Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: Xdafs1U6KAmpyLlLvwwAW2UNPNHs7bUjJEDu2B8yong=
Subject key identifier: 82:E5:83:20:0C:84:30:07:39:CC:1A:B0:4C:D9:91:E6:35:B6:36:7F
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 019A0C6F61EE83B377F1A6626F72759E33C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 0522
Signing time: Wed 22 Oct 2025 15:00:17 +0000
Manifest this update: Wed 22 Oct 2025 15:00:17 +0000
Manifest next update: Thu 23 Oct 2025 15:00:17 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: Hg9iGSuQT80REWlwKLFMk9QAJbbQTwHCaLlbakC5NOo=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:6f:61:ee:83:b3:77:f1:a6:62:6f:72:75:9e:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Oct 22 15:00:17 2025 GMT
Not After : Oct 23 15:00:17 2025 GMT
Subject: CN=82e583200c84300739cc1ab04cd991e635b6367f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:52:c3:58:1f:a0:b2:99:ac:b1:74:02:60:
0f:26:3e:f2:fd:1e:6b:fc:d4:0a:32:05:ea:7e:cf:
2b:49:00:0b:59:a8:39:76:c8:a9:52:5d:df:b8:04:
4f:e6:7f:73:c8:6a:30:84:23:d9:0e:56:3b:01:5f:
41:c4:33:3e:3f:2a:cf:56:e4:1d:76:5a:67:9b:e0:
e0:74:75:08:22:de:32:a8:7b:33:2f:fa:13:e9:e7:
08:23:2c:65:c3:78:27:37:b6:5b:0e:cf:de:c3:34:
84:e7:ee:b6:85:55:3d:ed:a6:3e:03:53:3a:d8:27:
b9:91:e4:8e:75:c3:25:09:32:9c:ce:4a:37:a8:61:
d5:f4:9c:9c:de:89:ad:d9:74:61:1a:56:90:3a:64:
22:8d:74:03:28:5b:5c:77:71:c9:16:21:ff:f5:40:
1f:0e:e9:69:93:7b:59:6a:4d:63:c9:7b:fd:b1:63:
9a:9f:3d:d2:10:d0:74:36:76:1f:3c:5a:02:ca:3d:
88:8b:7f:f1:0d:c4:4e:66:39:a8:44:66:58:6a:28:
e2:1c:42:92:46:3e:4a:52:37:f8:d6:88:ef:4c:a4:
e3:b0:3a:70:ee:a0:09:2a:d1:59:40:53:12:5a:e9:
74:7c:28:94:bf:23:5a:9e:dd:c9:5c:1a:6b:90:85:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:83:20:0C:84:30:07:39:CC:1A:B0:4C:D9:91:E6:35:B6:36:7F
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ff:73:3a:4e:a3:82:c4:41:0b:35:0e:fd:75:fc:c3:b4:58:
f3:aa:99:bc:6f:7f:42:b3:0b:5a:55:b3:26:a2:fc:b1:55:73:
60:81:b6:76:7e:67:67:3d:7d:7b:99:f8:79:eb:f5:85:46:27:
a8:fc:6c:21:01:75:70:c0:79:9a:52:b1:7e:38:bd:27:74:0f:
b4:35:bb:a1:f6:fa:fb:66:b3:f9:6d:e5:18:f9:2e:e6:bd:3a:
10:6f:0b:35:db:67:1d:f4:fb:90:c0:de:68:d4:ff:2a:25:9b:
bb:6a:c6:0c:13:48:32:7b:06:f9:81:a9:f4:5c:b1:b1:d6:a6:
59:5f:3b:f7:ea:bf:e8:d1:d8:e4:62:d7:cf:7b:e6:dd:ad:5d:
df:a5:05:7a:a5:f6:95:f9:fa:b3:0c:a2:f8:6c:ac:89:03:c6:
cd:41:99:08:30:3b:37:f7:e5:ea:49:60:55:ad:82:42:27:3e:
99:8d:56:97:f8:c6:23:5b:20:6f:5f:ed:4d:de:e7:06:f6:00:
a7:fe:f3:1a:21:71:58:fb:85:46:50:e8:1d:89:e2:9c:2c:33:
52:26:a4:4d:1e:4c:ff:19:44:2a:58:2d:3b:00:f2:d1:13:ea:
f0:3f:7a:15:eb:e4:36:f7:6b:c7:c7:0c:70:c1:c9:b4:41:15:
6f:d6:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:05:30 2025 by rpki-client