Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: TDfjY5SHbf4t/+7xuo9g5tQGXgd9zVtM1OULI6N+yDI=
Subject key identifier: 09:71:4D:33:D7:A6:4D:87:F8:B2:D8:85:0C:2F:12:7E:BA:03:CC:72
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 0199FBEADAA0DBF386E74B621DC01D7381DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 022D
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: b29bjaJqmu9qHWOdXQ3iq06gA2KN/eyLVlbqNqJf7Wk=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:da:a0:db:f3:86:e7:4b:62:1d:c0:1d:73:81:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=09714d33d7a64d87f8b2d8850c2f127eba03cc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:37:c3:6b:83:6e:66:57:ca:53:fe:d5:8e:
10:30:42:f9:78:a3:2a:57:27:d7:31:dd:82:0c:60:
e7:95:b5:95:7c:6c:f0:84:4f:8f:22:90:b6:92:06:
ff:03:8b:64:0b:dc:9a:a3:0e:8e:78:07:0a:2f:ae:
98:bb:68:f4:4e:91:b8:fa:b8:1f:57:0e:ae:62:6e:
05:45:81:75:d2:1e:ca:f6:63:9c:7c:cb:4e:cb:4f:
f4:8e:f0:12:5b:43:a3:8b:36:dd:e7:8a:d5:46:ac:
ca:77:41:9f:10:c1:15:47:13:25:e6:8d:84:69:df:
09:a9:2e:ee:81:f5:5c:26:90:3d:55:05:3e:85:e6:
90:f3:36:f4:c7:83:a2:61:23:1a:e6:c0:84:e9:c9:
a5:9c:6e:53:53:3b:83:57:16:1c:84:7e:e4:ba:d7:
56:6a:87:64:08:18:ad:20:ca:0a:d0:ba:93:d9:8f:
88:62:dc:09:c2:26:04:54:e1:43:b8:16:9c:82:fd:
78:38:a5:29:26:da:74:36:71:74:17:bc:fa:03:3f:
06:89:ab:f8:db:0b:31:4e:b3:4b:98:59:d9:49:54:
74:15:fd:93:bb:9b:a8:7d:39:1f:e7:d3:ed:93:bf:
5a:97:9d:cf:31:e2:6f:89:98:4f:e4:ee:51:f6:8d:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:4D:33:D7:A6:4D:87:F8:B2:D8:85:0C:2F:12:7E:BA:03:CC:72
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:bd:f8:1a:a2:2c:c5:16:91:2f:c9:09:5f:c0:01:2e:cb:
c7:8e:b5:22:37:b5:3e:aa:9f:fe:00:38:c7:94:36:e1:c5:c8:
18:c8:67:84:80:f5:a3:72:ed:e5:77:47:d8:16:24:9b:e7:b2:
57:fe:6a:83:99:34:75:d2:8d:70:e3:fa:a1:58:59:c9:e7:e0:
8b:f3:c9:45:1d:9c:d0:7b:3e:06:fc:18:df:36:62:2b:8a:21:
29:07:a1:1e:d8:2a:e8:e1:89:07:f1:19:42:5b:de:c2:ce:0e:
74:05:ce:06:4c:2d:f4:1b:a3:f6:be:07:12:65:36:f7:90:c7:
63:1c:10:6c:4e:f3:58:10:49:87:af:77:8a:ce:d1:15:4c:d1:
79:f4:08:8c:7b:e5:fb:e8:6e:49:ba:08:b9:63:6f:86:83:49:
d3:8c:50:c4:99:3e:f3:64:67:08:c3:03:74:bd:c1:da:1f:b8:
ec:e5:76:ea:cf:33:6a:1c:82:d1:4d:a3:c4:a8:41:0e:fc:b7:
3e:40:e5:82:cd:24:63:f9:96:ef:34:f3:7e:f1:23:09:e2:67:
29:5c:82:7c:c0:7e:75:ef:d1:7e:61:d0:3f:9a:60:23:8e:ef:
98:4d:fe:db:36:3d:a1:76:32:bd:18:1e:04:9d:a0:81:46:ad:
93:e6:50:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:58 2025 by rpki-client