Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: aAN58OFhcH5gM8TfJvKrOIrpRIJiwRbuMnE/apWS9fE=
Subject key identifier: 41:91:0C:52:B7:1B:F5:43:51:5B:40:F4:E7:31:A7:5E:F6:CC:BA:B8
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 0197499F6F18FC955F099E4FD3E18300B279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 03B4
Signing time: Sat 07 Jun 2025 09:01:14 +0000
Manifest this update: Sat 07 Jun 2025 09:01:14 +0000
Manifest next update: Sun 08 Jun 2025 09:01:14 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: PUgI5nPUlMmEzfyoFBdMBQB+5IrAQbAB7hpRV8V/0kY=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:6f:18:fc:95:5f:09:9e:4f:d3:e1:83:00:b2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Jun 7 09:01:14 2025 GMT
Not After : Jun 8 09:01:14 2025 GMT
Subject: CN=41910c52b71bf543515b40f4e731a75ef6ccbab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:12:a2:af:7a:9b:4f:78:72:c7:af:67:cd:
bf:1f:f9:d8:02:24:fd:2b:3c:b2:3f:98:53:0d:cf:
ea:7b:19:1d:b8:ee:9a:17:af:84:e9:bb:b0:1b:b2:
16:a9:19:53:a4:ab:fa:9c:4f:a6:6e:cb:47:a0:f8:
99:56:6f:3f:f7:b2:fa:00:2b:98:e5:57:3f:5a:6c:
79:5a:6d:0f:ea:c4:62:8a:52:05:78:da:65:b9:a6:
ea:9b:92:fa:38:14:23:95:c0:f8:f1:eb:dd:47:bd:
f1:1e:6f:1c:b5:71:64:79:91:53:d9:c2:08:b7:6f:
2d:21:9a:a4:18:8d:d7:f2:dd:36:c0:b1:1b:41:a5:
8c:a5:35:ad:2f:38:dc:a1:72:80:e9:94:0f:3a:ba:
ce:f7:c5:5f:a3:0c:6b:2b:03:32:5a:38:c2:bd:c0:
75:ee:d0:6f:09:dd:88:8a:31:25:b1:1b:95:15:dd:
8a:35:40:80:47:3d:3d:7d:8b:bc:b7:99:69:f9:b4:
d3:63:75:eb:a7:5f:9e:1d:64:0e:ef:4a:05:e4:f7:
a7:40:dc:6e:a4:0f:9f:ff:15:c3:bd:2a:10:63:f6:
d8:ce:11:6e:b4:7d:d4:82:0d:3c:9c:c1:80:55:5b:
07:4c:9b:21:44:03:c7:28:b4:ce:2b:da:e5:ea:d4:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:91:0C:52:B7:1B:F5:43:51:5B:40:F4:E7:31:A7:5E:F6:CC:BA:B8
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:03:60:f0:bf:53:b7:df:77:80:4f:02:89:3f:67:aa:bb:
24:87:e8:0f:9f:91:c6:b3:74:8f:3e:3e:79:02:bb:61:b3:0c:
7e:b8:24:40:b9:3d:62:68:a8:97:75:7d:3b:45:25:ed:91:f7:
2e:0c:87:d2:8c:c8:26:2a:cc:d1:36:f8:de:cf:17:43:47:8b:
10:96:4d:d1:73:db:e7:32:ed:6b:f5:6a:a6:25:da:6d:82:60:
03:3d:f1:26:17:19:ec:44:d6:73:38:ba:c1:52:44:09:25:bc:
6d:1e:53:90:62:e2:dd:a2:a6:96:5e:d6:41:3b:5d:cc:8a:8f:
2a:0d:f3:67:97:65:08:cb:23:c0:e4:cb:4c:10:58:57:86:ed:
e0:f5:6b:31:1c:4c:76:94:8b:ef:1b:09:5d:c9:ca:7c:f6:c9:
9d:7d:60:e5:61:00:a9:28:fc:d2:cc:c9:f9:01:73:16:3e:fc:
74:fd:74:7a:51:40:cb:76:05:df:a7:8a:cc:1c:d7:df:f7:06:
3b:a2:e6:cb:0d:fa:37:ab:f3:b9:27:0e:f4:31:67:4c:9d:43:
e5:cc:e7:3e:08:d4:cc:7e:44:2b:9c:38:84:7c:0e:fa:cb:67:
91:c6:9e:28:b0:e6:ac:9d:71:45:b3:46:bd:fd:6b:f9:54:97:
8e:34:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:19:55 2025 by rpki-client