Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: LvAb3SAMGHls4GdFkvrVpISvSc2keQkGn2NC5OInfJ0=
Subject key identifier: A3:52:6C:2C:F5:03:8D:0B:87:16:63:63:B8:CA:AC:0F:E8:5F:5B:49
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 01977151429821C0750006EDBC2AEFE8FCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1189
Signing time: Sun 15 Jun 2025 02:00:40 +0000
Manifest this update: Sun 15 Jun 2025 02:00:40 +0000
Manifest next update: Mon 16 Jun 2025 02:00:40 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: 9FeE9oVlfo5TtDV6Tzz8mJ+XuRTjNpdtgwuPlOl3TRo=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:42:98:21:c0:75:00:06:ed:bc:2a:ef:e8:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Jun 15 02:00:40 2025 GMT
Not After : Jun 16 02:00:40 2025 GMT
Subject: CN=a3526c2cf5038d0b87166363b8caac0fe85f5b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:39:ac:96:64:bb:ea:ac:17:d7:1c:82:5b:
46:0b:85:a7:0a:54:6d:3c:3b:a8:40:72:20:eb:50:
3e:37:7d:c8:29:f0:eb:3b:21:86:96:dd:b7:15:62:
93:6d:66:15:b5:e7:93:41:06:36:52:5b:f4:6d:6d:
71:8e:fb:e2:1d:4f:5d:ee:bb:2b:3f:a7:7a:12:4e:
7c:89:38:7a:12:3f:ff:72:54:66:f6:f2:1c:a1:51:
1c:54:0d:10:83:c4:b3:a4:cf:05:99:5f:55:74:8b:
97:77:5d:9e:5a:fe:fb:84:4e:25:03:0e:78:bd:56:
c2:32:41:ec:f0:38:ac:24:68:96:e4:98:80:53:6a:
89:9b:96:d4:af:73:59:e0:d2:04:5b:a7:6f:f9:79:
98:b7:71:62:e2:d8:ce:f7:5a:76:d8:8c:2d:e8:34:
d5:2d:57:74:5e:9a:76:af:c7:6f:95:7f:1f:ce:f3:
b6:30:89:bc:5a:9b:2c:aa:25:cd:50:b2:89:d7:51:
20:c5:fe:65:0a:6c:f8:c6:3a:20:e3:9e:0b:a4:b9:
e9:fd:b2:b3:af:4c:a0:8f:5f:79:d6:fe:fd:18:36:
7a:7e:21:f3:23:3c:45:7a:d4:00:f4:2a:4d:92:d9:
10:db:89:e0:6b:11:24:a0:a5:21:05:45:b7:94:51:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:6C:2C:F5:03:8D:0B:87:16:63:63:B8:CA:AC:0F:E8:5F:5B:49
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b4:a7:8a:40:6c:22:0d:67:d1:87:8b:62:74:3c:32:ab:49:
63:8c:b5:19:97:2d:62:1b:33:2c:51:75:9a:6d:7e:50:08:00:
b8:e0:aa:37:f1:83:f9:d1:57:84:ca:ba:e7:fa:e2:7f:71:20:
f9:ec:78:af:91:ad:c2:30:c3:fa:5e:3a:18:7e:b4:37:56:c5:
99:bf:64:1c:8f:37:20:0f:2b:eb:17:34:6f:ef:fe:a1:1f:e9:
25:bd:bb:f2:98:1e:19:60:ea:a0:aa:6d:26:51:97:30:aa:c2:
7f:1d:95:5c:d1:e3:df:b9:70:55:1f:88:c7:ae:26:49:72:55:
c4:a5:89:6e:46:9e:52:dd:5d:b7:43:0e:51:02:9d:a7:b8:b3:
f4:f0:5b:f5:6c:aa:b4:0c:28:59:14:89:4f:1e:b3:4c:65:8a:
6b:9a:bf:95:c0:94:89:ce:35:fb:b3:e5:68:d4:26:50:a3:43:
ae:11:80:74:15:c5:3b:96:5a:cd:8a:1e:4f:4e:fb:3d:33:da:
51:0e:dc:00:09:c9:61:8f:52:ab:3e:8c:82:60:82:f4:4d:5d:
0f:5f:19:c7:84:88:90:22:07:dc:8a:25:6f:c3:5a:81:73:db:
5e:ac:e3:9b:e3:77:65:4f:22:60:01:c4:44:aa:da:9a:4b:73:
ee:7f:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:00 2025 by rpki-client