Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: o+Y53hR9EFDklIFo0OxAcVtAbCpIckqV3PEhigs+lBE=
Subject key identifier: 9D:FE:BB:67:D1:D4:67:97:62:13:62:59:56:67:26:9F:44:12:CC:C8
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 0199FDD9F20D55BBAEDBB0AD0009BA1553D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0423
Signing time: Sun 19 Oct 2025 19:02:22 +0000
Manifest this update: Sun 19 Oct 2025 19:02:22 +0000
Manifest next update: Mon 20 Oct 2025 19:02:22 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: 3MqvA5xNiInYB943QaVj3CeEh9+JaPyX59pO6wozfgU=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f2:0d:55:bb:ae:db:b0:ad:00:09:ba:15:53:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Oct 19 19:02:22 2025 GMT
Not After : Oct 20 19:02:22 2025 GMT
Subject: CN=9dfebb67d1d46797621362595667269f4412ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:39:06:5c:41:d8:6d:2c:94:21:b3:93:9d:
ff:09:e4:11:0c:16:84:67:a2:5c:15:cb:93:c9:d3:
ff:a1:d6:6e:8d:50:6b:d6:69:4d:4a:84:2d:46:fc:
7f:a8:c1:a9:df:11:a8:51:89:d2:8e:ec:6e:41:1e:
f6:c7:f3:d3:87:55:d6:0a:22:e3:00:0b:a2:d6:e9:
20:8d:20:48:e7:4c:60:87:d3:30:ae:9b:8b:cd:8e:
4d:6a:51:47:0e:e6:17:82:bd:bf:b5:a4:9f:77:cd:
36:d5:c9:b8:a8:86:e7:a3:d0:16:42:9e:0b:67:13:
41:2b:11:40:52:16:05:6e:85:4e:9d:b4:fb:55:1b:
2f:35:9f:46:87:61:ad:f7:17:1d:b9:b8:f1:77:94:
42:1c:69:db:55:e5:69:3c:82:d2:5d:8f:01:b6:59:
14:b6:4b:88:55:97:3c:7a:db:a1:69:e0:c0:ff:96:
a9:58:6b:cb:ae:bd:71:76:db:b3:90:f7:2c:0f:6a:
3d:85:e2:95:3c:c1:6d:a3:ce:da:b1:e5:c9:5b:a7:
fe:61:5c:1b:bd:f0:66:22:2f:f4:18:0e:ff:1c:72:
2a:80:86:9e:e8:b7:5b:d4:32:17:16:37:d4:a3:74:
8f:99:04:92:03:8c:b0:66:4b:af:45:a5:7c:9b:b2:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:BB:67:D1:D4:67:97:62:13:62:59:56:67:26:9F:44:12:CC:C8
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:93:37:03:df:0d:93:2e:cc:ab:a8:0d:f4:4d:c5:4f:bb:
1a:61:8e:78:a2:9e:c1:54:d2:ca:9c:af:5c:c4:16:3b:2b:4d:
5f:56:14:23:91:f8:38:bc:06:6d:3a:e0:b6:8c:98:d4:1e:2e:
83:e6:23:4c:ac:03:3d:01:99:77:c9:e5:42:c1:90:31:ee:26:
2d:5b:dc:e0:48:97:14:92:10:39:dc:9c:20:61:a4:74:42:ed:
2a:bb:5a:9e:8b:09:a9:66:1e:f7:7d:5f:c6:46:1a:c6:e2:ad:
f5:42:76:b8:80:f9:3a:69:48:af:ec:72:0c:4c:1f:9d:61:47:
99:7b:62:68:92:82:a5:12:18:67:1d:38:e5:f4:0d:01:0a:1c:
a7:32:5e:25:92:4e:71:85:ae:c6:28:8a:00:34:c5:d0:0e:3c:
05:fe:22:af:81:49:02:02:39:9c:ed:60:63:c1:b9:3d:c6:4d:
4d:ab:99:b8:4a:da:de:eb:be:e1:97:8e:3e:66:64:4a:17:ee:
a9:04:95:eb:64:1e:ef:0e:56:15:36:86:76:95:39:db:12:ba:
8c:4c:71:3d:a1:6f:fe:c9:4f:11:fa:fd:c0:73:be:4d:13:24:
45:a8:4a:dd:ca:d7:77:d6:c7:2a:19:24:34:4a:69:52:67:97:
b0:43:ae:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92fINVbuu27CtAAm6FVPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz
Y2Y3OTAwHhcNMjUxMDE5MTkwMjIyWhcNMjUxMDIwMTkwMjIyWjAzMTEwLwYDVQQD
Eyg5ZGZlYmI2N2QxZDQ2Nzk3NjIxMzYyNTk1NjY3MjY5ZjQ0MTJjY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBY5BlxB2G0slCGzk53/CeQRDBaE
Z6JcFcuTydP/odZujVBr1mlNSoQtRvx/qMGp3xGoUYnSjuxuQR72x/PTh1XWCiLj
AAui1ukgjSBI50xgh9MwrpuLzY5NalFHDuYXgr2/taSfd8021cm4qIbno9AWQp4L
ZxNBKxFAUhYFboVOnbT7VRsvNZ9Gh2Gt9xcdubjxd5RCHGnbVeVpPILSXY8BtlkU
tkuIVZc8etuhaeDA/5apWGvLrr1xdtuzkPcsD2o9heKVPMFto87aseXJW6f+YVwb
vfBmIi/0GA7/HHIqgIae6Ldb1DIXFjfUo3SPmQSSA4ywZkuvRaV8m7J/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3+u2fR1GeXYhNiWVZnJp9EEszIMB8GA1UdIwQY
MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt
OTA4ZTY5MmNmM2MyLzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My
LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdmTNwPf
DZMuzKuoDfRNxU+7GmGOeKKewVTSypyvXMQWOytNX1YUI5H4OLwGbTrgtoyY1B4u
g+YjTKwDPQGZd8nlQsGQMe4mLVvc4EiXFJIQOdycIGGkdELtKrtanosJqWYe931f
xkYaxuKt9UJ2uID5OmlIr+xyDEwfnWFHmXtiaJKCpRIYZx045fQNAQocpzJeJZJO
cYWuxiiKADTF0A48Bf4ir4FJAgI5nO1gY8G5PcZNTauZuEra3uu+4ZeOPmZkShfu
qQSV62Qe7w5WFTaGdpU52xK6jExxPaFv/slPEfr9wHO+TRMkRahK3crXd9bHKhkk
NEppUmeXsEOuKA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:20 2025 by rpki-client