Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: cIeG6+5Gr5+g/UvVUpXugDvF0LYhp73YMW4JW3w8h6s=
Subject key identifier: 4B:E7:5F:FF:F5:A9:93:E7:67:30:5A:7E:44:B6:CB:A2:01:5F:D2:F2
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0197B6A1E8DBF0FF76648CF81067777624EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1088
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: 1Dmu6aIyaBRiur8pLlwrix38eJMjmCe0wynYf6vBA9Q=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e8:db:f0:ff:76:64:8c:f8:10:67:77:76:24:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=4be75ffff5a993e767305a7e44b6cba2015fd2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:fc:52:3b:9f:ac:40:ba:9f:2c:81:f5:ba:
c8:39:ad:be:5d:93:f8:f7:ba:d0:7f:01:11:54:ad:
51:c8:f2:c3:f6:cd:b9:2b:0f:0c:c7:32:b6:a5:86:
e3:1b:01:fa:c5:33:99:42:bc:34:ab:e4:80:12:e6:
e4:15:a1:7e:ca:95:a5:44:56:1b:99:1f:28:26:f4:
83:d3:a5:b2:e8:92:c5:fa:a9:44:ca:15:21:fe:e3:
f6:e5:16:4a:01:be:8d:e5:eb:09:fb:ce:8f:e5:8f:
95:e6:39:f4:11:d5:e4:f1:8b:e9:1d:c6:ef:fa:3e:
68:ad:d2:35:18:c3:6d:b7:34:e1:bd:2c:36:27:81:
e8:71:68:8c:c5:24:51:1c:cc:86:79:a7:0f:35:7e:
97:3d:d9:bb:33:08:67:bc:7b:ac:59:f0:fb:84:88:
f5:9e:f0:72:72:97:94:86:ab:b0:4d:54:12:d9:05:
df:31:b1:57:39:0f:3a:33:89:3c:37:13:bd:b8:3b:
3c:67:80:5c:8c:42:5e:ad:3d:cd:b3:39:f5:d0:80:
ca:23:2e:0d:f4:c1:16:d7:97:bf:62:d9:f1:ae:f7:
96:35:33:86:b7:3e:5f:8a:b4:9b:d1:95:57:ce:be:
76:67:eb:8c:33:29:44:1b:fa:03:f6:b4:d5:89:84:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:5F:FF:F5:A9:93:E7:67:30:5A:7E:44:B6:CB:A2:01:5F:D2:F2
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8b:30:44:a4:30:57:c3:6c:73:cf:34:84:33:c3:8a:91:82:
fc:56:3a:36:32:28:36:3a:07:5d:4a:e9:8b:a8:1f:3a:ca:3d:
f2:ae:40:12:61:cb:ca:be:54:aa:98:50:2e:d5:7e:66:dd:a1:
3e:6f:43:aa:37:92:18:6a:38:47:a5:ab:44:bd:9f:bb:cc:e1:
d1:b4:f4:92:8a:96:5a:af:54:99:c3:37:b3:c8:10:98:a9:21:
dc:cc:b7:e0:77:0f:98:a5:67:47:26:b4:40:a4:c9:90:f1:c5:
f7:32:59:ca:af:cd:d0:61:fd:60:13:59:b7:98:ee:6e:48:9c:
c6:c4:1e:11:31:31:0c:48:0d:b3:63:d9:fa:9f:c9:bf:e7:3e:
88:23:ea:e7:0f:01:ac:a3:85:1c:28:e3:bf:0a:9c:c3:fc:36:
f4:f1:91:e9:d7:06:b2:95:f2:82:45:44:55:37:e2:62:b0:61:
b5:5a:d1:62:b7:9a:13:a1:c7:4a:c7:ac:b4:2f:c2:88:f7:22:
89:9e:97:ef:3a:9f:53:0e:a9:13:97:3c:8c:45:43:4b:4d:18:
59:09:c1:db:12:18:4b:dd:5f:b8:cc:9a:19:ab:b9:51:8f:90:
df:f7:22:e9:db:2c:ed:ab:e0:13:0b:52:0b:eb:19:ca:34:65:
ad:7f:c7:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oejb8P92ZIz4EGd3diTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1
MzM5MTAwHhcNMjUwNjI4MTMwMjMzWhcNMjUwNjI5MTMwMjMzWjAzMTEwLwYDVQQD
Eyg0YmU3NWZmZmY1YTk5M2U3NjczMDVhN2U0NGI2Y2JhMjAxNWZkMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvH8UjufrEC6nyyB9brIOa2+XZP4
97rQfwERVK1RyPLD9s25Kw8MxzK2pYbjGwH6xTOZQrw0q+SAEubkFaF+ypWlRFYb
mR8oJvSD06Wy6JLF+qlEyhUh/uP25RZKAb6N5esJ+86P5Y+V5jn0EdXk8YvpHcbv
+j5ordI1GMNttzThvSw2J4HocWiMxSRRHMyGeacPNX6XPdm7MwhnvHusWfD7hIj1
nvBycpeUhquwTVQS2QXfMbFXOQ86M4k8NxO9uDs8Z4BcjEJerT3Nszn10IDKIy4N
9MEW15e/YtnxrveWNTOGtz5firSb0ZVXzr52Z+uMMylEG/oD9rTViYTWvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvnX//1qZPnZzBafkS2y6IBX9LyMB8GA1UdIwQY
MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt
MTUzZTkxODJhZjQxLzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx
LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoswRKQw
V8Nsc880hDPDipGC/FY6NjIoNjoHXUrpi6gfOso98q5AEmHLyr5UqphQLtV+Zt2h
Pm9DqjeSGGo4R6WrRL2fu8zh0bT0koqWWq9UmcM3s8gQmKkh3My34HcPmKVnRya0
QKTJkPHF9zJZyq/N0GH9YBNZt5jubkicxsQeETExDEgNs2PZ+p/Jv+c+iCPq5w8B
rKOFHCjjvwqcw/w29PGR6dcGspXygkVEVTfiYrBhtVrRYreaE6HHSsestC/CiPci
iZ6X7zqfUw6pE5c8jEVDS00YWQnB2xIYS91fuMyaGau5UY+Q3/ci6dss7avgEwtS
C+sZyjRlrX/HWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:21 2025 by rpki-client