Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: IyTWVzKxxPnsTcg8U1ssP7IiMD/KrT/yQ15JwE8hoZ0=
Subject key identifier: 0A:D3:5B:B5:2E:59:A0:92:78:37:D3:0E:D8:B7:48:2E:78:34:9F:47
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 0197B6A236C492F6C66BE9CB8F381FB42DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 02F5
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: 1T4PUZeIbnyLVqji985PrXcZNSkDX2ujXyyoE21oPVo=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:36:c4:92:f6:c6:6b:e9:cb:8f:38:1f:b4:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=0ad35bb52e59a0927837d30ed8b7482e78349f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:40:9c:77:11:db:c9:97:82:ad:60:ce:73:
a3:33:fa:62:a2:93:7a:78:df:3d:17:7a:48:2e:6e:
9c:a7:40:01:e0:35:cd:65:03:a8:2a:c0:0b:06:36:
20:49:b9:aa:b2:47:b9:b8:64:7c:64:d7:e4:09:c7:
da:2a:89:73:3b:7f:1d:94:24:02:e3:96:76:90:ef:
e6:44:3c:7f:f5:2b:bf:09:2f:40:90:8f:f7:47:0c:
15:f1:f9:2e:13:1b:de:03:2e:d8:13:63:bd:eb:d1:
4d:00:55:17:41:df:7c:ee:32:b3:1c:78:e9:e2:f9:
ea:07:9b:82:af:44:c5:bd:d9:2a:84:38:44:44:02:
da:21:9a:70:e5:45:e7:85:15:b7:88:31:e8:c6:92:
72:97:28:f7:40:22:12:9e:91:94:e2:33:e6:c3:09:
6f:94:72:f4:81:a2:ee:d3:bc:a4:23:5a:47:f1:28:
32:41:6e:7e:c1:9a:ee:c3:47:93:ab:cc:97:d2:04:
9f:1c:9e:6d:5c:dc:24:3c:1c:5f:07:74:36:bb:6f:
f8:c8:c0:a2:07:6d:11:9d:a7:65:be:21:64:01:5d:
2c:c6:3d:e9:53:86:7c:b0:7e:51:5b:7c:da:b5:47:
81:02:55:31:fb:a5:1d:f4:8e:98:05:47:23:8e:6b:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:5B:B5:2E:59:A0:92:78:37:D3:0E:D8:B7:48:2E:78:34:9F:47
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:41:5c:9b:e0:f1:17:af:66:07:f0:f7:b1:52:67:7a:4e:e1:
62:de:98:72:41:5b:f1:5e:bf:f5:01:82:a6:d3:88:1c:00:ac:
89:d7:ad:fd:ed:2f:54:c0:98:51:e4:7b:7e:59:f8:97:d7:a4:
f0:73:74:ea:49:7c:41:8d:da:11:75:a5:f0:a4:27:17:82:0f:
9d:23:df:f8:41:ca:08:1b:18:cf:5c:37:cd:8a:69:66:45:f8:
39:de:ee:af:2e:ea:2b:bd:d3:67:11:1b:82:d2:66:32:69:53:
4d:de:46:f0:f5:d1:0b:03:96:bd:0e:31:b7:d5:fd:85:10:7a:
d0:0e:f1:34:f3:a0:2c:b9:4a:91:b8:e2:30:11:19:66:66:ba:
fe:f4:0c:93:1c:ba:29:b6:1b:55:f6:2f:7e:61:ff:67:a5:81:
e0:b4:6b:20:2f:f3:61:91:81:f0:dc:fe:97:4a:2d:7f:b0:e7:
11:b4:e3:c6:90:fd:3c:a3:19:4a:82:01:4e:45:87:46:3f:78:
1a:e3:eb:81:28:30:53:c7:dd:8f:43:22:cf:46:51:63:97:a2:
0f:40:37:6c:10:6e:30:b8:87:18:3e:51:b6:42:43:a6:d3:b2:
9d:4d:bd:8f:71:38:1e:af:21:1b:5c:63:1c:b9:17:1e:16:bd:
87:4d:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:36 2025 by rpki-client