Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: l4z3I5X+/CqY10SMvAeMvnho0SXqp2wwSM5uxjiK6dY=
Subject key identifier: 5C:C4:0A:50:0B:FD:AD:0C:9B:AE:41:97:F3:29:A3:2C:6A:B5:BE:08
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 01968390C438DD05A3E5508BF95F5CEB3BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 22:00:24 +0000
Manifest this update: Tue 29 Apr 2025 22:00:24 +0000
Manifest next update: Wed 30 Apr 2025 22:00:24 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: N6XKTQlvajyWjdlnSZy+7UX6wltqv4qJHpYYunDr5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:c4:38:dd:05:a3:e5:50:8b:f9:5f:5c:eb:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Apr 29 22:00:24 2025 GMT
Not After : Apr 30 22:00:24 2025 GMT
Subject: CN=5cc40a500bfdad0c9bae4197f329a32c6ab5be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:58:e9:75:0d:31:f2:de:bf:07:e2:5b:4a:
01:de:d0:7f:1d:51:cf:0e:94:cc:b5:69:b0:25:2a:
43:26:d9:97:8f:aa:90:b3:cf:ff:7e:b7:08:0e:b6:
2f:5e:12:7e:86:15:1f:0b:9c:bc:bd:25:c6:7e:c3:
31:90:22:e1:9b:f1:08:78:b8:de:b3:f3:73:48:c2:
a1:bf:17:c4:e5:31:7e:61:27:4c:c2:f4:e2:df:84:
f4:3c:02:aa:3a:f1:05:13:ee:ec:95:8d:f6:c2:78:
9e:4a:1d:f4:f4:fb:30:66:0b:ea:59:57:d0:fe:fe:
cc:3d:27:76:2d:16:a6:79:39:d5:6d:9e:29:3b:7c:
7f:a0:ce:79:80:41:a1:99:c6:50:bd:4a:34:76:10:
bb:a8:e7:ea:44:87:72:09:63:7b:92:de:83:3d:c4:
a3:9f:c8:72:7d:33:7f:cf:2a:9a:ef:f9:32:ce:29:
c1:93:62:a7:cf:95:b7:05:6f:91:f1:2d:5a:d0:15:
43:67:aa:69:e7:9d:69:e6:13:c4:40:48:68:c0:98:
c4:cd:17:a5:5b:79:c8:28:56:c5:a4:47:49:e0:5d:
d2:d2:f2:18:b1:d1:f9:3e:fc:77:95:b6:d3:a2:42:
44:f5:b0:02:b0:cc:81:ec:9d:d4:77:41:51:b9:60:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:0A:50:0B:FD:AD:0C:9B:AE:41:97:F3:29:A3:2C:6A:B5:BE:08
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:ff:39:3e:fa:1e:da:69:88:85:20:d5:e0:da:57:20:c4:
31:59:f3:d5:c5:b7:9c:ed:fb:8c:50:4a:6a:5b:5a:a8:57:c2:
5f:2a:56:9a:5b:7a:36:58:95:64:91:46:69:bb:91:5b:b8:f1:
eb:73:33:20:ba:18:d1:2c:ea:ca:50:78:ea:ca:0a:88:ae:3d:
9c:ce:f8:4f:cb:60:e4:72:bd:7e:7e:f7:28:08:b0:ed:07:be:
1d:d4:10:a3:a2:8e:1b:8f:a8:b3:a0:fa:4e:a9:3b:a7:56:26:
6c:43:f0:9c:be:16:bc:f6:72:5c:f0:fd:95:d2:9b:f1:a0:22:
a6:70:4d:76:90:11:c0:62:65:93:3c:e2:21:b4:72:a4:27:2e:
05:0a:f5:ad:3c:63:5e:80:09:86:4b:2a:fe:09:89:62:41:35:
02:c5:b6:f2:6f:dd:e9:b3:aa:57:01:74:f4:68:f6:90:91:ab:
ee:10:3a:5f:24:3f:44:bd:e4:ea:a5:03:c2:a2:1b:88:3d:a9:
95:33:d0:9e:82:c1:17:31:c3:d8:da:1c:8f:d5:68:ad:03:ab:
1a:ad:07:80:02:e4:50:63:47:84:70:fb:7a:68:cf:c7:7f:9f:
c5:6f:5f:2c:ac:ba:ba:ce:2f:11:9d:0b:7b:af:0c:d9:b0:17:
bc:a1:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:43:25 2025 by rpki-client