Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: Xfg4e4rDSmhs4lO9KTpCNc3gjA7H945ljqeG8C43FfQ=
Subject key identifier: 7F:68:D8:5A:4F:BE:80:5B:5B:3E:BF:41:36:44:12:4C:48:45:6E:CA
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 01964F6D994B63A5061DDA4A43FF1B9D81B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 19:01:44 +0000
Manifest this update: Sat 19 Apr 2025 19:01:44 +0000
Manifest next update: Sun 20 Apr 2025 19:01:44 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: iptVgbKE02QVz/2qvDpw9PQD55Wqk3PGN5a7F6yfnEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:99:4b:63:a5:06:1d:da:4a:43:ff:1b:9d:81:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Apr 19 19:01:44 2025 GMT
Not After : Apr 20 19:01:44 2025 GMT
Subject: CN=7f68d85a4fbe805b5b3ebf413644124c48456eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:fd:d0:87:49:9d:d6:c0:cc:2f:85:a6:46:
fd:37:e0:c2:c8:12:26:2b:6b:aa:5e:e1:1d:2e:40:
77:6d:61:53:bc:e6:b4:fa:86:57:3b:d3:6b:40:e1:
05:2c:52:ea:5d:ed:bf:e8:b2:f6:5a:40:e8:cc:b9:
4f:13:be:42:cc:24:7d:71:bd:2b:fa:f1:4f:bb:7c:
41:03:27:c1:d8:df:fc:7e:c8:24:c3:71:64:43:d4:
77:17:25:b0:f4:28:f8:2f:66:27:c0:19:3a:cf:ee:
c0:30:b2:ac:d9:6a:f4:45:f7:5c:29:9f:fc:be:15:
f8:85:46:5d:5f:8e:80:e9:94:dd:54:64:59:bd:d3:
b5:93:20:a8:f2:4f:a0:87:43:cd:f0:c1:76:ec:ef:
74:92:27:38:64:62:ea:9c:6b:54:58:c9:0a:e6:a5:
85:73:8b:95:9a:46:e5:59:35:0c:6a:59:5e:98:63:
f0:c5:7c:74:e8:ec:b9:41:36:9a:d1:79:7f:ad:26:
54:9f:51:6d:20:ea:3f:10:e2:06:db:4d:35:63:0a:
81:0d:0a:bb:3c:57:82:8d:23:12:8c:79:7f:db:9b:
d6:5e:9f:e7:8c:a8:fb:a3:ac:3a:8e:80:f9:45:ef:
ce:00:64:8c:f3:04:50:46:49:53:8f:fb:5f:3e:c6:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:D8:5A:4F:BE:80:5B:5B:3E:BF:41:36:44:12:4C:48:45:6E:CA
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7d:cc:14:8c:e6:29:37:21:5e:82:69:8f:c9:a1:3e:c6:5d:
ed:51:63:29:4f:64:44:39:70:83:8c:d0:04:e4:45:d7:a2:85:
50:b7:15:d5:33:bd:a6:29:7e:21:b8:71:95:f7:79:d5:30:d6:
80:37:77:d1:b5:14:7d:8b:80:89:64:2e:d3:0f:7b:89:b0:d4:
5f:37:68:64:f9:ac:a8:4d:1e:d1:96:9a:c5:88:42:4f:b8:31:
bc:00:24:a3:6f:05:63:e8:a4:c6:8c:0e:46:08:94:16:c4:19:
7c:1d:c4:af:7a:c5:23:f4:28:8e:5c:21:8c:60:68:42:e3:5e:
bf:46:5b:db:06:5e:9f:f1:8c:fa:7d:1f:47:9a:1a:75:4a:34:
6d:60:52:2c:45:ca:28:72:8c:ce:46:a6:a2:62:59:af:7c:09:
50:0f:f9:03:f6:71:0b:e9:c2:64:0f:87:ec:47:a1:ae:74:92:
d7:7c:2a:d9:4c:c8:2a:a4:97:42:39:f8:c3:83:37:2d:48:43:
ac:7e:a7:6d:09:6c:35:ff:c7:38:be:5b:02:7d:33:07:7d:4e:
ce:6f:7d:07:16:05:c9:22:17:29:14:0e:c0:26:35:64:0b:9a:
a4:16:e5:59:3a:d9:9b:cf:f7:d9:9f:0a:58:af:f3:3a:bf:8a:
36:d3:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:59:59 2025 by rpki-client