Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
File: VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft (raw, json)
Hash identifier: if7D1VjPp6gxKrsn56uXlLOPOBIQ3vX5tnQHsT1RweA=
Subject key identifier: 8A:31:D3:18:FD:22:CD:61:9A:C1:CC:73:36:1F:BC:A8:C0:6E:7E:00
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 0197B9D87751518A7A3918C2109C66D30AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
Manifest number: 0438
Signing time: Sun 29 Jun 2025 04:01:00 +0000
Manifest this update: Sun 29 Jun 2025 04:01:00 +0000
Manifest next update: Mon 30 Jun 2025 04:01:00 +0000
Files and hashes: 1: 95QJIwA-jcxs7wGl2QvrCD9q7i0.roa (hash: g6iIn4RdHOfcLJxnUR1+tFfHVp15ehQgtkoJa5v6YKM=)
2: VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl (hash: Deyqckkxw0geycTnsoRmwxxp3OatEUiN5nUoH8kJ8Rc=)
3: he47BFcL7h2RGMNNMqpjr9QfUjU.roa (hash: fCYDkydFulfaZ81lkPysM/WIPvk6e259hcTtvrRcfFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:77:51:51:8a:7a:39:18:c2:10:9c:66:d3:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Jun 29 04:01:00 2025 GMT
Not After : Jun 30 04:01:00 2025 GMT
Subject: CN=8a31d318fd22cd619ac1cc73361fbca8c06e7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:b9:61:c6:7b:b3:94:6a:52:37:70:44:06:
ac:25:51:f9:48:cf:b3:28:0f:d1:e7:59:b2:75:45:
fe:30:e5:50:a2:0b:f0:4e:37:6b:6d:c1:29:dd:2b:
a9:4b:75:4d:e4:0a:27:85:41:c4:70:ca:7a:93:c1:
e5:1f:1e:8d:d3:a0:23:2d:d4:09:19:6d:30:32:87:
4b:96:6b:c4:56:2e:e0:50:31:8d:81:65:21:7e:3e:
db:5a:8d:6d:83:8c:99:96:5a:29:f6:ad:05:61:9e:
4f:2c:58:e7:f1:88:4d:8d:21:01:f3:de:59:87:c1:
78:f0:e3:bd:a2:48:e9:18:5f:73:7a:26:f9:52:f8:
c7:b7:d1:db:aa:dd:42:56:04:36:26:69:80:b0:1b:
d6:50:a3:bd:d9:07:d6:23:f3:3e:9a:9e:53:a5:c8:
66:71:51:55:d5:d9:90:ce:b4:99:4f:45:c9:47:73:
cf:4f:ad:f6:41:54:f6:12:ce:72:76:2a:1c:fa:ec:
04:7a:8c:6b:e9:19:d2:bf:f7:48:be:6c:4b:1c:24:
53:4e:24:67:f4:71:e0:1b:66:eb:47:0c:c8:5a:43:
02:44:a6:4c:07:d0:d8:28:bf:79:b1:23:41:f3:e8:
74:20:0d:43:ba:44:e4:5f:a2:2d:3c:e9:b4:7b:1f:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:D3:18:FD:22:CD:61:9A:C1:CC:73:36:1F:BC:A8:C0:6E:7E:00
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d7:7b:87:17:a4:c4:72:fe:54:ea:ed:f2:27:fa:8d:ee:c8:
91:d3:64:37:56:ce:79:3b:84:be:e0:1e:85:87:68:99:34:bf:
d4:4f:aa:52:12:7c:1c:74:2a:9d:2d:31:29:11:2e:a6:44:6a:
6b:bf:7a:b3:42:b5:10:23:a8:59:a3:13:82:9c:b2:5d:86:85:
8f:6d:77:be:40:5f:36:b3:1f:f9:0e:21:a6:3a:92:f3:7b:d8:
58:04:40:ba:e1:62:e5:cf:51:4c:df:5c:f5:81:96:3a:19:5b:
87:d4:eb:58:48:15:f1:ee:fb:0a:8c:6d:33:37:b5:e6:67:25:
cd:fe:c6:ff:95:93:76:c5:3b:1f:58:21:7f:f0:e5:8a:f9:8e:
3d:ff:68:8f:b6:74:08:d3:31:20:e2:79:52:90:aa:96:3e:fb:
35:31:3d:75:71:ca:57:18:a6:62:cb:d7:91:e5:80:11:03:2c:
ae:d2:93:48:da:a0:b5:a3:04:c9:f1:ad:a8:9b:27:e3:ae:67:
3b:b8:89:27:7f:db:6e:db:3f:18:d4:ba:28:aa:c9:90:b3:34:
8a:7e:28:5e:61:a1:9f:1a:dd:8d:75:48:8a:9b:0b:a0:e4:54:
d6:0a:b4:24:6d:e9:0c:ed:2e:77:fa:27:6e:ea:d8:ed:d4:48:
50:53:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:39:57 2025 by rpki-client