
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: rDv7f7+RKFJX/Ga8+3EN3E/vqUpJevsyeIBbbe/vNyM=
Subject key identifier: 9F:21:5F:81:1B:D2:DE:46:6F:D5:22:3F:8C:D9:A2:74:74:8D:AF:31
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 01984A77A861EC58C784EDE0641D117E2601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 0439
Signing time: Sun 27 Jul 2025 06:00:12 +0000
Manifest this update: Sun 27 Jul 2025 06:00:12 +0000
Manifest next update: Mon 28 Jul 2025 06:00:12 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: BDb3HG2LnJ+CNXlrYbx2ZpiTPdMcBilzc31OTCirqZQ=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a8:61:ec:58:c7:84:ed:e0:64:1d:11:7e:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Jul 27 06:00:12 2025 GMT
Not After : Jul 28 06:00:12 2025 GMT
Subject: CN=9f215f811bd2de466fd5223f8cd9a274748daf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:df:7f:d6:ef:80:9e:74:d6:06:6f:b3:1f:
d5:4a:d0:ac:a0:5b:ed:be:7e:24:39:ad:7e:fa:3a:
f2:da:d3:31:77:7d:e6:78:f8:92:eb:a8:a5:6a:59:
4d:2e:c0:a1:05:20:49:8c:2b:62:12:9e:a0:e8:f3:
66:52:f8:14:fb:92:88:e8:b4:6e:03:85:49:35:54:
63:13:35:cf:50:d0:8e:4b:22:51:6a:55:d8:71:6d:
95:85:d4:e6:16:8f:95:99:f1:6a:fb:cf:9a:5d:60:
f7:5f:9c:74:0a:13:73:b4:ba:3e:ba:5e:0d:54:22:
07:59:72:65:07:e9:d7:ab:22:db:8b:ac:09:d5:ba:
f0:d1:0a:42:7b:dc:ca:75:8b:ce:6f:80:51:16:bb:
60:74:e9:76:12:6b:4d:82:dc:ac:c8:d9:dc:3f:a3:
57:06:c8:92:f2:49:56:3f:1d:20:75:06:88:15:b9:
6a:79:5d:45:fd:a5:36:ac:16:8b:f1:ee:d5:11:2a:
14:e0:10:f1:23:2b:17:3c:8d:5c:de:f8:05:92:0c:
57:93:cf:fe:e6:fb:9c:ea:46:92:75:59:82:88:e4:
ab:07:92:19:b5:0d:7c:cf:ad:28:4b:d1:2e:af:0d:
9f:f4:ca:6b:c7:be:03:d8:5f:9c:46:61:e4:82:b9:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:5F:81:1B:D2:DE:46:6F:D5:22:3F:8C:D9:A2:74:74:8D:AF:31
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:bb:b6:65:ad:96:f3:bc:a5:39:b5:e1:21:8d:39:00:05:
5d:5c:83:1e:9f:bd:2c:06:6a:7e:a7:c6:6f:2a:5a:48:20:b0:
ba:6e:b5:4d:00:68:1b:a2:7d:fb:64:96:7a:81:ed:e1:e6:30:
9b:d2:81:9d:03:6d:7a:51:a2:47:7d:94:f7:7f:0c:22:11:8e:
d6:a7:bd:ef:fa:a0:20:3c:63:85:88:78:e8:26:3c:23:f5:5a:
4e:44:b6:b4:81:4e:b5:30:f7:5c:3b:91:5f:24:61:bb:61:bc:
76:1d:82:e4:90:cf:43:08:a0:01:f2:59:ff:d3:84:d6:0d:93:
cc:2b:34:92:be:dd:ae:46:67:02:24:33:92:fa:51:3a:5f:0b:
f5:d9:86:a4:f8:de:2d:1c:39:86:35:35:e2:cf:b6:8f:51:34:
a3:64:bc:64:c2:34:40:46:38:07:18:ad:ab:88:eb:71:a2:39:
b3:af:a6:07:76:da:1c:52:25:b7:59:55:df:8f:b5:ee:e2:04:
30:80:97:8d:a9:08:f9:ba:bb:c4:45:66:df:a1:45:e0:78:9c:
36:3f:ce:40:f8:47:cf:32:4b:ab:44:59:a6:f5:06:de:c4:66:
04:03:37:89:8c:1c:30:70:79:03:68:b8:b0:72:19:47:2b:70:
97:e3:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:11 2025 by rpki-client