Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
File: viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json)
Hash identifier: 4t0zlxGSmZv6HpnyXTvw40frwlY9t4VMCjRomOboupc=
Subject key identifier: 31:D2:16:6A:04:21:2F:3B:FB:A4:B5:60:F1:90:25:13:D7:B9:DE:DF
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial: 01976BF487C0F5ED7EC78D1B665075FAACC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
Manifest number: 12D2
Signing time: Sat 14 Jun 2025 01:01:16 +0000
Manifest this update: Sat 14 Jun 2025 01:01:16 +0000
Manifest next update: Sun 15 Jun 2025 01:01:16 +0000
Files and hashes: 1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=)
2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: zEUqfJ/v++D9DQSjL6Xlc6lNy3Fw3Yg8LUAHIMA+YtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:87:c0:f5:ed:7e:c7:8d:1b:66:50:75:fa:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Validity
Not Before: Jun 14 01:01:16 2025 GMT
Not After : Jun 15 01:01:16 2025 GMT
Subject: CN=31d2166a04212f3bfba4b560f1902513d7b9dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:c3:d7:2f:48:b8:89:f9:5d:01:28:a6:09:
1f:97:bb:e9:96:64:3a:f0:03:71:54:d9:96:57:47:
23:59:f2:95:ba:dc:d0:89:f7:e9:c0:15:57:36:91:
3b:c9:ae:68:7c:91:04:76:0a:7a:e2:f7:79:6e:45:
fe:c2:da:a2:90:6a:0e:93:da:1c:eb:67:0e:a7:5e:
90:fe:30:58:d9:c5:09:4b:7e:76:3e:47:31:fa:76:
24:b7:22:d6:7e:d2:25:c3:66:ff:da:4e:a1:9e:ec:
ea:50:6e:ef:ba:f6:1d:da:46:f0:42:88:7c:79:71:
b1:f0:4a:a2:6c:71:e1:db:56:a2:50:52:38:37:20:
e5:1b:6c:ff:ec:c4:f5:b7:ad:a6:b3:33:2b:70:14:
c7:f6:b6:b3:5f:7d:88:8a:ff:28:99:2b:ae:86:d4:
8c:4b:20:13:4a:ff:4d:e5:bb:7a:ff:a3:c3:02:e6:
50:c4:44:29:10:3b:db:91:84:10:e9:ca:0b:6b:62:
a3:da:7f:31:0e:3a:dc:ad:14:11:28:79:3d:5d:f4:
0b:d5:0b:d1:d7:16:ff:74:ce:75:9c:6a:a9:48:b8:
19:56:b4:c5:1e:80:da:1b:6a:c8:e1:77:6b:38:ef:
2d:f2:65:02:ef:47:28:af:4d:1b:8a:1c:a1:3d:88:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:16:6A:04:21:2F:3B:FB:A4:B5:60:F1:90:25:13:D7:B9:DE:DF
X509v3 Authority Key Identifier:
keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c4:34:c4:a9:7d:9e:1e:03:9e:f1:eb:3d:f4:67:a6:ef:c3:
58:34:34:18:d6:49:08:1f:ea:bf:61:d4:61:93:56:39:bb:ff:
de:86:fd:23:67:b0:c6:95:c0:46:cd:16:ec:74:9f:7e:2e:c0:
f6:df:1b:5f:e3:c5:23:a1:32:f4:94:c7:f8:22:fc:83:a7:78:
03:fd:39:62:e0:89:36:3c:ad:f9:b4:e3:35:97:16:12:3c:2f:
4e:02:75:6c:f3:1f:a4:ca:6a:e9:02:bc:c1:a9:34:e4:69:95:
58:e7:ff:86:11:cd:01:f4:a7:e4:76:97:c2:c5:30:ec:68:a4:
18:05:d4:36:06:c3:63:49:59:5c:e6:09:4a:a3:af:5d:0c:1f:
26:49:6a:0f:89:f1:1b:10:f4:98:ea:3b:54:88:2e:57:59:8f:
ae:3a:ea:51:52:55:10:9b:bb:a9:93:95:bd:a4:87:f8:28:ec:
fc:69:fd:9a:44:eb:93:cb:8f:8b:ae:8f:d3:86:7d:77:c6:aa:
40:68:09:60:54:6e:99:61:0f:4f:51:79:02:62:4a:f7:a3:f9:
a7:a0:c5:36:21:ea:eb:29:48:8d:72:8d:10:7f:20:07:e6:21:
91:43:3c:4f:53:1e:35:65:08:15:c6:14:54:5f:a4:b3:29:3f:
28:f5:fb:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9IfA9e1+x40bZlB1+qzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMjU0ZTFiNWNkNDUyODY4ZGYyZTE5OTJkODhkMDc2MDlm
YzRjOTIwHhcNMjUwNjE0MDEwMTE2WhcNMjUwNjE1MDEwMTE2WjAzMTEwLwYDVQQD
EygzMWQyMTY2YTA0MjEyZjNiZmJhNGI1NjBmMTkwMjUxM2Q3YjlkZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RPD1y9IuIn5XQEopgkfl7vplmQ6
8ANxVNmWV0cjWfKVutzQiffpwBVXNpE7ya5ofJEEdgp64vd5bkX+wtqikGoOk9oc
62cOp16Q/jBY2cUJS352Pkcx+nYktyLWftIlw2b/2k6hnuzqUG7vuvYd2kbwQoh8
eXGx8EqibHHh21aiUFI4NyDlG2z/7MT1t62mszMrcBTH9razX32Iiv8omSuuhtSM
SyATSv9N5bt6/6PDAuZQxEQpEDvbkYQQ6coLa2Kj2n8xDjrcrRQRKHk9XfQL1QvR
1xb/dM51nGqpSLgZVrTFHoDaG2rI4XdrOO8t8mUC70cor00bihyhPYgd7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHSFmoEIS87+6S1YPGQJRPXud7fMB8GA1UdIwQY
MBaAFL4lThtc1FKGjfLhmS2I0HYJ/EySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDIt
NDJjZjVkNTFlNDE4LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDItNDJjZjVkNTFlNDE4
LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMQ0xKl9
nh4DnvHrPfRnpu/DWDQ0GNZJCB/qv2HUYZNWObv/3ob9I2ewxpXARs0W7HSffi7A
9t8bX+PFI6Ey9JTH+CL8g6d4A/05YuCJNjyt+bTjNZcWEjwvTgJ1bPMfpMpq6QK8
wak05GmVWOf/hhHNAfSn5HaXwsUw7GikGAXUNgbDY0lZXOYJSqOvXQwfJklqD4nx
GxD0mOo7VIguV1mPrjrqUVJVEJu7qZOVvaSH+Cjs/Gn9mkTrk8uPi66P04Z9d8aq
QGgJYFRumWEPT1F5AmJK96P5p6DFNiHq6ylIjXKNEH8gB+YhkUM8T1MeNWUIFcYU
VF+ksyk/KPX7/A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:37 2025 by rpki-client