Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File: viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier: sGWNWNgVrSeribkfleZE5xRXPYUJjSf6h0OM8cXbzpU=
Subject key identifier: 02:06:B6:BC:44:03:B3:E5:5A:4B:55:F9:B9:26:34:BC:9A:E7:45:4A
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer: /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial: 019A71B7744579878F8E8FFDDE39A1AA68A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number: 1432
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: l+mC3iEQKQuuo4uLdtsF3Mkgw1Ft4hXRkEWOjh9/RTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:74:45:79:87:8f:8e:8f:fd:de:39:a1:aa:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=0206b6bc4403b3e55a4b55f9b92634bc9ae7454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:35:d9:a4:53:5c:0e:cd:df:0c:b4:74:1b:
be:88:e4:98:25:4b:54:53:1b:60:a9:a2:dd:ed:25:
f3:bc:a5:1b:d6:2a:0b:24:a7:82:09:ab:05:64:52:
1e:63:d3:46:56:78:4a:49:38:2e:73:10:f5:46:cc:
12:3d:d1:b8:87:28:d1:f1:e5:e7:c1:56:19:d8:a8:
14:06:4b:16:3a:11:b4:46:df:bd:cd:1a:3e:5b:e6:
1b:9b:17:99:3d:13:1b:b5:63:93:6f:c2:10:d1:8f:
3d:05:f9:d2:dd:12:89:a0:ec:c9:30:d9:f5:42:b0:
98:bc:c0:0a:0b:2b:f7:80:b4:97:8e:e0:c7:af:a8:
0f:f5:2b:ff:e5:28:7e:c6:f4:a8:e3:28:0d:a1:a5:
fb:6e:d0:31:73:c9:8b:9a:1a:ec:fe:23:f7:41:7f:
63:ec:e2:44:5e:7e:04:f1:e7:2d:a7:72:60:f1:2d:
d8:19:e4:e0:46:ca:51:9e:f9:da:8d:4f:84:db:9b:
42:61:f8:cd:41:06:62:81:a6:79:42:ee:d9:22:f4:
9a:34:d9:4e:de:95:e6:bc:d1:4c:7a:6a:4c:e2:37:
a7:5d:85:09:30:8f:d8:eb:cb:65:f3:8f:ff:64:ed:
8f:31:18:75:94:90:f6:56:92:81:47:eb:56:31:68:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:B6:BC:44:03:B3:E5:5A:4B:55:F9:B9:26:34:BC:9A:E7:45:4A
X509v3 Authority Key Identifier:
keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d9:47:a2:64:c8:e0:6b:4e:c0:fa:f8:33:20:45:35:b1:8b:
46:8d:5f:f7:40:80:49:cb:be:e8:40:9c:d2:e8:9e:2b:38:2b:
36:fa:63:24:cc:2c:a8:08:88:bb:52:eb:c5:f2:98:0c:15:40:
8b:c2:99:a0:ee:83:09:e8:a4:49:ab:83:46:53:fe:e8:cc:ff:
f0:df:d0:0b:6e:66:6d:8c:ae:d1:04:fe:ee:18:8a:e4:e1:8e:
73:6b:e2:5d:8b:e1:c3:a0:66:0d:bd:74:62:3d:e0:5e:d4:e3:
dd:47:a4:ca:12:8b:60:06:e4:e7:19:cd:45:d8:bb:37:d6:c6:
e4:37:00:b4:24:9a:4b:ad:6b:86:9a:14:61:f5:99:d9:e8:44:
ff:e0:a4:25:bd:40:44:78:9c:c8:d4:68:81:b9:a1:4c:78:50:
ba:73:f5:b9:06:0d:7c:24:73:76:30:a2:b3:bd:c2:ec:55:34:
96:f0:24:d3:77:04:53:a1:b4:d8:f6:e9:67:1a:6a:f8:5e:bb:
c3:b4:8e:56:e2:69:49:05:40:d9:d4:20:7b:97:f1:ab:d0:60:
ac:2d:9b:af:5e:59:28:40:38:2e:f9:37:b4:18:db:1b:52:c2:
98:fe:a8:c9:fb:1a:32:e9:e1:0b:2a:cd:d4:2c:60:ff:02:f5:
84:89:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:57 2025 by rpki-client