Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: fGwV8gahjlWsO6B/DShk1YKZkKJXAEdtr9cMF/+VLWI=
Subject key identifier: 5D:76:4C:2B:6C:C1:CB:B2:C8:C3:19:FC:75:08:53:BA:14:D1:DD:67
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 0198D65F3356D0603BE073873DDA774A3556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 0195
Signing time: Sat 23 Aug 2025 10:00:19 +0000
Manifest this update: Sat 23 Aug 2025 10:00:19 +0000
Manifest next update: Sun 24 Aug 2025 10:00:19 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: OM60KYtoFWka7B4ZSBi0mz3OU+uaIf3gND1vGia3CdE=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:33:56:d0:60:3b:e0:73:87:3d:da:77:4a:35:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Aug 23 10:00:19 2025 GMT
Not After : Aug 24 10:00:19 2025 GMT
Subject: CN=5d764c2b6cc1cbb2c8c319fc750853ba14d1dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:4a:2c:dc:a4:42:61:94:ef:35:1b:6b:1f:
0f:c1:22:e5:29:05:24:c8:fd:ea:44:9d:87:51:2b:
9b:5a:2d:44:34:80:7c:b3:eb:89:10:9a:63:19:7d:
27:07:d7:de:34:64:b9:b5:b3:01:f7:d8:f9:e0:c6:
9b:2c:15:f4:13:1b:f7:5e:df:46:c3:f0:75:4e:4f:
61:06:c6:16:09:3e:97:75:4b:71:ce:96:c0:bd:49:
48:50:e5:dd:7d:e3:4a:ef:66:e9:d0:7f:a7:0e:d2:
54:9a:c6:1e:1b:2f:ae:66:8c:b1:ef:27:f3:d1:6f:
fd:c3:97:a5:bf:f8:a8:b8:ba:67:d3:df:ba:8a:36:
ad:f0:83:05:bc:6a:a9:6e:f5:f3:f8:06:b3:7e:84:
80:59:af:f1:25:6c:5b:a4:41:5a:28:56:30:82:3c:
2f:bb:39:a6:d4:64:c3:39:93:e2:01:1b:00:35:1f:
e8:da:f6:8c:1e:5d:ff:26:55:97:11:04:f2:06:25:
21:2b:ce:78:2f:77:96:40:16:1f:0f:a3:8b:66:10:
b0:37:61:36:3f:6d:a6:39:e3:9a:5c:76:33:f6:0d:
7b:ce:c1:7b:c4:f8:2e:f5:75:cf:bf:01:a2:42:13:
32:b3:6b:83:bf:df:53:11:0b:2d:49:37:1e:ea:43:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:4C:2B:6C:C1:CB:B2:C8:C3:19:FC:75:08:53:BA:14:D1:DD:67
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:8b:2a:55:78:69:11:b3:32:78:d0:75:91:61:0f:40:f7:
1a:08:10:83:73:fa:e7:54:01:5e:53:76:37:96:e6:92:97:80:
25:a5:9d:56:63:8b:fc:ee:62:a5:61:ae:14:55:db:d4:48:a6:
c3:7c:b9:d8:d3:97:15:1c:25:6e:4c:c1:c7:96:64:2f:ce:ee:
fa:d8:6f:ea:24:43:4d:ba:f8:93:63:77:44:64:48:68:d7:f1:
51:1a:69:f3:ba:be:92:4a:22:d6:97:c9:c1:df:ec:3b:66:e2:
19:c0:a0:53:de:aa:b2:7c:df:39:05:ff:62:17:3b:ac:30:8d:
1f:f3:73:23:02:48:63:b0:77:ab:3c:37:24:1e:76:06:ae:32:
af:97:2d:83:6d:98:b7:92:16:a1:ec:a2:76:6a:a0:42:14:18:
b4:29:a4:5c:b9:2d:7b:77:d0:0a:81:e2:99:4f:b3:17:15:ec:
11:d7:30:65:69:2e:e1:ed:0b:e6:0b:e9:76:0f:93:ab:28:16:
9e:e5:cb:b0:32:c6:76:45:ff:36:d4:34:b6:c3:28:cb:02:dd:
4c:44:51:a8:48:68:5e:fc:db:ba:4b:fe:bd:eb:23:da:d6:86:
40:0e:9f:64:22:22:7d:ce:99:f7:22:be:65:f7:2b:fb:63:3e:
0e:ef:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:41 2025 by rpki-client