Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: yty6D+IRcIBICVLVIVHqAQE1F0XViDBuNmsjRBIM+1I=
Subject key identifier: 0F:AD:21:87:5A:06:64:CC:2E:92:B8:7E:B4:04:66:60:EF:C0:87:17
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 019875D15E65A73A518AA72E788965EC7D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 0163
Signing time: Mon 04 Aug 2025 16:01:51 +0000
Manifest this update: Mon 04 Aug 2025 16:01:51 +0000
Manifest next update: Tue 05 Aug 2025 16:01:51 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: DQumrxERhGbjwkleuXYS5uXUEWZG2v8TltKIVtIPTfU=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:5e:65:a7:3a:51:8a:a7:2e:78:89:65:ec:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Aug 4 16:01:51 2025 GMT
Not After : Aug 5 16:01:51 2025 GMT
Subject: CN=0fad21875a0664cc2e92b87eb4046660efc08717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:36:2a:ce:97:5a:92:38:1e:a0:2d:89:a7:
16:52:8d:4d:6a:6a:ba:4f:64:b5:d4:56:30:c3:6a:
50:52:4d:08:14:bf:9f:e8:e1:40:1a:7b:4e:67:92:
58:25:89:a4:a8:80:be:e3:46:98:cb:69:08:79:01:
14:7c:df:56:2c:35:a3:d6:6b:b0:5d:d3:5e:0a:f2:
cb:53:d2:5e:72:4b:27:63:40:86:ac:88:62:22:24:
54:e6:91:51:87:95:09:15:7a:93:97:16:a3:90:fb:
bc:12:b3:58:ec:d1:24:78:f9:3d:a9:cb:f0:33:82:
0b:3a:c0:5c:ac:d2:b1:00:26:93:29:d0:b8:b2:ee:
6d:e0:f4:15:c4:c0:81:6d:54:8e:b2:a8:45:7f:db:
fd:28:af:f6:1e:d8:47:14:9b:5f:bc:61:33:c1:86:
73:b1:75:5f:0c:80:bd:7a:aa:a4:67:a8:50:67:39:
df:f4:73:fa:ae:76:be:5a:68:a4:8a:51:cc:54:f2:
6e:37:88:79:b6:47:6f:7f:6e:5f:99:5f:73:3a:e7:
b4:80:78:2e:1b:ab:a8:20:a5:49:33:0b:bf:a7:c9:
7d:82:5a:2f:8f:ca:ea:91:35:37:df:0b:c2:3c:df:
fe:6a:15:ac:80:9e:b9:71:ee:88:21:4d:b4:2b:a4:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:21:87:5A:06:64:CC:2E:92:B8:7E:B4:04:66:60:EF:C0:87:17
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:03:8c:c3:cd:5a:8a:4f:d8:40:a6:1e:a9:6e:33:c3:ac:
56:8c:ed:b1:6b:07:df:b7:7c:4e:96:18:51:11:a6:f7:ab:51:
ca:43:03:6a:b7:3a:ca:20:ab:e6:fe:f7:94:fe:c3:f2:17:1d:
e3:fd:59:31:fc:92:aa:0a:e8:b0:5c:b6:0e:8b:0f:ef:0e:cb:
27:23:f8:a8:db:42:50:96:fc:2b:30:32:b1:f9:6f:e4:c0:76:
4b:78:58:70:ac:43:0a:8c:91:46:d9:f8:84:1d:7b:17:55:06:
ea:f5:0d:8a:af:c8:5b:65:6a:c6:00:7b:b1:b7:5f:0c:11:04:
a8:cf:2b:d2:81:e3:be:ba:1a:18:6a:20:1b:7a:e9:2c:f7:31:
07:03:9f:27:ba:28:a2:c9:3a:8d:b9:7a:f3:a7:8f:3a:78:9e:
a8:82:c8:30:a1:b8:62:17:8d:fe:98:d8:b9:3c:04:0b:0c:49:
81:38:97:c3:4a:ea:39:11:68:34:72:1e:79:31:b7:e8:f7:c4:
5d:ec:31:34:ac:c4:86:c1:2f:8e:da:c4:8c:c1:2a:e1:e8:70:
05:bf:10:ba:59:c7:95:e0:4f:8c:f7:3d:96:4b:3e:19:fa:3e:
f6:4f:e0:94:a7:38:de:da:97:d5:98:ee:70:ba:04:65:77:a4:
fc:a8:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:10 2025 by rpki-client