Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: ks2721RKu3580tmcOXDnEazSAj2WGqEMsh4jQx6ss4w=
Subject key identifier: B3:7A:EE:FF:37:74:06:F0:D2:59:84:F4:00:53:64:DA:4E:F1:01:F9
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 01991BE62A7013BFEC82B30A19D1CAFE3FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1141
Signing time: Fri 05 Sep 2025 22:01:32 +0000
Manifest this update: Fri 05 Sep 2025 22:01:32 +0000
Manifest next update: Sat 06 Sep 2025 22:01:32 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: U7lHpWlLW4pul7H3L5Tv8dK69d4tRAz7HszCOJwyrWM=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e6:2a:70:13:bf:ec:82:b3:0a:19:d1:ca:fe:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Sep 5 22:01:32 2025 GMT
Not After : Sep 6 22:01:32 2025 GMT
Subject: CN=b37aeeff377406f0d25984f4005364da4ef101f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:27:a8:f0:07:84:49:ac:ca:9b:be:1c:b1:
2b:bc:31:7f:f1:43:b2:92:a8:06:ec:85:76:a2:12:
75:db:13:00:09:86:9e:3b:32:5c:94:21:0b:62:ac:
cb:0a:b7:77:fc:4b:f5:89:02:a1:85:eb:9f:e5:38:
59:44:ea:d3:28:7f:22:7a:89:3b:48:8a:09:2a:4d:
da:63:29:54:fa:3e:97:c6:49:da:ec:a6:2a:44:36:
56:75:77:94:3d:05:cb:c9:61:32:b4:70:a2:2b:d4:
f0:78:9e:ad:7a:10:b5:01:9f:1c:ef:9c:4a:3a:35:
e1:6d:ef:a4:7a:66:f8:b5:68:a4:ed:0a:e6:fd:12:
98:71:d9:8f:e8:8b:8a:37:25:34:ea:5f:3a:11:23:
73:9b:63:fb:2d:09:04:0e:cf:86:2e:67:50:d1:9a:
24:3f:42:a9:da:2f:d3:db:69:47:36:ba:d6:de:8a:
f2:ae:a6:b0:e1:48:68:97:37:75:dd:ca:09:e4:3c:
98:85:40:27:f7:a2:33:25:4a:b6:be:1f:05:01:f5:
fe:01:53:64:52:ae:3a:fd:7c:90:87:65:15:8c:c6:
13:29:03:03:f2:fa:60:34:26:f6:4d:2d:69:8d:4f:
d2:b4:da:03:8c:82:04:fa:4a:63:a3:f6:eb:8d:fb:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:EE:FF:37:74:06:F0:D2:59:84:F4:00:53:64:DA:4E:F1:01:F9
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e3:dd:7a:87:58:84:4d:c4:e9:45:32:37:35:0a:0b:62:14:
75:a4:4b:d9:ef:8d:95:ef:1d:a9:99:87:4e:b9:b9:bc:ee:0a:
1b:72:ff:5a:66:4b:dd:6d:ab:26:5e:84:cd:4f:ed:fa:f2:0e:
56:cf:d2:fc:3c:26:c2:40:c2:ed:c1:8e:07:1d:e1:14:53:62:
78:48:dd:3d:f8:72:a7:a7:81:62:a5:cc:6d:65:00:90:c0:9b:
68:fb:35:42:93:df:f6:50:40:9d:44:e2:27:2c:23:53:32:e8:
ff:60:76:4b:89:d3:8e:da:06:f5:33:c7:36:65:29:17:bd:f6:
a4:55:85:b6:a1:66:1a:84:02:d5:9d:d4:58:8f:ef:40:d9:5b:
ef:13:fd:e0:db:e1:a0:5f:17:af:bf:94:f1:1b:6b:eb:8e:f4:
ef:53:35:2d:c0:5f:ab:be:7d:ce:c8:37:b6:fe:4e:fa:6a:15:
b7:ba:cb:8d:1a:8e:bc:fc:49:d0:cb:ca:aa:09:a4:4c:7b:f9:
08:c4:b9:fc:72:33:3a:41:59:f2:6b:39:21:07:c7:09:3f:ed:
28:cb:a4:2f:24:f1:72:4f:b7:88:e2:8b:6d:67:5c:3a:6d:6a:
3c:c9:80:25:15:19:58:0b:da:e2:84:b5:d3:a7:0b:69:18:b1:
5b:3f:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:09 2025 by rpki-client