Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File: vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier: 84spuJHa5T3yBr6r+Q1ijtb+6ckJLzG4CdXtOsHMg00=
Subject key identifier: 8C:E9:41:51:61:73:79:40:0E:F1:D1:E2:4B:41:02:22:C1:6A:0B:28
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer: /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial: 019A70A584CA5EF3D2E31E50D17FC44A3103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number: 074A
Signing time: Tue 11 Nov 2025 02:01:26 +0000
Manifest this update: Tue 11 Nov 2025 02:01:26 +0000
Manifest next update: Wed 12 Nov 2025 02:01:26 +0000
Files and hashes: 1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: 39UctqedDllAYYJrjK0zrykaOayDmaoDWHiapE5J8dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:84:ca:5e:f3:d2:e3:1e:50:d1:7f:c4:4a:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Validity
Not Before: Nov 11 02:01:26 2025 GMT
Not After : Nov 12 02:01:26 2025 GMT
Subject: CN=8ce94151617379400ef1d1e24b410222c16a0b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:23:44:8c:56:0c:d0:db:ce:30:1b:2a:b4:
24:b2:aa:30:8c:5a:22:a3:6f:27:e0:e6:89:57:20:
d9:77:26:fb:30:55:6a:4d:a1:4b:ba:b9:e7:86:d6:
7f:c4:1a:43:92:f4:9b:e5:af:a8:1b:94:a5:b2:06:
07:f9:24:9e:ae:e5:0c:41:78:f3:d5:38:67:3b:09:
28:20:6d:e6:da:26:11:99:6f:19:1f:f9:a2:4b:e7:
d5:ee:5c:8d:1c:b6:c1:22:c6:dd:1e:80:e2:6c:a2:
b0:de:7d:9b:65:43:bb:e2:4f:f9:5a:53:f4:29:70:
df:d2:a1:16:3a:a4:3a:32:80:35:ec:30:d3:5b:26:
58:88:0b:1e:c7:87:c8:d4:a6:1d:02:59:3f:f5:c2:
8c:19:62:58:46:20:47:7c:20:2f:46:4e:4c:3f:a5:
c0:bb:f8:1a:8a:57:f0:2a:27:d8:09:f5:b4:55:55:
fd:45:4c:bc:b5:0e:b2:a9:67:21:ea:c9:e8:6d:fb:
f2:28:5f:05:99:d1:30:4a:75:ef:e3:fb:82:81:fd:
7e:37:32:a9:4f:11:7a:ae:f0:7a:10:3c:ec:b2:e4:
8c:29:af:8b:d0:1d:f7:66:5f:97:f3:ae:cd:df:28:
53:87:f6:c4:11:fd:2f:c8:c8:69:7b:e1:be:10:28:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:41:51:61:73:79:40:0E:F1:D1:E2:4B:41:02:22:C1:6A:0B:28
X509v3 Authority Key Identifier:
keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:29:33:02:ea:ba:fc:70:dd:50:76:22:c4:02:87:46:c4:16:
b0:51:02:06:bb:86:05:18:00:92:4d:c7:db:96:2d:18:67:c3:
c0:54:89:f7:a2:67:ef:c3:bc:a8:76:89:6b:15:d3:6f:87:53:
f9:0d:3b:8c:04:12:f6:40:8f:8b:65:78:9c:75:d9:20:a6:69:
49:c8:a9:d0:a4:35:79:1a:f4:d4:8b:55:4c:34:34:e5:4b:33:
73:dc:c0:de:53:aa:d7:66:c6:bc:6d:6a:94:1c:57:bb:a8:9f:
45:28:76:41:6d:b4:53:9a:03:7c:4e:b5:84:a3:cc:5a:a4:33:
20:ca:60:66:1f:4a:e5:22:49:38:88:da:3e:d2:48:fd:06:ef:
f4:6d:9a:23:25:5b:ef:62:33:15:a6:a5:33:30:5f:ad:95:01:
a6:b5:8d:5e:26:31:d9:9c:0e:59:4e:06:0d:6c:04:b4:fe:a3:
fd:b4:fd:9e:ea:bb:5e:89:ad:77:11:89:41:11:5b:fd:9c:b3:
11:12:43:06:d5:4b:df:f9:81:b6:a7:95:93:6f:89:1a:c0:6a:
ca:14:f7:19:48:55:33:78:21:58:93:e0:41:31:43:e8:02:db:
68:c3:25:cc:59:9b:7f:ae:08:ca:86:36:f2:b5:de:59:e9:4d:
66:5b:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:28 2025 by rpki-client