Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
File: viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json)
Hash identifier: YWRiUMZgEdfDL0FZDnGOpwOhABU5Bx2iQRKn1IEPzPY=
Subject key identifier: 42:10:65:27:59:28:4D:5C:C0:15:B2:0C:60:66:97:7B:A5:E4:BC:D7
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial: 019A4DAAF37D45E79E9E471E1893A1AB2FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
Manifest number: 1450
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=)
2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: UpSwB24/KRlwdPsj1MBjI/B5xfTuafWKDIOibwFmaGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f3:7d:45:e7:9e:9e:47:1e:18:93:a1:ab:2f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=4210652759284d5cc015b20c6066977ba5e4bcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:a2:65:4f:85:ff:33:64:a3:c3:23:8f:8f:
36:7e:b2:37:22:b4:34:72:80:3e:37:0c:9d:ce:5a:
02:3d:84:cc:bd:7b:43:33:88:c0:66:93:64:3b:7a:
47:b8:09:c7:2a:57:5a:7c:04:be:8b:6e:a2:8f:90:
06:89:e8:ab:fa:cc:3b:a3:8f:ef:2e:62:9f:95:98:
6a:a8:71:cf:65:70:f1:27:f0:c3:5e:54:8b:fe:26:
a6:2b:3e:5b:13:25:b3:c7:57:bc:32:15:51:a4:5f:
35:d3:2a:f5:5c:f7:27:16:c9:06:44:0e:d9:d2:54:
88:08:c7:f4:d7:d5:e8:3a:92:45:86:50:bb:a6:3c:
4b:e4:9f:fc:9c:e4:f6:6d:cf:1f:74:ee:d4:45:64:
1d:35:e6:81:cb:f9:6c:15:d1:c1:2f:13:f6:57:26:
2a:33:37:25:1a:0f:d7:33:5a:17:4b:47:01:1d:c4:
52:e7:3e:d6:de:c0:af:64:8b:4c:7f:45:b2:e1:c6:
a0:3e:a5:ae:31:fa:22:b9:95:f0:73:72:c5:18:00:
39:28:61:54:14:2e:2a:b5:da:e4:aa:55:eb:50:03:
09:f9:e5:05:c6:f8:c9:9f:13:bc:8c:0e:8c:bc:d5:
93:f6:e6:08:eb:7a:fc:f2:8f:72:8e:5e:12:e8:37:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:65:27:59:28:4D:5C:C0:15:B2:0C:60:66:97:7B:A5:E4:BC:D7
X509v3 Authority Key Identifier:
keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:61:76:3b:b3:42:cf:df:d5:a1:0d:71:3b:3e:f3:c6:24:
2c:67:90:96:dd:aa:5a:e9:68:de:b3:d9:a8:f1:4e:b3:c2:7e:
41:5c:05:77:8a:b9:86:30:a4:92:e2:2b:06:4b:86:fc:d7:4e:
a4:f9:e7:13:d5:a9:cb:f1:1a:99:04:bc:3f:5f:ba:62:5a:59:
db:fe:e8:ed:0c:0d:a0:15:87:22:8b:98:68:0e:79:1b:4a:3e:
2b:34:31:2b:de:64:e4:c1:f0:4b:cd:3b:d6:b4:51:7e:4a:f1:
fd:3a:bb:18:42:4c:10:dd:d3:f6:2f:ee:c6:1b:be:4b:bf:01:
0c:5e:31:77:4a:2f:b7:ba:1f:92:27:38:06:d9:56:83:03:84:
a8:cc:cc:3c:23:cc:90:56:0f:ba:68:26:f5:3c:88:95:d9:64:
28:69:6f:08:20:46:33:5e:24:60:d2:6b:ee:54:d6:98:14:30:
6d:f3:f1:29:63:0d:2e:dc:32:f6:18:b8:d9:45:9f:34:b8:ee:
87:6f:94:6d:f8:cb:94:74:2c:be:b6:e5:23:bf:ab:67:f0:33:
61:11:39:48:f6:b9:03:0b:61:77:12:90:a1:63:77:7d:9d:7a:
91:a6:a2:1c:89:1b:a8:a9:66:a2:bd:69:bb:ab:7d:14:58:4b:
1c:ed:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:51 2025 by rpki-client