Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File: vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier: D82EfdVz9lyUVX5Qw6+ELhAjW4HPbJqdDP3Ze1q3LIQ=
Subject key identifier: F9:1C:AB:50:9C:EB:24:8F:A8:E1:88:21:BF:DA:4A:BD:29:50:7D:97
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer: /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial: 0197B77C5799AD7BDFCA794882494EFF46FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number: 05E1
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: +2rzGuQvew+qxMi5LKZRd9Yzq4903OWAxK4yyON/HcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:57:99:ad:7b:df:ca:79:48:82:49:4e:ff:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=f91cab509ceb248fa8e18821bfda4abd29507d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:4b:32:bc:91:1b:d7:2d:12:dd:3b:c1:7b:
ff:4d:c0:53:21:da:1e:4b:55:0a:f6:c6:65:54:18:
f1:53:55:54:6c:aa:66:bb:73:89:d6:cd:0b:22:62:
2e:31:6b:5f:48:74:a4:e1:60:11:ea:8d:9d:65:d4:
2c:17:3e:ea:c6:ed:97:40:1a:5a:d5:54:b2:d6:dc:
34:5d:4e:a1:1d:9a:00:2f:12:2f:92:f1:82:15:61:
d4:c6:bd:c6:35:b1:5a:bf:ba:71:7b:6b:20:ac:e8:
c2:be:0c:2c:32:f4:2f:8e:6e:a8:7d:48:5d:75:99:
a7:8b:a5:e1:82:a2:87:af:61:fd:ea:50:ce:d7:73:
16:3c:c3:d8:1e:9c:23:67:b8:17:8f:32:2d:0d:45:
2e:85:76:60:9c:61:4d:d7:28:44:dc:e7:45:6c:2d:
aa:5e:7e:f8:a6:0c:89:2e:01:e4:e8:22:cb:1a:a3:
a4:f9:ff:20:c2:46:7c:5c:f9:75:40:38:55:38:12:
1e:ba:5a:25:43:34:6b:03:e8:56:ad:17:0b:43:89:
32:14:b8:65:db:cc:d7:33:5c:62:89:fc:d9:40:ae:
81:2e:22:ee:74:82:a1:ce:52:59:be:79:35:c4:ba:
d1:dc:8e:59:65:40:67:b5:57:41:89:67:a3:e8:ac:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:AB:50:9C:EB:24:8F:A8:E1:88:21:BF:DA:4A:BD:29:50:7D:97
X509v3 Authority Key Identifier:
keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b8:bf:99:65:9c:f3:c4:ff:03:3f:e7:ce:85:b0:99:e5:c2:
c4:f5:6d:b0:6c:5b:6b:f5:dc:0a:d8:93:58:69:fe:05:04:3c:
62:07:df:23:5c:fb:49:dc:16:5a:1b:ac:86:23:6c:84:23:d3:
d9:8f:09:39:ee:20:50:c9:37:93:c6:ff:b0:a7:fb:1d:db:83:
fd:e7:63:c1:6e:d6:33:08:06:1d:10:ed:30:c8:99:88:d3:0b:
7f:97:95:df:30:5e:20:d4:77:ce:8a:10:d9:37:29:ae:be:e1:
5f:b0:bd:c5:03:5b:c3:09:18:f8:b1:a8:f2:20:8e:9c:ab:a1:
da:75:2a:04:55:98:d2:6c:36:64:b3:32:d3:8d:0a:76:14:b0:
fd:1b:77:94:54:5b:d3:3c:ea:2f:64:cc:a5:a3:12:38:12:a0:
5a:df:7e:16:8e:59:f4:84:65:a8:b9:85:ea:6b:f5:96:ab:db:
64:43:a4:3b:24:b7:37:7b:b8:8e:fc:15:f4:57:b6:14:9e:b3:
2a:7a:20:55:a9:ec:1c:10:84:59:04:0a:2c:3c:93:0f:e5:5e:
6a:04:2a:a0:79:e9:4d:d3:15:a5:41:43:ae:e3:27:2b:e8:6e:
99:17:e3:5d:45:fe:33:48:9d:0b:6d:81:92:cf:ed:6a:4c:71:
e6:43:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:31 2025 by rpki-client