Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: injFgLP535JNYKOTqe0/y5GTxTfK0WJ/Zz5UxNRwsgs=
Subject key identifier: 8A:9F:50:48:E3:B9:1B:5D:95:00:33:F8:BE:CE:12:21:BE:82:31:29
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 01984776D700BBC92B44C44D0EF3D7922338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 014B
Signing time: Sat 26 Jul 2025 16:00:27 +0000
Manifest this update: Sat 26 Jul 2025 16:00:27 +0000
Manifest next update: Sun 27 Jul 2025 16:00:27 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: H81yQyoOKlVKEp2RZNRcwDffsq8qQxgmmjmijM8r+Ng=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d7:00:bb:c9:2b:44:c4:4d:0e:f3:d7:92:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Jul 26 16:00:27 2025 GMT
Not After : Jul 27 16:00:27 2025 GMT
Subject: CN=8a9f5048e3b91b5d950033f8bece1221be823129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:86:51:4f:5b:f2:90:3f:fc:d1:fd:1b:f3:
f3:33:4a:1c:5a:a8:aa:d5:d5:5e:c9:38:ee:21:6c:
ff:7f:b8:0a:bc:86:85:4f:9c:bb:9a:fb:d6:d1:ad:
fb:85:6e:da:27:9c:fa:c2:7f:71:d4:2f:8a:df:25:
c3:bd:9d:df:33:09:49:a0:d8:3e:47:2e:e1:5b:9c:
5a:c8:f0:21:da:ec:65:0c:5f:70:a1:b5:f7:c4:d3:
56:70:36:85:09:2e:16:d0:58:c9:b5:f7:b0:e2:21:
b9:3d:d2:70:68:e2:da:fc:c4:e7:56:41:8c:72:71:
f8:70:84:c9:8c:b2:8f:a4:80:de:8c:9f:e3:09:0f:
f9:3a:8e:48:65:0e:26:26:a9:89:65:4d:1c:98:88:
78:95:3a:20:eb:8e:30:0b:1b:88:6d:b1:2b:d0:69:
b1:c0:68:9d:9f:3c:19:a0:02:35:99:68:f9:40:3e:
e5:b9:37:bc:89:80:ba:46:01:17:ad:fd:e5:91:78:
59:b2:01:c0:f6:55:c7:7e:df:7b:eb:66:cb:16:d7:
f3:d9:59:95:f0:ff:3f:ec:de:f9:e1:30:e8:16:05:
2d:57:d6:5d:6c:f6:e9:a9:10:50:2a:df:ee:cf:8c:
0e:d2:d9:a0:27:a9:8b:90:6c:eb:69:8c:38:55:7e:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:50:48:E3:B9:1B:5D:95:00:33:F8:BE:CE:12:21:BE:82:31:29
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:8d:7e:96:fe:76:6e:f7:b1:4a:a2:d2:54:92:0c:7e:70:
88:a2:13:63:7d:5d:db:f8:b6:79:78:79:41:1c:06:fb:d2:42:
7a:9a:17:0c:31:ad:ef:af:23:d7:22:ad:05:51:37:0c:8c:cc:
83:8e:83:db:bb:2a:62:b7:5f:57:18:96:84:7b:63:37:b9:18:
aa:71:38:44:93:38:cd:a0:1e:f0:84:2a:e6:d5:e1:ed:02:e9:
57:c4:44:a9:1c:1f:f5:93:12:38:f9:1c:00:5f:9c:16:c4:66:
a8:c3:7b:7c:a6:c3:69:3c:dc:73:5a:2a:aa:9a:77:95:ee:9a:
3f:ca:6b:a0:02:ca:04:ef:2a:33:6c:e0:ed:07:03:e8:88:b7:
8a:a4:ef:44:46:3f:ec:4b:15:f4:ed:73:96:82:d2:23:fd:12:
db:c0:09:9b:09:d5:a7:f5:37:07:29:be:f3:0c:9a:f0:ed:9e:
b0:75:33:58:6b:9c:06:27:7e:cc:a9:b9:01:f1:6c:9e:f6:bb:
2f:66:bb:da:68:6c:5b:12:c2:04:4f:f5:bf:00:79:e3:9d:d2:
bb:d4:be:b8:5a:4a:73:44:eb:11:ab:fe:9a:41:bf:d4:09:b4:
58:9f:eb:c2:81:d6:ec:76:88:60:23:84:c5:64:3d:b0:8b:4e:
9f:8e:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:16:51 2025 by rpki-client