Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: y8koWt/mY4ZWRPM6p6G26fKTP0FlJsQ2IE9v13wJZL8=
Subject key identifier: 93:9A:B5:C2:92:FD:46:18:7D:18:14:10:CA:64:51:45:F3:E6:1A:18
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 019A52D1FAE1A7006448A74304303628870E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 025A
Signing time: Wed 05 Nov 2025 07:01:24 +0000
Manifest this update: Wed 05 Nov 2025 07:01:24 +0000
Manifest next update: Thu 06 Nov 2025 07:01:24 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: MX3fPu/k7pNbERmimDBezHrZJdqXXksSk5i7poa0t/I=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fa:e1:a7:00:64:48:a7:43:04:30:36:28:87:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Nov 5 07:01:24 2025 GMT
Not After : Nov 6 07:01:24 2025 GMT
Subject: CN=939ab5c292fd46187d181410ca645145f3e61a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:9e:7c:71:8b:aa:7a:6f:07:5e:7b:f2:cf:
24:df:45:ee:f4:a8:45:46:23:9e:95:23:61:81:fa:
d0:4c:a0:47:c6:b1:60:34:79:7a:d6:be:c3:40:e8:
84:89:64:7a:a5:ac:7d:7f:4d:5e:7a:a1:3d:6a:2a:
8d:98:e5:22:0c:7d:aa:0a:00:11:54:40:18:e2:a0:
fd:82:11:c1:f1:00:d8:85:9c:2c:b6:45:da:50:a5:
cd:8c:50:21:68:10:d7:97:83:25:8c:e1:d2:9c:c1:
a9:a4:ac:33:bb:bd:c2:98:a0:b7:17:fa:f2:a1:e4:
1d:3f:3f:65:91:e8:bc:fb:6a:a8:a6:6e:d1:4c:ba:
e1:70:d8:24:8d:b1:30:a1:8e:bb:db:53:34:af:07:
ea:ba:fc:46:b8:66:c9:fe:02:2a:9f:48:87:9e:dc:
12:79:dd:2b:0a:8c:48:4d:d4:e9:c4:20:e6:1f:df:
15:e0:fa:c4:21:c6:4d:b6:34:36:42:30:65:88:18:
e9:06:bd:6e:67:de:6b:ed:76:90:aa:92:5d:87:c2:
23:8f:06:7a:cf:88:09:b1:a2:99:35:bf:b4:d3:05:
91:f1:cd:2b:ae:5f:03:d0:e6:82:84:98:4a:d6:33:
f9:90:ce:07:ba:78:91:d8:7e:34:cc:c7:33:d3:a8:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:B5:C2:92:FD:46:18:7D:18:14:10:CA:64:51:45:F3:E6:1A:18
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:89:46:40:80:c0:b8:1e:3d:8f:8e:ad:66:0b:f3:15:33:a5:
50:34:d6:5f:c6:22:b4:1d:a7:61:0f:77:a6:55:39:9e:9f:c0:
4e:02:e3:0e:1c:c6:11:3b:1d:5e:85:e7:e0:2d:c6:f9:40:0e:
b5:e6:c3:2a:42:f7:fd:df:aa:38:5b:17:71:f7:ef:23:3c:05:
a6:03:ce:22:41:45:8e:22:0e:6e:85:b9:af:6c:d1:bb:64:dd:
3f:4f:63:b8:ea:f9:91:e2:f8:d3:f1:52:76:c8:29:a7:8e:17:
05:0f:3f:fb:ab:f9:36:c9:09:14:3f:2e:49:d3:30:6a:65:e4:
d2:45:8a:18:a9:0e:0a:68:88:4c:ef:a2:87:95:5b:f0:1f:63:
04:54:2d:b0:55:29:da:03:a8:c6:3b:2e:f7:e3:13:74:39:98:
f7:b6:3b:da:7d:60:9c:97:c9:4e:85:7c:ae:66:db:32:e0:04:
ec:e2:1e:89:38:81:40:71:c8:8d:57:07:e3:85:7c:7c:f0:e3:
bd:19:aa:45:5f:ed:2f:a8:4c:43:f3:ab:1c:9e:4b:ba:95:2a:
82:75:04:96:b1:03:79:43:7d:9f:c1:03:16:90:53:9f:6c:3f:
9f:3b:fe:a6:5a:fe:ec:7b:30:82:bb:5d:7d:85:8c:a2:ee:91:
ae:11:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:41:19 2025 by rpki-client