Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: Obx+EOYWqkarmu9XnWTQS0xJ1znhJnvrWFUfuUVCQNM=
Subject key identifier: 32:EA:06:8C:58:D4:7A:11:F6:38:F3:03:79:B6:4D:A2:8A:40:1A:7F
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0199FBEC16C3B915F09F55245F30DEA845C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 11B5
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: FVBMri0izNHj4LJo7cNKQ/cOgm6FVpPEi/h1YPQt5Nc=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:c3:b9:15:f0:9f:55:24:5f:30:de:a8:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=32ea068c58d47a11f638f30379b64da28a401a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:54:02:1e:23:6b:c6:48:87:bd:36:ab:5a:
4f:b4:c2:40:f9:a4:97:bf:9a:b5:cc:48:15:62:5e:
28:a3:0c:c2:3c:09:03:74:9e:d6:4f:fa:f4:76:58:
1d:5a:ed:d9:7c:fe:da:ac:5d:ca:1b:1d:29:bf:42:
4f:bc:d8:4a:92:42:dd:07:08:3e:62:c2:56:35:1c:
eb:83:56:12:ab:8d:09:ce:11:a7:3c:f5:1c:db:10:
7a:2f:52:51:38:01:88:fd:4e:e4:d7:5e:ae:75:f0:
82:e0:6d:25:57:3e:c2:fb:ae:2e:c7:80:b6:39:68:
7b:1a:01:75:e6:c3:11:72:38:d9:f7:59:75:98:a3:
31:3c:32:59:16:7f:1c:04:98:e4:3a:02:b9:46:ef:
ed:ee:d9:e3:5c:1a:42:43:a7:a4:a0:31:8a:01:47:
c0:e3:c2:aa:1c:73:eb:65:3b:d3:29:b3:35:58:81:
16:a7:65:5a:c9:4a:d8:2a:0d:b8:13:94:35:37:2c:
41:30:61:e5:e2:74:2d:3d:7f:af:16:c3:6a:59:cb:
55:ab:74:ac:bd:f1:0e:29:e0:c5:fe:d1:7b:25:6d:
95:55:74:d8:92:ea:12:7b:7a:8d:47:6d:c5:23:24:
2f:28:c2:b6:73:3f:1b:aa:2a:20:54:4e:76:f0:ea:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:06:8C:58:D4:7A:11:F6:38:F3:03:79:B6:4D:A2:8A:40:1A:7F
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:61:6f:56:9d:a8:57:7b:f4:48:fa:df:4e:c6:64:29:b1:
d4:dc:21:c8:8c:07:8f:21:15:c0:23:6d:10:4b:ca:f4:9d:ed:
19:c3:66:bf:6b:11:78:33:b8:d8:be:59:e3:06:3d:58:69:9f:
e9:fa:49:64:f6:71:72:51:25:96:40:2b:f7:22:e4:c5:b2:b9:
86:da:96:e2:2f:4f:cc:fe:50:b4:f9:c5:5d:79:6d:95:a4:1f:
dd:8a:3c:8c:94:00:a8:39:27:55:43:05:90:d5:1b:d3:e7:b4:
a8:37:8d:07:db:bb:ee:a1:d1:44:23:d9:10:7b:8b:7e:b5:2c:
83:1b:09:aa:72:13:af:1f:b7:28:17:fe:4a:f2:1f:06:62:17:
2b:f0:da:19:21:6c:e4:bf:35:f0:99:e5:f0:8b:9e:fc:a9:d9:
79:92:27:c8:9d:76:f4:12:31:78:ff:55:b2:41:81:70:88:3c:
f4:93:02:03:b3:73:6d:7f:ff:6f:ec:02:19:cc:da:46:ee:3f:
9b:8c:95:70:2e:c9:e6:7b:3e:3f:c2:ee:01:9c:0c:6e:ab:4f:
bf:fa:23:ff:3c:50:8b:ce:6b:71:23:ee:bf:4f:9a:8d:67:94:
ce:e9:a7:e6:80:d3:0f:85:23:3f:ef:b8:19:2a:50:bf:c0:b6:
f0:9f:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:15 2025 by rpki-client