Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: FA4JGTFBE1dMx8s4vMuORw336ENeRLKhsMBASW1KNVc=
Subject key identifier: 98:A5:37:D7:12:81:36:72:C8:07:AA:F0:8C:3E:E7:63:12:1C:21:FB
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 0196C83B1E5A7B29AF49B4B48DEA80714165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 0371
Signing time: Tue 13 May 2025 06:00:39 +0000
Manifest this update: Tue 13 May 2025 06:00:39 +0000
Manifest next update: Wed 14 May 2025 06:00:39 +0000
Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: p41jQuCczH2q/PPyXWrBbb5nqYMpKm4hMPMti4ewS20=)
3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:1e:5a:7b:29:af:49:b4:b4:8d:ea:80:71:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: May 13 06:00:39 2025 GMT
Not After : May 14 06:00:39 2025 GMT
Subject: CN=98a537d712813672c807aaf08c3ee763121c21fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:ff:b6:26:8c:ce:06:cf:7a:06:90:dd:76:
32:69:ad:3c:fc:db:2b:fb:5b:ac:a0:ba:e5:9d:0f:
49:69:29:38:17:ea:13:c3:1d:6e:92:be:be:15:55:
38:cf:4c:88:1a:b7:6c:e5:30:76:be:3e:24:98:89:
90:15:ad:8b:7a:1c:85:a7:99:f7:ad:33:82:e2:d1:
97:68:e6:50:57:65:3e:75:5f:b3:35:76:78:a8:2e:
35:45:4b:45:d7:71:50:b2:c1:bd:44:31:77:f4:89:
6d:09:09:af:da:38:eb:f2:94:08:7a:e3:a0:a9:7e:
36:a4:6e:f4:98:02:16:ba:3f:57:fa:18:2d:1d:72:
94:f6:37:a8:89:77:0d:41:11:ff:34:72:e5:c7:93:
cd:4c:3f:7f:f3:71:18:cb:3c:5d:18:42:9f:1a:60:
98:b7:0f:f4:df:b8:60:ee:34:2d:57:79:26:9b:f6:
9e:90:8c:9c:dd:7e:53:fe:76:b3:3c:64:c3:42:93:
15:e1:30:75:bb:f7:81:ff:c8:ab:b9:90:77:52:b5:
09:eb:2c:c9:dd:ea:c8:1f:d2:57:1b:5d:de:d1:83:
68:41:01:5f:ae:2f:25:a8:5a:20:a3:ec:8f:e5:60:
1a:41:2c:69:a2:58:62:4e:01:4c:79:72:ab:19:d0:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:37:D7:12:81:36:72:C8:07:AA:F0:8C:3E:E7:63:12:1C:21:FB
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1f:24:7a:e9:38:a1:3f:5e:c3:f0:83:59:06:21:84:c3:13:
cb:3c:c3:97:63:8f:38:7b:73:2c:0e:a4:24:6a:31:70:8e:de:
ad:2c:82:94:21:77:90:35:db:17:75:43:85:e9:b7:da:47:25:
68:3c:a6:9e:df:69:ad:2e:e0:d6:10:53:56:27:64:d6:44:d7:
78:5f:eb:45:d4:b6:b9:2d:ab:1f:a0:34:e7:f1:f7:82:b0:7e:
02:09:c3:01:e6:39:0a:ce:be:c5:23:8a:7d:c7:44:d6:6f:f5:
64:4f:ea:f8:08:7f:49:1d:e5:f8:56:29:17:0c:7b:e9:41:86:
8e:f9:90:7e:2e:ce:31:4d:0e:4d:b0:fa:d8:45:ef:46:fb:36:
b9:b5:d9:0f:c1:3f:9b:a6:26:ed:0b:d7:9c:ad:51:60:65:e0:
18:b9:14:33:7a:bc:0c:cd:31:1c:d8:e2:8a:9e:ed:08:82:fc:
f4:95:7c:67:2d:68:75:a2:14:5c:7d:da:13:8f:a2:b3:dd:94:
13:1b:2e:37:ef:10:94:c1:0d:ff:6f:34:8f:35:bc:b9:c4:b4:
3b:0c:77:60:b2:4d:81:9e:c5:c0:f5:59:43:3b:46:b6:bf:cc:
84:07:71:98:ea:cf:7d:1e:54:05:50:c1:cc:ae:c0:24:6a:b3:
80:e9:d7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIOx5aeymvSbS0jeqAcUFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1Yzk2MjA1OTNjYzRmY2E4NTY3YzI0NDI1Nzg2MWE1MjJm
NzM1OWQwHhcNMjUwNTEzMDYwMDM5WhcNMjUwNTE0MDYwMDM5WjAzMTEwLwYDVQQD
Eyg5OGE1MzdkNzEyODEzNjcyYzgwN2FhZjA4YzNlZTc2MzEyMWMyMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTT/tiaMzgbPegaQ3XYyaa08/Nsr
+1usoLrlnQ9JaSk4F+oTwx1ukr6+FVU4z0yIGrds5TB2vj4kmImQFa2LehyFp5n3
rTOC4tGXaOZQV2U+dV+zNXZ4qC41RUtF13FQssG9RDF39IltCQmv2jjr8pQIeuOg
qX42pG70mAIWuj9X+hgtHXKU9jeoiXcNQRH/NHLlx5PNTD9/83EYyzxdGEKfGmCY
tw/037hg7jQtV3kmm/aekIyc3X5T/nazPGTDQpMV4TB1u/eB/8iruZB3UrUJ6yzJ
3erIH9JXG13e0YNoQQFfri8lqFogo+yP5WAaQSxpolhiTgFMeXKrGdDcYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJilN9cSgTZyyAeq8Iw+52MSHCH7MB8GA1UdIwQY
MBaAFFXJYgWTzE/KhWfCRCV4YaUi9zWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMt
MzVjMDUwMmEwYmI3LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMtMzVjMDUwMmEwYmI3
LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZB8keuk4
oT9ew/CDWQYhhMMTyzzDl2OPOHtzLA6kJGoxcI7erSyClCF3kDXbF3VDhem32kcl
aDymnt9prS7g1hBTVidk1kTXeF/rRdS2uS2rH6A05/H3grB+AgnDAeY5Cs6+xSOK
fcdE1m/1ZE/q+Ah/SR3l+FYpFwx76UGGjvmQfi7OMU0OTbD62EXvRvs2ubXZD8E/
m6Ym7QvXnK1RYGXgGLkUM3q8DM0xHNjiip7tCIL89JV8Zy1odaIUXH3aE4+is92U
ExsuN+8QlMEN/280jzW8ucS0Owx3YLJNgZ7FwPVZQztGtr/MhAdxmOrPfR5UBVDB
zK7AJGqzgOnXdQ==
-----END CERTIFICATE-----
Generated at Tue May 13 16:17:37 2025 by rpki-client