Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
File: viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json)
Hash identifier: aJwfCtCOb6Q7GSsaARCwIkbfMO6KMh83tpEJfXvnU7U=
Subject key identifier: 55:63:42:99:56:0B:8B:4C:7E:66:CB:37:FA:88:A0:E3:0B:22:78:7D
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial: 0197B93418F4D0FCDB6C532EC58B5670AF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
Manifest number: 12FA
Signing time: Sun 29 Jun 2025 01:01:28 +0000
Manifest this update: Sun 29 Jun 2025 01:01:28 +0000
Manifest next update: Mon 30 Jun 2025 01:01:28 +0000
Files and hashes: 1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=)
2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: KB0AW9BfMo6pZ5U5b4bczKBb7zVeJfV01+S0T7kslXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:18:f4:d0:fc:db:6c:53:2e:c5:8b:56:70:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Validity
Not Before: Jun 29 01:01:28 2025 GMT
Not After : Jun 30 01:01:28 2025 GMT
Subject: CN=55634299560b8b4c7e66cb37fa88a0e30b22787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:31:c8:04:2d:d1:6b:26:c2:79:66:41:33:
2f:83:d3:2b:39:f3:c7:8c:fa:34:52:cf:c1:51:ad:
05:b4:50:be:37:f0:25:da:92:de:78:ac:5d:f3:16:
32:ee:0a:b8:4b:f2:86:bf:a0:93:85:01:c4:c6:e7:
11:e8:85:41:4b:15:76:14:28:47:55:fc:e9:b3:cb:
e0:a9:18:53:1a:04:f4:b7:99:0d:69:69:47:a6:f8:
80:fd:fe:bd:e6:9c:10:7b:df:e7:c7:e8:5b:fa:91:
bc:ea:67:8a:9f:39:39:3a:a6:0e:7b:f1:f1:7f:d1:
78:0c:27:ce:5f:8a:34:7c:5b:f6:80:60:a2:fc:35:
63:b7:78:7e:fa:db:64:3b:af:c8:d5:0b:43:ae:4e:
6a:b5:24:4c:b9:a0:63:cb:d8:19:e5:0a:c5:8b:d2:
13:69:d9:91:37:db:cb:bc:d8:b6:49:1d:5d:ae:30:
cb:2f:23:27:9a:a1:8a:47:fc:c3:f0:fb:d4:d7:f9:
0e:7a:22:09:0a:62:ee:6a:fd:c5:f7:49:3b:00:8e:
0b:09:c6:e9:3d:61:03:9a:f0:ff:82:65:56:20:b5:
26:f4:ba:e1:cf:c1:8d:66:6e:df:06:6f:74:17:42:
e4:5c:bd:93:75:f7:50:ce:c3:63:fa:f1:d4:9c:ae:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:42:99:56:0B:8B:4C:7E:66:CB:37:FA:88:A0:E3:0B:22:78:7D
X509v3 Authority Key Identifier:
keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:82:17:89:30:02:4b:42:b7:1f:b4:78:5a:57:f2:7f:a3:80:
bf:68:b4:25:24:a6:09:bd:d8:9e:a0:ae:63:1d:2c:0d:d2:6f:
b2:47:c8:90:0d:94:07:e2:79:72:49:c0:16:3a:d7:08:00:e6:
d7:54:28:c5:e0:ee:a5:59:75:c4:dd:8f:9c:f8:e2:a0:fe:c1:
80:69:bf:70:51:2c:8b:d5:f0:7f:b0:76:5c:82:5a:61:84:4d:
8c:da:58:ec:44:39:8f:38:ad:0f:b1:8b:10:5c:5a:d1:89:3d:
81:eb:55:c0:7e:54:c0:f0:ad:83:d2:60:24:9c:66:82:45:db:
33:c1:26:28:b6:1f:bb:3d:d4:0d:c4:9c:15:7d:0f:b6:cf:03:
45:0f:ac:1e:8c:cf:50:8e:87:e0:f8:c8:26:23:9b:b6:c1:0a:
95:89:00:89:2a:0c:e8:75:ff:81:80:2c:93:1a:97:8e:4d:2d:
ac:b4:02:4b:18:db:cc:cb:43:61:a5:bd:0a:bf:f5:19:30:88:
bc:7b:b2:73:13:22:40:9a:b0:63:22:b0:dd:5e:c7:94:11:d8:
0d:e8:9e:06:3a:98:4e:0e:49:9f:f2:4f:2e:0e:9c:da:14:f3:
4d:0d:58:63:93:d3:aa:a3:ee:5a:39:0e:8a:51:85:2a:5e:c7:
c4:14:f2:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5NBj00PzbbFMuxYtWcK8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMjU0ZTFiNWNkNDUyODY4ZGYyZTE5OTJkODhkMDc2MDlm
YzRjOTIwHhcNMjUwNjI5MDEwMTI4WhcNMjUwNjMwMDEwMTI4WjAzMTEwLwYDVQQD
Eyg1NTYzNDI5OTU2MGI4YjRjN2U2NmNiMzdmYTg4YTBlMzBiMjI3ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXYxyAQt0WsmwnlmQTMvg9MrOfPH
jPo0Us/BUa0FtFC+N/Al2pLeeKxd8xYy7gq4S/KGv6CThQHExucR6IVBSxV2FChH
Vfzps8vgqRhTGgT0t5kNaWlHpviA/f695pwQe9/nx+hb+pG86meKnzk5OqYOe/Hx
f9F4DCfOX4o0fFv2gGCi/DVjt3h++ttkO6/I1QtDrk5qtSRMuaBjy9gZ5QrFi9IT
admRN9vLvNi2SR1drjDLLyMnmqGKR/zD8PvU1/kOeiIJCmLuav3F90k7AI4LCcbp
PWEDmvD/gmVWILUm9Lrhz8GNZm7fBm90F0LkXL2TdfdQzsNj+vHUnK6jbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVjQplWC4tMfmbLN/qIoOMLInh9MB8GA1UdIwQY
MBaAFL4lThtc1FKGjfLhmS2I0HYJ/EySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDIt
NDJjZjVkNTFlNDE4LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDItNDJjZjVkNTFlNDE4
LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYIXiTAC
S0K3H7R4Wlfyf6OAv2i0JSSmCb3YnqCuYx0sDdJvskfIkA2UB+J5cknAFjrXCADm
11QoxeDupVl1xN2PnPjioP7BgGm/cFEsi9Xwf7B2XIJaYYRNjNpY7EQ5jzitD7GL
EFxa0Yk9getVwH5UwPCtg9JgJJxmgkXbM8EmKLYfuz3UDcScFX0Pts8DRQ+sHozP
UI6H4PjIJiObtsEKlYkAiSoM6HX/gYAskxqXjk0trLQCSxjbzMtDYaW9Cr/1GTCI
vHuycxMiQJqwYyKw3V7HlBHYDeieBjqYTg5Jn/JPLg6c2hTzTQ1YY5PTqqPuWjkO
ilGFKl7HxBTyxw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:55:34 2025 by rpki-client