Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: E8iwdZhTMg7J/ag+AiIXBLZSeOt6m8kMnROKmxjsbJ4=
Subject key identifier: CE:81:1E:F5:1E:F8:0A:23:87:FF:8D:C5:67:D8:CB:0A:54:3F:B5:1C
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019A4EF530FABB8A66A889259F0969586125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 11E0
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: xnf+mZnFEf+uuhJ7Hokaci3KRoQMk+CO0WmJxjC0ciM=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:30:fa:bb:8a:66:a8:89:25:9f:09:69:58:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=ce811ef51ef80a2387ff8dc567d8cb0a543fb51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:cf:82:08:b7:36:75:a3:01:ad:85:b1:18:
64:af:a7:61:4b:dd:7e:96:3c:40:92:a3:eb:04:f4:
03:04:3d:b4:fe:e6:76:87:23:9c:d8:d4:b5:2c:07:
ad:d2:5f:8c:59:54:1d:18:00:e5:ed:88:c1:e2:43:
42:1e:46:6b:37:a5:81:c4:f5:66:55:fe:8d:82:b5:
de:26:6e:b3:a1:72:50:6a:b3:90:ac:9a:53:87:f3:
b5:43:6c:99:2f:9d:b0:7e:e8:a1:d9:9b:38:4b:5c:
04:fe:e6:c8:52:a5:0f:c2:7b:7d:19:08:32:0a:36:
7c:fc:06:92:38:ae:91:0a:20:c2:79:dc:aa:02:23:
68:eb:12:cc:98:d8:00:59:f7:35:66:c1:7a:07:82:
fa:32:d4:99:1b:81:1b:7f:2b:30:79:ce:d9:81:3c:
9b:b8:6d:93:b4:1c:c5:d6:26:5b:37:14:41:95:d2:
62:48:d5:61:df:03:35:e6:e7:a5:de:69:8f:00:c5:
9a:0d:06:d7:67:76:8d:42:0b:30:ad:aa:88:85:bf:
12:79:b2:18:38:2c:48:30:54:58:bc:7b:05:5e:d3:
08:d3:d4:54:dc:55:75:30:7c:20:96:cc:9f:3a:1a:
9c:0b:50:e9:62:e5:31:3f:26:85:8e:9e:9f:c0:48:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:1E:F5:1E:F8:0A:23:87:FF:8D:C5:67:D8:CB:0A:54:3F:B5:1C
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0d:61:2d:e6:47:88:24:fc:b8:56:15:85:3a:f0:47:f5:53:
f4:fc:c0:ff:14:9e:ea:11:70:d3:82:f1:21:2d:38:7e:42:90:
cb:29:cb:7d:c1:ce:54:7c:d0:43:f7:be:7e:61:f3:c6:8d:bf:
0b:b8:a5:87:7f:f0:16:ab:62:89:be:65:4a:c8:31:94:32:83:
ac:c4:64:78:ef:21:e3:61:22:31:10:ee:f0:65:56:08:f1:a0:
68:cb:8b:4d:3b:99:ca:c3:ed:ae:1c:64:2f:98:2f:d8:a0:4e:
d4:09:2a:f3:c6:74:91:11:ec:93:31:5d:8b:e3:5d:27:cc:21:
54:8b:ec:24:df:62:a4:be:85:59:16:9f:9b:93:99:7f:88:0f:
b9:6d:0a:6b:9f:c6:34:2e:ad:a8:aa:d0:96:c1:a5:ce:0e:37:
3e:14:8b:05:50:26:b0:86:39:c4:65:06:cd:97:f9:9c:7b:9d:
50:78:96:d4:4a:3f:2b:a5:c5:d6:80:f4:da:ea:3f:e6:b9:1f:
1a:5d:9f:fc:47:f2:ab:80:1f:9f:42:bf:1b:0b:94:39:27:7a:
e1:52:df:3d:a9:fa:eb:f0:db:cb:b7:7d:38:58:00:ee:99:03:
d0:bd:10:23:a5:e3:13:73:19:0b:24:ad:88:28:e5:4c:49:3d:
92:3f:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:39 2025 by rpki-client