Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: ozTjDR+nLCx0N6KtM/er8S5/KJ26pjBvmlNYgFfGbmY=
Subject key identifier: B1:AD:46:93:79:00:F2:F2:18:1D:3C:54:9C:0B:70:B6:EF:15:0C:D6
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019A31FD4607AB94DD19649257223A5CDDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 043E
Signing time: Wed 29 Oct 2025 22:01:13 +0000
Manifest this update: Wed 29 Oct 2025 22:01:13 +0000
Manifest next update: Thu 30 Oct 2025 22:01:13 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: FgT+MUBSL2aXZn0hrOIS1FAgQqWc17VR+upyaD2o0m8=)
2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fd:46:07:ab:94:dd:19:64:92:57:22:3a:5c:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Oct 29 22:01:13 2025 GMT
Not After : Oct 30 22:01:13 2025 GMT
Subject: CN=b1ad46937900f2f2181d3c549c0b70b6ef150cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:46:d5:a5:d8:c1:b6:02:c1:ee:7c:da:a1:
2f:c4:1e:79:d1:67:9f:79:43:58:0f:5e:36:56:e6:
7a:8b:ef:59:b9:de:8d:9f:ff:8f:f5:da:a5:10:73:
85:f7:0c:a0:0b:7b:ed:b6:1e:8c:05:ab:74:bc:99:
f0:57:6e:4a:f5:b2:ac:2b:6d:cb:6a:72:ac:40:0b:
bd:82:03:e7:56:f9:c1:81:4d:ee:11:82:87:05:bc:
87:8e:08:5d:5f:7b:32:a5:9f:4d:d0:a7:b2:1e:ca:
88:b8:de:2e:98:36:51:e6:bf:88:24:b0:cd:b0:a1:
3f:5f:6a:e5:62:4d:47:1d:ee:82:bc:cd:cc:39:69:
02:08:bb:55:5b:2f:0d:cc:47:ba:1d:18:95:7a:9b:
a0:66:f8:10:14:64:5a:56:8f:02:19:41:f0:c7:99:
3d:28:96:9d:4e:f4:02:c5:47:b4:eb:0d:2c:81:3d:
83:0e:4c:4c:ca:18:11:cd:cb:47:91:61:c9:87:cf:
19:33:b2:ed:65:a1:15:82:ba:e8:af:6b:ef:90:11:
06:9e:c1:71:bc:55:f0:c0:42:7a:5b:98:c0:65:cc:
49:c0:e4:3a:1b:ae:68:eb:36:69:b7:84:e8:9f:c7:
ca:ed:f9:25:ad:3d:ca:d8:6b:1b:50:3e:b9:5e:ea:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:46:93:79:00:F2:F2:18:1D:3C:54:9C:0B:70:B6:EF:15:0C:D6
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cc:c1:03:38:f9:5c:33:e7:01:fa:52:58:84:70:c8:77:42:
45:83:8b:88:ad:f3:3d:b7:f9:90:af:31:23:f6:e2:e4:1a:e4:
de:54:c6:81:36:1f:5f:c3:a9:f0:9a:2e:f1:bc:11:57:4d:85:
dc:28:f7:c6:b4:b7:18:8f:c5:8f:78:f8:77:d6:67:68:3e:f7:
9b:af:e4:ff:4b:b9:39:47:46:72:d8:4c:7c:64:26:b0:44:8f:
ca:1a:3a:b3:f6:16:0c:be:5a:9f:ca:7d:48:79:7e:3c:5a:ff:
0f:1b:4d:24:d0:88:87:26:a1:55:0a:26:00:85:4f:96:4f:f9:
94:87:4b:51:f8:aa:74:d5:ad:26:51:8b:df:f9:04:92:90:5c:
5a:f0:0d:4c:5c:19:b7:a6:6c:8b:99:2f:3a:68:32:1a:55:b6:
4a:3e:38:c5:ae:6a:8a:6b:25:42:52:65:80:2e:53:a6:c8:87:
b8:e9:4b:3e:a4:74:be:c7:ea:40:28:18:15:f6:46:77:46:ba:
23:e7:dd:eb:d1:f3:4f:c2:ee:f0:4c:b7:a5:b2:09:c5:c4:4e:
74:d8:53:9b:43:a7:20:4b:46:73:08:72:56:71:50:3a:e6:69:
8e:8d:21:3f:9d:98:04:70:cf:b6:90:87:41:0b:24:c0:f1:ae:
86:06:12:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZox/UYHq5TdGWSSVyI6XN3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz
Y2Y3OTAwHhcNMjUxMDI5MjIwMTEzWhcNMjUxMDMwMjIwMTEzWjAzMTEwLwYDVQQD
EyhiMWFkNDY5Mzc5MDBmMmYyMTgxZDNjNTQ5YzBiNzBiNmVmMTUwY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MhG1aXYwbYCwe582qEvxB550Wef
eUNYD142VuZ6i+9Zud6Nn/+P9dqlEHOF9wygC3vtth6MBat0vJnwV25K9bKsK23L
anKsQAu9ggPnVvnBgU3uEYKHBbyHjghdX3sypZ9N0KeyHsqIuN4umDZR5r+IJLDN
sKE/X2rlYk1HHe6CvM3MOWkCCLtVWy8NzEe6HRiVepugZvgQFGRaVo8CGUHwx5k9
KJadTvQCxUe06w0sgT2DDkxMyhgRzctHkWHJh88ZM7LtZaEVgrror2vvkBEGnsFx
vFXwwEJ6W5jAZcxJwOQ6G65o6zZpt4Ton8fK7fklrT3K2GsbUD65Xuot7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGtRpN5APLyGB08VJwLcLbvFQzWMB8GA1UdIwQY
MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt
OTA4ZTY5MmNmM2MyLzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My
LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARszBAzj5
XDPnAfpSWIRwyHdCRYOLiK3zPbf5kK8xI/bi5Brk3lTGgTYfX8Op8Jou8bwRV02F
3Cj3xrS3GI/Fj3j4d9ZnaD73m6/k/0u5OUdGcthMfGQmsESPyho6s/YWDL5an8p9
SHl+PFr/DxtNJNCIhyahVQomAIVPlk/5lIdLUfiqdNWtJlGL3/kEkpBcWvANTFwZ
t6Zsi5kvOmgyGlW2Sj44xa5qimslQlJlgC5TpsiHuOlLPqR0vsfqQCgYFfZGd0a6
I+fd69HzT8Lu8Ey3pbIJxcROdNhTm0OnIEtGcwhyVnFQOuZpjo0hP52YBHDPtpCH
QQskwPGuhgYSmg==
-----END CERTIFICATE-----
Generated at Thu Oct 30 03:06:40 2025 by rpki-client