Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File: VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier: X1Ut3bcsMEGbJeb9BTpSRUnB1zcRgCJVkJg01eE3afM=
Subject key identifier: DD:96:DE:12:1F:D2:72:D7:F2:C6:F4:E2:FA:59:04:A0:7A:C6:4A:6D
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial: 019A725C70C18CECBF484989EBACB789E2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: O_3sjFQLU8LSk5AiF4s2qKZfXBc.roa (hash: ejuYtetnOewL1sJBmaMYLDQ65Hla2peOL6OXuWr4CIE=)
2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: 4mLfF/xUsvXJ7ZgwrcT9gIgVD97QwSN6XigWPdJe34M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:70:c1:8c:ec:bf:48:49:89:eb:ac:b7:89:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=dd96de121fd272d7f2c6f4e2fa5904a07ac64a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:ac:d3:37:80:4f:5e:2e:b8:79:1c:2f:a3:
ba:fe:6d:56:31:9f:5f:fe:d1:e6:ee:8e:50:bd:74:
25:c7:53:c4:a8:22:bd:7f:0b:49:db:98:99:d3:f9:
a5:72:5d:b8:8e:51:21:26:51:49:0c:3f:16:2e:9d:
6a:81:3e:32:21:9a:6d:b2:f7:2a:e6:25:7a:32:fd:
b7:e6:b2:b5:dc:22:ee:77:25:39:69:c0:e1:1c:2b:
23:50:de:81:62:9a:4b:e5:08:f6:1d:af:12:df:40:
92:7e:4b:1c:28:6d:b9:cd:00:8a:b4:ba:96:66:74:
09:5c:64:37:d2:79:c2:c2:76:57:08:cb:10:7d:84:
58:ef:00:07:3c:f1:03:04:8a:07:e1:51:1d:6a:61:
6f:4d:c0:95:79:a9:d4:c1:2f:1d:b8:68:9b:25:1d:
33:e2:d7:32:9e:a1:07:88:c3:8a:42:21:be:95:3a:
cb:e4:7f:cb:7b:f8:ce:08:e6:eb:92:26:09:cc:54:
e8:78:b7:2c:f5:52:b5:92:31:05:4e:57:fe:26:aa:
f4:ce:4a:13:42:d4:f7:07:91:1a:7c:86:f4:87:74:
56:81:7a:aa:33:68:f1:b3:35:d3:e1:19:d9:cc:07:
37:44:e6:53:b2:08:04:c6:7a:61:9a:25:5f:7b:ac:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:DE:12:1F:D2:72:D7:F2:C6:F4:E2:FA:59:04:A0:7A:C6:4A:6D
X509v3 Authority Key Identifier:
keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f2:c6:64:03:32:7a:34:37:dc:6a:13:6f:e7:fa:92:5b:ef:
06:01:fb:13:fc:cc:b2:fe:f2:c7:c8:6b:0d:76:7f:7c:43:bc:
e9:18:90:41:45:e0:1d:d0:d1:ae:18:b6:ad:2d:1d:d4:2b:df:
7e:42:9c:63:7b:95:3f:2b:f1:a7:28:7c:6a:28:23:7f:2d:97:
fc:07:51:81:56:a1:be:cb:fc:76:7a:17:be:4c:9c:d5:26:9f:
64:f9:01:f4:f9:2f:b9:62:cb:e8:c1:9a:72:f0:6f:b5:b2:3c:
4c:f8:d7:72:6a:87:ae:8b:94:8b:23:a5:60:a2:fb:71:26:c1:
d3:18:76:e4:3a:63:21:32:7d:9a:9d:fc:7e:aa:59:4d:86:da:
55:e5:d4:37:40:77:ad:53:e3:57:6a:93:6f:ab:d1:05:bb:da:
5a:12:58:f2:7c:73:ce:95:c0:e9:14:2d:ef:68:04:b8:17:cb:
a0:fd:ae:06:27:f4:2b:09:4c:b4:70:6e:f9:3b:ac:07:72:45:
0e:81:e9:64:0d:ea:b8:4c:df:26:94:32:ac:58:f0:23:c7:96:
3f:e7:54:35:8c:ee:06:90:8f:00:0e:89:51:90:76:6d:ee:54:
0b:63:5a:b9:8d:3a:b6:64:27:82:16:7e:e3:88:87:49:e6:36:
48:a7:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:44 2025 by rpki-client