
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: wpHh2xsD1E42PpJI3+Mkrf7JyBQigEwFwU0vt8vWE5Q=
Subject key identifier: 41:B1:0D:60:5A:E2:0B:E4:3E:75:D7:9F:34:E4:48:25:5C:1F:EF:78
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 01988B1080C322C87DF85BC1B14B081F4E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0363
Signing time: Fri 08 Aug 2025 19:02:51 +0000
Manifest this update: Fri 08 Aug 2025 19:02:51 +0000
Manifest next update: Sat 09 Aug 2025 19:02:51 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: Cwymt3pOTH+VxAjhYP+zjOLAoLyaI1u+cbSevLDMn+Y=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:80:c3:22:c8:7d:f8:5b:c1:b1:4b:08:1f:4e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Aug 8 19:02:51 2025 GMT
Not After : Aug 9 19:02:51 2025 GMT
Subject: CN=41b10d605ae20be43e75d79f34e448255c1fef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:37:b4:98:bb:ff:a4:03:9f:25:63:90:2f:
b4:6c:e1:1b:b4:a0:01:d6:e7:34:dc:df:23:5b:02:
39:b7:7d:03:bc:2f:88:93:43:0f:e9:a2:37:38:05:
72:2f:29:fc:38:ac:86:79:17:60:d8:17:62:6b:22:
b6:a7:aa:f1:9b:44:a3:5c:9e:fa:ab:cf:de:dc:88:
87:fd:05:e0:a9:a8:a8:cf:12:ad:2a:46:ac:92:f3:
3f:4e:34:cb:e5:fe:88:a3:5d:af:21:54:8b:90:04:
22:6b:75:5f:43:44:7b:22:f5:42:90:3f:be:9d:a7:
43:ee:fb:b3:dd:fd:64:71:b1:c9:ad:0f:f6:41:2b:
87:c0:d0:3d:c6:c7:4d:25:3d:e9:56:a2:5f:b8:09:
c5:d1:7a:3a:94:5c:0d:6b:13:9f:9b:9f:69:9d:74:
9c:4b:38:d3:80:71:4b:54:d0:fe:8d:ef:6e:99:2b:
35:29:7b:fd:55:84:f8:29:ef:50:d0:3a:22:72:f4:
aa:d3:bb:84:59:59:ba:31:60:dc:a3:e6:87:2d:21:
b8:19:b7:b6:ed:37:b8:47:08:7e:d5:e6:f4:11:23:
a3:4b:83:2b:e2:c0:48:cb:d9:f2:bd:4b:21:c1:bc:
fa:45:fe:f0:d7:fe:c9:38:f1:91:ed:ea:12:e1:e6:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:0D:60:5A:E2:0B:E4:3E:75:D7:9F:34:E4:48:25:5C:1F:EF:78
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:df:cc:08:5e:ad:95:2d:05:0b:ac:4a:61:8e:6e:13:ec:a1:
11:ae:de:f8:c6:76:ed:6c:e8:f0:26:25:43:ef:cb:60:f6:a5:
c6:4d:4d:1a:e0:ff:c8:23:55:dd:5a:21:9d:3d:b9:79:e7:9d:
80:bc:d8:23:b0:49:d6:be:54:32:3b:42:2b:17:71:37:aa:d2:
0a:ba:09:87:2b:17:a9:bf:7c:10:c0:2b:0d:61:73:63:d2:b5:
19:03:3a:cc:c9:a1:9e:b2:ce:cf:45:71:d0:72:92:ad:e9:7d:
f2:01:55:eb:47:a4:0d:a1:ec:01:29:86:7f:8e:c0:60:43:82:
72:74:d1:dd:14:10:cf:94:71:c2:46:fd:ca:da:cd:6b:52:5c:
c1:50:8f:4b:f9:0d:46:8c:17:4d:43:f6:65:2f:ec:19:5b:4c:
d1:55:82:78:fd:31:44:dc:a9:6f:7c:ed:f6:55:fa:45:2f:01:
79:12:9e:e8:ac:cd:6a:a6:9b:11:62:b8:34:26:27:74:70:2a:
57:1b:a8:d5:1a:15:4c:7b:0b:3a:57:5b:3b:92:c8:f7:d5:1c:
22:6a:92:32:3c:ca:b0:b1:e7:ea:b5:9e:85:65:59:e6:62:56:
29:c7:a5:52:64:c0:73:45:34:12:42:fb:a5:c9:16:9e:8f:cf:
f6:a2:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:04 2025 by rpki-client