Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: Z5HnKJ2NtG32J9zy5Tl+g9BJoqXmwjWZXveuf8JZ7Ng=
Subject key identifier: C0:AF:FA:28:46:47:6E:54:38:D8:A5:E1:7A:A0:69:67:B8:00:FE:72
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019A52D2AA4C49E85E3E76100D3BCBBBAADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 044F
Signing time: Wed 05 Nov 2025 07:02:09 +0000
Manifest this update: Wed 05 Nov 2025 07:02:09 +0000
Manifest next update: Thu 06 Nov 2025 07:02:09 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: 0pOTEhKdI1erOACJwAWT+kSqO5KCHAMR9Wtr6gF/a10=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:aa:4c:49:e8:5e:3e:76:10:0d:3b:cb:bb:aa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Nov 5 07:02:09 2025 GMT
Not After : Nov 6 07:02:09 2025 GMT
Subject: CN=c0affa2846476e5438d8a5e17aa06967b800fe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:00:21:06:89:ce:8f:61:b5:da:67:17:3e:
a1:83:8f:a9:af:54:18:c0:7e:6b:1a:73:46:7e:ba:
ef:58:24:06:f7:46:6a:b1:71:9a:04:f3:87:b7:f0:
69:73:dd:cc:71:fb:7d:f2:71:f3:29:7a:ea:33:11:
d9:f6:22:15:0f:b6:a7:da:f7:80:d1:c0:ae:ae:fa:
2e:28:6a:67:78:1d:4b:59:b2:68:27:2c:d2:86:a2:
bb:42:b0:f6:1a:b3:ce:82:ab:86:98:49:7c:4b:86:
3b:bd:28:28:d5:40:73:7c:1e:4e:4b:05:db:a9:f2:
72:3a:68:02:01:25:70:5e:79:00:db:2b:01:9b:36:
60:c2:03:a6:26:7f:b2:22:08:da:b2:c9:71:b2:fe:
53:90:93:75:57:e5:f0:8d:98:ce:7e:11:0e:71:2d:
85:5c:38:ce:c8:95:55:91:97:45:73:f1:ce:fa:61:
90:61:40:08:1a:43:cf:cd:7f:7a:ba:51:05:fd:94:
4c:1f:71:fc:18:a7:c5:41:28:75:2f:c1:2d:ce:e3:
38:90:dc:c9:10:f9:db:25:a4:d0:34:da:70:00:6e:
d4:5a:83:df:f0:71:2f:fc:7b:1b:fe:5f:a7:a6:97:
a8:2f:11:71:db:b8:81:0a:66:34:3e:79:b3:fe:e6:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AF:FA:28:46:47:6E:54:38:D8:A5:E1:7A:A0:69:67:B8:00:FE:72
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:99:c3:53:82:11:47:95:de:cd:1d:12:d5:02:4c:84:4d:eb:
1f:28:75:43:de:70:7a:0a:c9:ac:80:76:c2:45:a8:95:f1:32:
f7:94:20:e5:75:5d:ea:7e:e8:c3:66:b5:3c:fb:8a:5b:df:b5:
70:a4:ac:e2:df:51:1d:78:4a:87:5d:f3:ce:af:11:11:b1:bf:
9b:df:1c:ff:83:27:91:be:2d:10:8f:7d:7a:f9:4c:a4:da:08:
e1:12:49:82:c2:45:6d:08:de:aa:43:d5:77:09:7d:8f:bb:25:
1c:d6:1e:e8:d8:97:31:bf:41:73:a6:39:51:6e:4a:89:b5:cd:
2f:64:f0:bf:db:b7:ff:85:5f:ea:1e:17:f3:ae:3b:97:e2:ca:
c2:03:cc:49:12:0c:16:4f:af:35:35:69:c2:d6:84:63:63:bc:
ef:23:d4:a5:af:67:ec:8c:96:77:24:c3:2b:5e:a7:ba:76:62:
1b:4b:ae:fd:2b:86:ed:3b:39:24:d7:3c:33:98:33:fa:cd:b2:
de:89:01:8e:86:c6:50:47:f1:b9:a0:88:08:93:ba:7e:8b:4b:
da:85:56:65:b8:2c:93:80:39:ae:aa:2e:39:47:8e:96:4e:68:
3d:ef:75:0a:54:b5:1e:49:d7:cf:37:1f:be:74:0c:22:d6:76:
ac:c5:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:07 2025 by rpki-client