Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: aB7odggnqw5fFbwuyIgffc+bmhKUgsNIdmzNeq2Altw=
Subject key identifier: DA:E8:88:5A:C9:21:8B:DF:B5:55:02:8C:CE:21:6B:1F:35:13:C5:3B
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 01976C623A9A587E231A93DA33062865171D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 03C6
Signing time: Sat 14 Jun 2025 03:01:06 +0000
Manifest this update: Sat 14 Jun 2025 03:01:06 +0000
Manifest next update: Sun 15 Jun 2025 03:01:06 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: TwZJTTYK36hGfiZiArgRpXuWH9j35g2gTSYC+1yqgzo=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:3a:9a:58:7e:23:1a:93:da:33:06:28:65:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Jun 14 03:01:06 2025 GMT
Not After : Jun 15 03:01:06 2025 GMT
Subject: CN=dae8885ac9218bdfb555028cce216b1f3513c53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:32:97:b7:3f:6f:3a:6c:e4:09:be:77:18:
0d:e3:47:db:a9:67:e9:d6:8c:bd:c1:79:48:bf:4a:
d0:36:72:e5:7d:33:de:c0:3c:ac:75:e0:e6:b9:16:
96:83:43:71:76:3b:dc:7e:f4:75:fc:c0:32:e8:ee:
17:90:6d:0c:d9:f1:85:f6:7e:1e:26:3c:e4:60:fc:
7e:08:3b:85:2b:db:8e:a7:d6:e5:15:c6:87:3c:76:
f0:77:8f:f1:b6:b7:33:d5:24:35:0f:5e:7b:cc:db:
30:a3:af:c0:6d:7a:47:8d:76:dc:92:a2:ea:45:75:
0e:00:e4:3e:0a:66:32:b8:64:79:52:0b:5e:d9:6a:
ea:09:00:5c:2e:64:e2:8f:9c:1f:1e:ef:5f:7d:54:
d3:8b:a4:7a:71:7f:30:3c:16:24:ab:06:38:4f:82:
3a:db:7d:c6:27:18:ac:80:2e:d8:5b:64:6d:81:b9:
41:2d:aa:bc:31:f0:2e:c2:25:c8:ad:f9:df:79:27:
9f:24:36:9b:be:b7:b7:a1:94:07:bd:89:dc:8d:aa:
b6:4d:6a:84:5b:1c:0a:04:cc:5f:47:25:94:b9:61:
21:11:db:29:bd:74:a4:eb:56:ca:49:b2:6a:c5:23:
b5:ea:c2:4e:c9:77:af:71:53:f7:38:22:85:2d:b7:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:88:5A:C9:21:8B:DF:B5:55:02:8C:CE:21:6B:1F:35:13:C5:3B
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:79:23:37:b5:e6:fb:d1:a8:b7:37:22:ea:8e:4a:ba:65:64:
9d:9b:89:ad:53:76:bb:34:af:db:36:94:77:42:08:c9:8a:48:
67:fc:4b:86:40:f4:0a:64:e9:ac:28:ed:27:30:a0:1f:2e:fb:
0b:14:4d:ad:75:91:4f:dd:7d:2a:68:16:87:84:53:68:54:e9:
b4:d8:e1:d2:e2:c1:fb:b3:9d:6c:7e:13:43:8e:7e:6c:a6:a1:
be:36:83:96:4c:e9:fc:25:46:2e:a0:40:b3:9c:d5:68:8f:29:
45:dc:0a:84:37:7e:82:f3:ab:8b:e3:70:8f:43:bf:3b:3b:bc:
dd:1b:3b:ee:f2:e4:d4:f2:60:33:16:a1:0e:2c:aa:9e:ed:9f:
22:a4:c6:f3:6b:c2:df:ee:36:82:97:04:7c:f8:92:98:4c:03:
d9:d8:c9:57:3c:b0:dd:92:38:ec:40:7b:36:34:71:cd:a9:27:
e6:e2:d9:f2:bd:31:e9:69:68:70:ab:a1:8e:f9:22:54:79:26:
f8:58:ad:e4:e3:5e:79:58:30:23:d5:f0:82:af:5d:43:7a:cf:
aa:47:54:e1:68:ad:7d:20:b1:3a:ad:95:49:88:89:1f:3c:17:
f8:a6:b0:e3:d1:48:f5:c5:f7:0c:cc:54:5d:94:a6:8e:8b:cc:
60:44:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:35 2025 by rpki-client