Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File: VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier: t5Xsfpw+C+8ytkvJjUzxuLWjb/Z1xz9WWDpU4ww0H64=
Subject key identifier: E4:B7:A6:CB:2A:1A:CD:38:82:3C:EA:D6:9C:BA:08:70:40:BD:98:2F
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial: 019A4DAAB740B8A44801303F70865B251F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 07:00:24 +0000
Manifest this update: Tue 04 Nov 2025 07:00:24 +0000
Manifest next update: Wed 05 Nov 2025 07:00:24 +0000
Files and hashes: 1: O_3sjFQLU8LSk5AiF4s2qKZfXBc.roa (hash: ejuYtetnOewL1sJBmaMYLDQ65Hla2peOL6OXuWr4CIE=)
2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: baDS9CaikXhzV6frrwUfMwwrvmT53IqW9R1HdHCcx+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b7:40:b8:a4:48:01:30:3f:70:86:5b:25:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Validity
Not Before: Nov 4 07:00:24 2025 GMT
Not After : Nov 5 07:00:24 2025 GMT
Subject: CN=e4b7a6cb2a1acd38823cead69cba087040bd982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:14:08:df:96:8b:c7:73:24:05:db:d0:7c:
c8:6b:6c:be:a9:8c:94:1f:82:79:19:3e:1f:ca:73:
2e:52:e5:47:df:dd:c4:44:05:b0:c6:a4:11:25:b5:
e7:db:2c:61:c2:4f:74:31:60:fb:f1:fc:1b:a8:19:
bb:52:7f:06:fd:1c:a7:2f:15:a5:16:64:b2:e2:89:
6a:b4:f1:a8:95:72:48:e2:e4:e2:1d:19:a4:75:fb:
8f:86:37:51:d0:c4:54:15:10:43:eb:ed:a1:7e:3d:
20:46:63:c5:bc:07:e2:18:15:af:d2:6d:ef:53:fe:
b1:61:55:65:18:38:69:f7:de:ed:8f:9a:1c:8e:41:
6a:be:86:57:83:aa:27:ca:7c:d8:cf:f8:e2:86:2e:
04:0c:b1:58:5a:6b:5f:4e:60:d1:c4:60:5c:54:29:
7f:73:94:8c:01:2f:28:e6:31:10:39:89:fc:a3:b4:
e0:1d:ab:1d:4a:84:5b:ba:89:7a:a8:b6:9a:16:77:
c7:fa:7c:8f:0f:87:ce:4d:1d:78:61:9d:12:52:a4:
86:82:7b:61:27:34:3a:da:65:bc:45:62:4b:6f:7f:
d0:b3:21:fe:32:47:e9:3e:de:8a:dc:70:f2:3a:c1:
2e:58:4a:2c:79:97:cb:bb:4f:b3:ad:46:4b:fe:0b:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B7:A6:CB:2A:1A:CD:38:82:3C:EA:D6:9C:BA:08:70:40:BD:98:2F
X509v3 Authority Key Identifier:
keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:7f:f4:0b:fd:26:fd:bd:eb:bd:cd:35:41:47:43:04:54:
a7:09:b7:b1:c8:6e:fb:3a:2b:ef:af:86:b6:b0:2b:28:58:d9:
1d:17:c7:65:84:42:85:db:dd:3d:3d:55:47:fe:0b:46:98:c5:
1d:8c:5f:c9:f6:2a:fc:43:ab:a5:d3:1c:78:50:08:b4:8b:da:
e4:c1:65:96:19:fb:a4:93:b7:60:59:d2:96:fe:b4:bf:c5:3b:
71:56:59:e8:f6:d0:58:88:1a:27:ea:82:24:b4:ad:46:e7:05:
a5:f5:8d:fa:d8:08:72:f4:f1:50:17:a6:20:e1:c5:aa:10:c4:
b7:6a:8a:88:dc:f7:f9:12:47:33:17:e3:0c:dd:6a:c9:a5:26:
aa:df:84:93:fe:ad:30:90:5a:47:cb:30:3b:d6:77:98:67:29:
96:4b:b2:39:72:fc:8b:da:86:f4:71:6f:6a:e4:c6:03:bb:f7:
25:ab:81:81:a7:26:67:48:8d:65:69:2d:2d:77:07:6b:16:2c:
69:8e:df:06:e8:81:9d:d5:ac:b2:af:08:97:72:e0:1e:db:9f:
e3:e1:76:9f:2d:13:57:d1:ef:49:57:48:43:bc:05:22:34:f3:
57:76:91:21:0a:32:1c:c0:dd:e8:89:09:33:c7:fc:f3:c8:32:
b6:ac:0f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:37 2025 by rpki-client