Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: DoXFaBQUqwuitRxBIkYa+W5fx5Tc2+YX3fi5/ma/m8Y=
Subject key identifier: E9:BB:03:43:FB:E2:56:D5:85:DD:DF:CF:6F:B4:BC:A9:0D:44:5B:83
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 0198D660CE7A2CF3790809EDEC3195357A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 038A
Signing time: Sat 23 Aug 2025 10:02:05 +0000
Manifest this update: Sat 23 Aug 2025 10:02:05 +0000
Manifest next update: Sun 24 Aug 2025 10:02:05 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: 3dJGSrPij6LKqLcjXZWe8i/fftiRywd6qiFp+/AuH54=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ce:7a:2c:f3:79:08:09:ed:ec:31:95:35:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Aug 23 10:02:05 2025 GMT
Not After : Aug 24 10:02:05 2025 GMT
Subject: CN=e9bb0343fbe256d585dddfcf6fb4bca90d445b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:2d:40:9e:47:2d:10:89:1f:92:6f:a3:cc:
fe:cf:30:57:ab:7b:67:0a:a0:cf:60:9b:24:9d:92:
d7:b6:47:44:39:e0:41:7e:a9:3f:ec:95:73:90:b6:
79:44:d1:59:5c:fd:c9:e1:11:f6:97:83:a6:ed:a3:
fd:75:fc:cb:57:cf:00:a9:a1:89:da:73:39:ce:5f:
aa:7e:9c:a8:14:28:08:33:bd:ec:c1:c4:a9:38:da:
3d:f2:d6:46:03:e5:78:2b:63:3e:57:d8:8b:b2:de:
c7:f2:8c:d8:49:e3:ec:34:db:21:a9:06:99:66:ed:
a5:b7:03:f3:20:f9:4f:6a:dc:f8:fa:55:9d:2a:43:
f3:34:b1:99:6c:e6:f6:63:8d:4c:c7:b0:0f:a2:e4:
7c:0c:78:79:e7:e4:52:c8:7f:d4:1b:28:86:c6:38:
5a:c4:f6:e3:83:1b:10:2e:ec:cd:01:a3:44:23:37:
32:6d:c6:f4:86:62:8e:a7:f0:83:dc:7c:50:3e:64:
9c:a3:76:2d:0c:0e:74:49:64:73:9c:66:a6:5a:29:
8b:25:0c:4e:7e:0d:10:fc:1d:73:57:f5:69:2c:78:
9e:a0:18:65:34:91:cc:f0:ac:6f:32:4d:3a:df:30:
67:07:f3:18:a8:90:ef:e1:8d:28:75:a9:28:bb:7e:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:03:43:FB:E2:56:D5:85:DD:DF:CF:6F:B4:BC:A9:0D:44:5B:83
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:62:14:99:89:3d:22:4f:a0:c9:55:bf:f7:1c:4b:02:62:7c:
2a:eb:b5:19:9d:43:fc:e7:06:99:46:ff:60:91:7b:50:11:c6:
0e:91:28:93:64:c2:38:26:f0:0c:b9:9f:13:5b:86:c3:6c:cd:
6a:6b:02:f6:fa:1e:e3:ec:d3:bf:2b:af:6f:0c:6a:53:4b:23:
9d:de:12:9b:32:82:27:12:67:cc:76:74:7b:45:c3:24:4f:64:
ea:84:93:79:73:1c:51:ba:0e:43:e8:ba:00:5d:ea:a8:62:22:
99:8d:d6:dc:06:f0:f2:df:72:5c:5f:dd:ca:9f:75:33:ba:c1:
3f:41:91:10:fb:93:07:04:42:e8:77:f9:97:70:bd:df:ba:80:
31:4c:97:ec:b1:89:65:d3:18:12:e1:44:75:75:29:56:60:2f:
29:b1:37:31:7f:fc:a4:bb:f7:ec:f9:93:6e:66:a1:d3:0d:08:
92:7c:03:c1:4c:af:e6:c7:91:13:cb:76:94:8f:dd:5c:64:48:
8e:50:a3:13:99:14:e2:a5:69:c5:0c:a0:23:1a:45:75:e6:a1:
fc:ab:a2:70:0b:a7:09:f9:e5:c1:37:5e:a9:f9:d6:ca:59:91:
0f:41:c2:05:26:52:c5:23:22:50:ad:d0:44:9c:a0:1b:3e:88:
16:66:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:53 2025 by rpki-client