d2:fc:53:15:27:b4:8f:d3:21:
c3:4a:bf:58:c4:1a:21:97:1d:ad:14:09:84:41:c8:40:b8:f5:
5c:2c:cf:d7:6b:a0:8c:2f:14:67:63:55:21:f2:ed:42:8e:67:
da:d8:a4:1e:38:ea:05:b0:eb:07:01:8d:c4:1d:12:84:85:e0:
d5:c5:34:56:9d:15:9e:d6:dd:32:6c:b2:45:b1:d6:c4:c8:69:
c2:d5:57:b0:1e:b3:41:ab:92:f6:d8:85:89:3f:ab:58:80:a1:
7a:cc:ae:93:67:84:3d:6a:55:26:56:81:06:98:c8:aa:14:87:
c5:1d:13:c5:3d:19:40:9a:e9:ab:58:54:44:ab:71:7f:cc:91:
c3:8a:92:90:b8:24:03:4f:03:09:71:83:d6:f3:b7:66:29:cc:
2b:38:8f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:38:58 2025 by rpki-client