Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: H65+ZTCso3Q4LdDbsz1sSId/z/9Wpo2RZUnZGJiNPfU=
Subject key identifier: ED:F4:D2:50:2F:A9:F2:07:0D:7B:CD:A1:D1:4B:57:D7:E3:90:0D:67
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 01976A0616C241DDCFF8424D923777ED3E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 16:01:13 +0000
Manifest this update: Fri 13 Jun 2025 16:01:13 +0000
Manifest next update: Sat 14 Jun 2025 16:01:13 +0000
Files and hashes: 1: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
2: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: 6rH73YxziS7zxZhChINyDzhUfKUgyQwSG2w3JI6KEDo=)
3: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:16:c2:41:dd:cf:f8:42:4d:92:37:77:ed:3e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Jun 13 16:01:13 2025 GMT
Not After : Jun 14 16:01:13 2025 GMT
Subject: CN=edf4d2502fa9f2070d7bcda1d14b57d7e3900d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:49:5f:5c:69:3d:16:6d:5d:0f:05:42:66:
6e:02:d2:f8:cf:16:19:a5:eb:ec:a6:4b:fc:fb:c4:
4f:66:14:0e:d2:b8:fa:70:3a:de:da:9a:ae:63:f6:
55:ee:32:ff:36:a7:3f:84:75:ad:b0:cd:04:4f:72:
b4:16:8c:23:a9:cf:2f:af:82:4a:2b:b1:65:40:82:
c6:eb:c6:71:ef:7a:30:31:86:4d:ab:af:03:36:94:
f3:f3:03:7f:c3:c8:b3:75:dc:d9:32:7e:55:a8:29:
40:1c:bb:5b:51:6f:80:df:d0:e4:83:53:f2:f4:47:
36:bb:ee:83:83:d2:7c:d1:37:93:58:23:05:39:c6:
0a:cd:9b:aa:6b:60:15:b9:9a:d7:59:88:b9:b5:4e:
f5:69:2e:91:28:cd:cb:5b:a3:b1:88:14:00:0a:95:
e9:b5:7f:d8:4e:c9:cf:7b:d8:38:2a:e4:e0:a4:e7:
29:89:08:8d:20:f0:58:77:ee:bb:d2:94:00:73:24:
7a:26:e5:3a:03:eb:ca:77:e2:64:b8:76:c2:a9:d2:
70:6a:96:0e:82:4e:21:a1:e4:9d:77:d2:58:f4:03:
c5:33:bb:9d:8e:b7:0f:52:c1:e3:5a:aa:18:fd:c7:
64:7a:49:4a:1d:e2:e3:a8:f4:05:13:2e:ec:f6:68:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:D2:50:2F:A9:F2:07:0D:7B:CD:A1:D1:4B:57:D7:E3:90:0D:67
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b1:48:26:94:42:65:89:c0:22:79:da:1f:5a:7c:ae:48:d9:
90:9e:60:7d:fc:54:dd:92:74:d7:75:26:f9:af:8f:92:24:e7:
aa:9a:49:da:26:99:d9:fc:8f:e9:93:fe:4e:f4:d3:98:f3:b4:
03:fa:b1:10:11:98:2d:0e:cf:24:cb:02:ab:6c:bf:4c:b9:44:
53:2a:5a:e7:9d:b7:30:0d:75:1d:c4:00:0d:b2:2f:41:af:80:
d6:bb:be:a7:d5:52:bc:42:17:50:be:e7:83:e8:e1:92:79:f3:
34:94:86:d1:f8:49:04:23:1f:ed:86:53:c7:fb:cc:1e:79:c1:
78:5b:a4:24:fd:e8:47:25:0d:89:fa:00:d1:14:92:ce:4a:bc:
31:27:1b:bc:4d:dd:d6:be:2e:75:eb:41:41:88:47:a9:fb:80:
ba:9a:48:57:91:f3:b5:6c:19:3f:d3:f0:5e:de:2e:d0:3e:0f:
a4:29:a8:61:ad:9f:8b:86:e8:7c:48:02:e1:b1:2c:18:92:6a:
70:36:7c:dc:9e:fa:29:a3:68:7a:62:57:cf:2d:41:52:78:be:
a0:86:67:80:4e:79:3a:ae:35:cc:de:8a:6a:6b:b0:f3:9f:f1:
ed:2e:8b:c6:c2:82:89:9b:ce:14:f4:39:df:a1:77:fa:5b:35:
5a:96:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:51 2025 by rpki-client