Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: ytfRmrtGCli737idb/ISvA0Qjbilk5C8xHbKgF01Xr0=
Subject key identifier: A3:25:C5:D3:7E:BC:77:FD:6F:C7:99:7B:D1:0B:E8:70:F6:25:42:F0
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0198D660B6FC0D057943D560E51AFD1925D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 111D
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: K+IUU59dW/Q3t6cdQSEx86Oc+7UWhmXzNELQXayHTZs=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b6:fc:0d:05:79:43:d5:60:e5:1a:fd:19:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=a325c5d37ebc77fd6fc7997bd10be870f62542f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:65:9c:37:c5:9e:af:3b:31:ab:03:51:30:
22:c3:b6:d4:c0:a4:c0:90:00:0d:c6:60:67:d7:be:
88:72:fd:50:44:9b:90:d7:fa:d7:f6:e3:a9:f0:43:
e0:0b:40:10:e7:c1:04:f6:49:db:13:04:6d:f5:2c:
95:27:42:fe:45:e5:76:9a:3b:ac:e3:74:a7:86:a3:
a5:23:f4:52:70:f6:ef:de:a8:2e:e4:b8:df:5a:36:
8a:2b:a0:7e:14:73:f3:54:ac:bb:1e:9c:cb:ca:6b:
98:a0:90:b4:41:78:be:3b:b6:24:69:a9:90:9b:ed:
d1:ac:38:80:a7:47:3a:47:1b:cb:e7:04:73:e7:e8:
20:ad:8d:17:1e:9f:2a:da:72:ea:30:e7:e2:90:70:
d2:58:d0:23:61:53:56:28:dc:1f:78:03:32:5f:38:
9e:35:93:a8:a7:32:ab:04:ee:97:81:e0:3c:80:ac:
6b:66:41:37:6e:54:64:8c:e7:8a:b3:bf:4b:80:12:
78:c4:7b:24:23:66:4a:f3:0c:95:3d:6e:ac:61:ee:
f6:00:f1:89:e7:bd:df:dd:ae:b6:36:db:05:6a:73:
c5:c7:9e:0d:57:86:dd:f2:48:b8:f2:8c:22:9d:03:
bc:f3:d0:37:ff:32:0d:b8:4d:3e:aa:7d:c1:8d:33:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:C5:D3:7E:BC:77:FD:6F:C7:99:7B:D1:0B:E8:70:F6:25:42:F0
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:28:9b:92:c5:05:fb:f4:24:1e:ea:71:50:cc:16:fc:1a:
f4:82:ab:f7:a0:2a:58:3a:f8:28:4f:da:38:a9:0d:fd:e0:a1:
e0:b9:d1:07:72:38:dd:84:5c:53:f6:e6:32:60:0d:48:01:3c:
d5:dc:1b:8e:ad:ac:71:2c:e3:d2:68:6f:58:bc:9c:f3:64:81:
d6:d6:2d:77:a4:38:20:73:44:fa:ba:35:e6:ef:7f:d8:09:22:
d2:c6:25:db:50:a7:94:b5:77:c3:7a:bf:8d:26:82:67:5e:5c:
d4:d2:5b:68:cd:21:b3:74:b7:e0:4f:a1:ee:9d:0e:a2:47:50:
77:be:0f:d7:38:1b:3d:bc:e2:62:4a:69:3f:bf:b9:c7:a0:45:
7a:82:e7:8a:e3:f7:ec:6e:d6:f0:71:4f:27:38:7c:4a:a5:f4:
19:0a:16:74:0e:78:11:72:4e:ee:ed:d1:3c:67:e0:05:13:fd:
dc:33:1f:75:de:89:ba:2f:04:c1:93:c2:ea:32:77:6f:f3:e2:
0c:fc:e0:24:af:67:2b:ff:ad:45:88:98:4a:61:cc:5e:9e:58:
c0:c5:9b:df:8f:9d:ea:81:ec:09:1e:73:84:67:a3:0b:71:8b:
71:ff:b6:7e:7b:05:a6:30:8e:6f:21:78:c5:56:1b:6c:6d:6d:
1a:76:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:42 2025 by rpki-client