Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: yvbg4Ta2eR2BYOiO2BIoG9r+7cnn4oItOtAbfcxtNuw=
Subject key identifier: 2B:A1:B5:FD:92:45:9D:C9:CF:68:15:02:14:0A:83:C7:FD:A3:66:0C
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 019874F4B0EFDC7CEEDDB440476E3FB560D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 044F
Signing time: Mon 04 Aug 2025 12:00:49 +0000
Manifest this update: Mon 04 Aug 2025 12:00:49 +0000
Manifest next update: Tue 05 Aug 2025 12:00:49 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: vTBp7WW+J4hWrogKlKUUfRmWG4XrC0r8OtAvuFwFgvQ=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:b0:ef:dc:7c:ee:dd:b4:40:47:6e:3f:b5:60:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Aug 4 12:00:49 2025 GMT
Not After : Aug 5 12:00:49 2025 GMT
Subject: CN=2ba1b5fd92459dc9cf681502140a83c7fda3660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:61:32:c4:de:73:58:ea:55:25:88:f1:c0:
19:ef:ab:c3:c9:a6:25:ad:55:2b:a9:a1:b0:95:25:
aa:91:38:8a:c0:3a:ad:7c:c3:28:2a:94:41:dc:8b:
7b:f7:a5:8a:06:7e:cf:38:4e:66:e9:ea:88:cf:7c:
21:73:50:c7:a1:5f:29:e4:9d:fd:5f:76:6e:8e:0c:
04:9d:23:ba:30:08:9f:86:51:1c:e3:c4:f6:a9:ba:
35:62:5c:51:1b:c0:93:58:9d:87:c1:31:92:f4:4f:
2a:dc:34:ea:81:ad:9e:13:11:28:1c:c7:1d:f2:00:
3c:21:bb:d3:8c:89:bd:a5:a0:50:6c:30:9d:71:14:
f9:37:25:d7:a9:e2:1a:62:9c:0a:6c:7d:1f:8f:bc:
c3:f6:5c:1d:93:1f:fd:73:3b:c4:18:27:43:d0:c8:
c6:fd:dd:96:64:92:b7:a4:ee:79:b9:f1:05:fb:38:
40:a9:81:9e:bc:56:7d:6f:56:10:b3:6f:d5:aa:5d:
09:e2:8d:63:05:5c:29:f3:0d:05:d9:68:3e:e6:22:
18:71:38:ec:69:71:d5:c9:24:11:3a:93:33:de:8f:
78:9c:ff:33:f3:c7:e0:ec:8c:e6:dc:37:8b:d4:fa:
b3:f3:b6:12:3d:67:87:f6:06:65:d2:f9:dd:a3:c9:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:B5:FD:92:45:9D:C9:CF:68:15:02:14:0A:83:C7:FD:A3:66:0C
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6b:05:55:53:9c:46:aa:54:14:e2:e2:37:21:93:f8:4d:53:
14:22:61:2b:2c:e8:fc:fb:0e:10:2b:42:c9:d2:b8:02:6c:11:
3f:c3:e5:e1:eb:17:fc:39:64:30:2f:2d:98:e5:06:5f:61:3e:
59:76:17:b5:f4:5c:eb:7d:69:34:3b:dd:59:fc:d6:91:18:a9:
24:b8:fb:05:05:da:1c:65:7c:16:a2:8e:3f:a1:51:c3:2a:18:
82:82:fe:40:37:5c:7c:ce:8d:f9:d0:a5:b0:bf:0e:fd:58:11:
3a:a7:6c:08:03:51:d9:7b:a4:a3:24:07:5b:b3:79:e7:44:78:
28:c8:4c:6c:fc:dd:95:7e:47:e6:57:91:7d:32:6e:18:f9:8b:
f9:93:b5:f5:12:39:7c:c6:e9:eb:7a:68:b9:1a:05:18:67:e0:
bf:5f:a4:e2:ce:9d:25:e7:e4:8f:f2:16:1a:21:4c:6b:c8:fc:
b7:09:28:f2:de:8d:ec:fd:56:f0:41:bc:9b:84:73:d1:c6:71:
07:55:ec:ce:b1:70:f6:d3:ad:7f:70:07:8a:20:f1:8a:27:83:
7f:f0:01:06:69:8f:70:83:6e:a4:1e:bc:d5:7b:69:bd:cf:1f:
31:65:6d:c6:7c:36:eb:50:dd:30:c7:a0:91:1d:52:2b:2e:c3:
77:04:57:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09LDv3Hzu3bRAR24/tWDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1Yzk2MjA1OTNjYzRmY2E4NTY3YzI0NDI1Nzg2MWE1MjJm
NzM1OWQwHhcNMjUwODA0MTIwMDQ5WhcNMjUwODA1MTIwMDQ5WjAzMTEwLwYDVQQD
EygyYmExYjVmZDkyNDU5ZGM5Y2Y2ODE1MDIxNDBhODNjN2ZkYTM2NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5klhMsTec1jqVSWI8cAZ76vDyaYl
rVUrqaGwlSWqkTiKwDqtfMMoKpRB3It796WKBn7POE5m6eqIz3whc1DHoV8p5J39
X3ZujgwEnSO6MAifhlEc48T2qbo1YlxRG8CTWJ2HwTGS9E8q3DTqga2eExEoHMcd
8gA8IbvTjIm9paBQbDCdcRT5NyXXqeIaYpwKbH0fj7zD9lwdkx/9czvEGCdD0MjG
/d2WZJK3pO55ufEF+zhAqYGevFZ9b1YQs2/Vql0J4o1jBVwp8w0F2Wg+5iIYcTjs
aXHVySQROpMz3o94nP8z88fg7Izm3DeL1Pqz87YSPWeH9gZl0vndo8mv8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuhtf2SRZ3Jz2gVAhQKg8f9o2YMMB8GA1UdIwQY
MBaAFFXJYgWTzE/KhWfCRCV4YaUi9zWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMt
MzVjMDUwMmEwYmI3LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMtMzVjMDUwMmEwYmI3
LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGsFVVOc
RqpUFOLiNyGT+E1TFCJhKyzo/PsOECtCydK4AmwRP8Pl4esX/DlkMC8tmOUGX2E+
WXYXtfRc631pNDvdWfzWkRipJLj7BQXaHGV8FqKOP6FRwyoYgoL+QDdcfM6N+dCl
sL8O/VgROqdsCANR2XukoyQHW7N550R4KMhMbPzdlX5H5leRfTJuGPmL+ZO19RI5
fMbp63pouRoFGGfgv1+k4s6dJefkj/IWGiFMa8j8twko8t6N7P1W8EG8m4Rz0cZx
B1XszrFw9tOtf3AHiiDxiieDf/ABBmmPcINupB681Xtpvc8fMWVtxnw261DdMMeg
kR1SKy7DdwRXKA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:47 2025 by rpki-client