Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
File: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft (raw, json)
Hash identifier: V1Ul3DXyYiZwcrToKDpxWs1Ai749g5B3LrSzsdgqSH4=
Subject key identifier: 4A:C7:92:64:0C:FC:B2:64:1D:66:A3:53:73:8C:59:1B:78:47:AD:C1
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 01967C453DAABD8BDA64E86D73232E19AF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 12:00:34 +0000
Manifest this update: Mon 28 Apr 2025 12:00:34 +0000
Manifest next update: Tue 29 Apr 2025 12:00:34 +0000
Files and hashes: 1: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl (hash: WHByNEZPrZmc0mNtNDlqyk7h2Mhpn+0IzXZI2Y01egw=)
2: wFRK2gFO2y-GioRIpDn5lp85ecQ.roa (hash: A8Q7B434lxyY0QPj8csraRvBG53nBnhwRwO+e87bSWA=)
3: xY9MZyofE4_6jiY0oDDhMJyfHtw.roa (hash: SNap0h28tjMNg/zc5gl63p8JrVkT7E4Wu94Pvosrm/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:3d:aa:bd:8b:da:64:e8:6d:73:23:2e:19:af:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Apr 28 12:00:34 2025 GMT
Not After : Apr 29 12:00:34 2025 GMT
Subject: CN=4ac792640cfcb2641d66a353738c591b7847adc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:fc:1e:6d:29:bc:1e:f3:45:a5:81:0b:06:
fa:cc:50:65:49:59:94:79:89:cd:f0:79:d3:a9:a8:
f5:ec:d8:bc:33:b7:85:98:ca:60:26:0e:d7:08:03:
1b:7d:2c:5d:f5:ed:e3:7b:31:c6:2d:68:8f:8e:c5:
78:0a:24:d1:fc:3e:ab:c3:34:1d:b6:bd:fd:f1:15:
50:71:51:0b:da:bb:bc:11:e2:62:88:9a:78:01:3e:
70:89:05:eb:26:2f:27:f2:97:38:c0:db:54:9a:56:
7b:47:ef:2a:ae:8b:a1:c7:ff:44:0f:d6:6b:12:ce:
a6:e0:86:01:6e:97:51:13:35:64:3e:db:29:8c:23:
b6:ec:80:2b:01:a9:b7:9a:3b:ab:26:c2:fa:50:ea:
26:40:ba:11:14:e8:0f:e6:04:a0:8a:49:40:55:b5:
ff:e0:8c:3c:11:96:d6:21:92:62:76:78:3b:d3:31:
bc:c7:0e:b4:f7:e1:09:aa:72:0f:0b:d7:27:d8:7d:
83:f4:84:7a:ef:1d:1e:1b:fc:8d:9f:52:76:74:59:
99:b7:f2:4b:e3:1d:f4:96:d4:4c:cc:54:b1:b6:89:
ad:33:24:fe:98:7d:9b:07:43:d2:17:b1:fb:fa:a9:
3b:27:30:5d:60:a6:0a:0b:b9:1c:91:5a:36:3d:39:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:92:64:0C:FC:B2:64:1D:66:A3:53:73:8C:59:1B:78:47:AD:C1
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:b1:60:dd:59:95:2d:04:30:01:c1:b6:56:f5:c1:ee:eb:
c3:65:b9:d3:e7:53:49:d0:8d:09:b7:bb:3c:8c:50:14:ff:cb:
a8:b6:50:1d:33:90:a3:d2:42:ca:6f:2d:8f:98:fd:87:fc:9d:
6c:61:8a:4d:c0:f3:03:58:e4:f0:5c:14:8c:05:64:1e:4d:54:
f0:10:8b:fb:5a:99:27:f5:83:33:97:d9:d4:21:2d:b1:8d:42:
27:79:80:86:79:6b:10:29:72:e9:87:77:4e:d0:77:a3:ef:6f:
4e:e9:8f:09:37:63:56:12:3c:2a:25:bb:04:ce:e4:10:0b:45:
bf:81:7b:3d:e2:0d:c6:72:b3:1b:53:4d:13:50:91:8d:43:14:
53:63:88:43:cc:89:00:dd:21:56:14:6a:90:e3:56:16:b9:c5:
5d:f5:48:06:0c:95:7e:9f:d4:5b:5c:31:48:d3:0e:85:e3:16:
d7:82:06:74:6a:4a:ea:5a:15:57:23:ad:97:04:7a:28:2e:2a:
1b:fe:5e:0d:89:7d:16:71:43:be:60:15:ee:52:6c:07:fe:8b:
48:eb:4d:a2:46:c3:2c:bd:3f:59:4c:be:cb:cb:e1:d5:fe:ce:
20:25:bc:a2:a1:69:77:18:b1:8c:a4:98:ba:63:7d:db:32:0d:
ea:3c:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:13 2025 by rpki-client