Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: CdEGn9h3wwKlU88LzafCYOXS8OWi25bOsrJZee8GRo4=
Subject key identifier: 58:A1:AF:40:C8:2B:A1:00:BA:61:CF:8C:26:87:08:74:44:AC:7D:65
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 019A5006F369F400506A91B7573DC99D99F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 0545
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: LC5ncHRxTDLg+IYYnnDKyFP0jq7AbPpkRkZn3aOGer4=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f3:69:f4:00:50:6a:91:b7:57:3d:c9:9d:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=58a1af40c82ba100ba61cf8c2687087444ac7d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:e9:aa:7b:1f:d6:d4:54:96:67:09:7c:5c:
d8:ee:45:89:26:68:a6:d7:2d:e4:4b:20:a9:d1:74:
cd:8a:37:98:ea:4c:c8:55:0d:1e:b6:6b:85:2a:b6:
93:61:46:b1:29:ec:28:84:2b:49:4c:d3:47:e5:30:
84:2c:40:a3:8f:4f:fe:3a:6d:df:49:e0:ec:af:a9:
5e:55:e1:c7:97:7c:4a:67:20:9c:cc:1f:a4:79:13:
67:89:e1:58:3e:6a:05:b0:bd:02:3a:63:08:24:0c:
a7:49:70:d2:b2:98:a5:50:9e:3f:13:7c:4e:35:f7:
67:c6:65:3c:fa:e7:d4:89:c0:4e:ad:fb:a6:71:d6:
15:79:08:71:dc:e9:d7:12:bb:f7:8c:31:a9:e4:ec:
63:43:76:38:24:79:81:75:36:04:67:9b:fd:00:6d:
0a:24:11:b7:40:65:af:47:e3:1b:65:23:e6:c9:8c:
51:4f:1b:a5:6b:1e:fd:6e:79:67:27:6e:56:9a:4b:
9c:0e:c1:dc:59:05:05:d3:ce:94:96:d7:5e:9a:fd:
f3:c5:6a:bd:a5:ba:38:0d:99:a0:b8:23:23:af:87:
33:bb:f5:f3:71:3a:89:b0:b7:19:2e:f7:a5:01:3a:
f6:e2:bd:8f:0b:a9:44:a8:7c:0f:d6:e8:c5:b4:65:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:AF:40:C8:2B:A1:00:BA:61:CF:8C:26:87:08:74:44:AC:7D:65
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:07:49:53:c3:d5:6f:38:ef:91:2f:b0:65:4d:01:64:59:
f0:06:13:1d:a4:db:68:6a:0d:4f:78:75:2e:3c:d1:4d:f6:51:
ce:9c:5c:9e:3a:07:b0:f9:09:ef:39:99:ed:27:21:8c:3b:25:
a2:ad:77:f2:38:b8:5b:31:f9:84:03:73:dc:51:96:03:07:d3:
f8:d6:d7:16:36:61:c1:58:e7:da:7b:84:5a:ca:62:55:d9:c8:
f2:1e:e4:ee:e5:1d:d6:15:e0:b8:54:15:6d:2a:d7:c9:61:11:
22:39:d1:90:25:d8:38:2e:46:43:6d:5d:08:43:bf:22:12:72:
c1:65:fe:f1:7e:b5:df:b8:e3:55:81:4d:06:96:8f:8b:f2:de:
f7:97:ec:26:23:e0:5e:6c:b0:67:a2:8d:e3:bf:3c:2e:93:97:
dd:0b:2c:99:6b:01:de:3a:d1:2c:0f:86:8b:e3:a9:fa:49:93:
d0:c3:80:d4:a3:91:09:84:64:e7:89:40:b9:53:f8:18:1c:5b:
35:9c:a1:b0:e8:f1:8c:65:ac:75:0c:d5:6c:3e:ae:81:c7:e6:
42:ab:6c:5e:ad:4b:8b:09:f3:5d:80:1d:fa:45:05:7c:d3:9f:
6b:d9:e6:33:4c:c5:c8:98:56:da:cb:c9:7e:7a:5c:2e:cd:b1:
b8:67:91:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBvNp9ABQapG3Vz3JnZn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1Yzk2MjA1OTNjYzRmY2E4NTY3YzI0NDI1Nzg2MWE1MjJm
NzM1OWQwHhcNMjUxMTA0MTgwMDIzWhcNMjUxMTA1MTgwMDIzWjAzMTEwLwYDVQQD
Eyg1OGExYWY0MGM4MmJhMTAwYmE2MWNmOGMyNjg3MDg3NDQ0YWM3ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6enpqnsf1tRUlmcJfFzY7kWJJmim
1y3kSyCp0XTNijeY6kzIVQ0etmuFKraTYUaxKewohCtJTNNH5TCELECjj0/+Om3f
SeDsr6leVeHHl3xKZyCczB+keRNnieFYPmoFsL0COmMIJAynSXDSspilUJ4/E3xO
NfdnxmU8+ufUicBOrfumcdYVeQhx3OnXErv3jDGp5OxjQ3Y4JHmBdTYEZ5v9AG0K
JBG3QGWvR+MbZSPmyYxRTxulax79bnlnJ25WmkucDsHcWQUF086Ultdemv3zxWq9
pbo4DZmguCMjr4czu/XzcTqJsLcZLvelATr24r2PC6lEqHwP1ujFtGVHjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFihr0DIK6EAumHPjCaHCHRErH1lMB8GA1UdIwQY
MBaAFFXJYgWTzE/KhWfCRCV4YaUi9zWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMt
MzVjMDUwMmEwYmI3LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMtMzVjMDUwMmEwYmI3
LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSYHSVPD
1W8475EvsGVNAWRZ8AYTHaTbaGoNT3h1LjzRTfZRzpxcnjoHsPkJ7zmZ7SchjDsl
oq138ji4WzH5hANz3FGWAwfT+NbXFjZhwVjn2nuEWspiVdnI8h7k7uUd1hXguFQV
bSrXyWERIjnRkCXYOC5GQ21dCEO/IhJywWX+8X6137jjVYFNBpaPi/Le95fsJiPg
XmywZ6KN4788LpOX3QssmWsB3jrRLA+Gi+Op+kmT0MOA1KORCYRk54lAuVP4GBxb
NZyhsOjxjGWsdQzVbD6ugcfmQqtsXq1LiwnzXYAd+kUFfNOfa9nmM0zFyJhW2svJ
fnpcLs2xuGeRwg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:21 2025 by rpki-client