Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File: viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier: Qpg1qH8KnfjsLUXpGOVs5Bg/cP+a3uHITS1Yq2zNp4o=
Subject key identifier: D4:3C:C2:90:F5:CB:F6:C2:FA:57:68:2D:37:F1:7D:BD:8D:40:06:E7
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer: /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial: 019923A02795CF0B6F3D9BA9AD2F03460125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number: 1385
Signing time: Sun 07 Sep 2025 10:02:02 +0000
Manifest this update: Sun 07 Sep 2025 10:02:02 +0000
Manifest next update: Mon 08 Sep 2025 10:02:02 +0000
Files and hashes: 1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: oM4WX8+81tsVNW3EGHI1OnUloLzLTPF40UpUSPQVd7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:27:95:cf:0b:6f:3d:9b:a9:ad:2f:03:46:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
Validity
Not Before: Sep 7 10:02:02 2025 GMT
Not After : Sep 8 10:02:02 2025 GMT
Subject: CN=d43cc290f5cbf6c2fa57682d37f17dbd8d4006e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:f2:90:07:44:a2:df:4c:46:01:a4:a6:8c:
9f:cc:72:59:6a:24:d0:ba:ec:dd:01:a6:7c:eb:77:
d7:5f:d2:b8:74:9b:c4:4f:1d:8f:7f:59:58:b5:74:
e5:ce:b5:f3:00:f0:c9:e2:22:55:c1:5c:a9:ec:e9:
b1:8a:05:bb:cf:79:7b:e0:fa:67:0c:a6:27:2a:d8:
2a:0e:b1:14:36:e4:a2:58:20:3e:7a:4d:4a:a6:4c:
84:cc:fa:b0:14:bb:b7:17:0f:44:78:a4:7d:3d:66:
41:5e:45:63:4d:93:07:71:d5:41:74:c3:24:d5:b2:
9f:06:d4:e1:47:26:8f:f0:0b:7f:c5:e1:37:f6:fa:
a9:0b:61:e6:76:6e:cc:2b:77:05:90:91:36:8c:ea:
b5:ed:8c:63:d4:d8:ca:54:ff:de:67:8a:c6:63:8f:
fc:82:e3:8f:5a:6e:df:a6:df:7c:45:24:fb:c8:30:
37:1b:77:d5:73:7c:6b:ae:6f:6b:6d:71:42:9e:f2:
be:f9:98:ab:4a:0b:7d:d2:47:67:10:a1:3b:9d:2e:
6b:49:28:52:a7:19:ea:9a:9a:1b:a0:01:9b:78:93:
0a:4e:24:6c:e4:f2:33:56:ec:b4:43:1f:94:78:e2:
44:71:e6:16:0f:12:ba:62:90:bf:e2:39:bb:b8:98:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3C:C2:90:F5:CB:F6:C2:FA:57:68:2D:37:F1:7D:BD:8D:40:06:E7
X509v3 Authority Key Identifier:
keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:42:d8:41:71:62:d4:5b:db:a5:a8:74:65:f2:ca:97:c7:df:
4f:ce:d8:11:5f:2f:9c:b0:b6:af:d0:6f:68:b0:9c:b4:4a:92:
3d:01:9e:36:e5:00:f9:f1:ae:9e:d8:a9:bb:61:1d:ab:fd:0b:
9d:39:51:ec:2a:51:8f:85:f3:25:c3:09:ac:27:55:0d:08:53:
6e:d4:ec:c6:a1:09:bb:13:d6:b0:b1:a6:2c:f5:fe:4a:a3:c3:
8b:27:98:76:bc:5f:11:e5:e9:13:35:3c:17:33:42:25:31:cb:
af:30:df:0e:e7:3f:b6:9c:d6:f0:47:77:11:b3:6b:2e:14:6f:
3a:f7:df:2b:e9:4b:37:e5:be:54:1c:7a:b1:d8:40:88:39:7f:
0a:4c:9e:13:05:df:a1:40:df:b7:54:75:06:2e:fc:e7:46:56:
1f:0f:f3:1b:8c:46:27:4a:31:b6:06:8f:27:fd:cf:c9:a8:17:
9a:ae:3c:55:d9:e6:72:87:45:b3:7d:db:4a:e7:15:ba:15:a2:
58:db:8b:b2:9a:19:ab:9f:45:20:6c:b2:a6:0a:76:09:38:71:
08:a8:74:62:fd:96:4e:91:4d:06:3a:b3:45:07:bd:57:26:38:
f0:e3:b3:8e:1b:91:83:7e:e1:ae:53:c5:68:68:c6:40:17:99:
d0:1e:ee:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoCeVzwtvPZuprS8DRgElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmNhYzc4ZDc1ZGIxOGU3M2NhZTAzZTFhYmU1OTg3NDk1
MjkzMWEwHhcNMjUwOTA3MTAwMjAyWhcNMjUwOTA4MTAwMjAyWjAzMTEwLwYDVQQD
EyhkNDNjYzI5MGY1Y2JmNmMyZmE1NzY4MmQzN2YxN2RiZDhkNDAwNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkXykAdEot9MRgGkpoyfzHJZaiTQ
uuzdAaZ863fXX9K4dJvETx2Pf1lYtXTlzrXzAPDJ4iJVwVyp7OmxigW7z3l74Ppn
DKYnKtgqDrEUNuSiWCA+ek1KpkyEzPqwFLu3Fw9EeKR9PWZBXkVjTZMHcdVBdMMk
1bKfBtThRyaP8At/xeE39vqpC2Hmdm7MK3cFkJE2jOq17Yxj1NjKVP/eZ4rGY4/8
guOPWm7fpt98RST7yDA3G3fVc3xrrm9rbXFCnvK++ZirSgt90kdnEKE7nS5rSShS
pxnqmpoboAGbeJMKTiRs5PIzVuy0Qx+UeOJEceYWDxK6YpC/4jm7uJirhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ8wpD1y/bC+ldoLTfxfb2NQAbnMB8GA1UdIwQY
MBaAFL4srHjXXbGOc8rgPhq+WYdJUpMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDct
ODQyMDM4MTI0NzYzLzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDctODQyMDM4MTI0NzYz
LzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0LYQXFi
1Fvbpah0ZfLKl8ffT87YEV8vnLC2r9BvaLCctEqSPQGeNuUA+fGuntipu2Edq/0L
nTlR7CpRj4XzJcMJrCdVDQhTbtTsxqEJuxPWsLGmLPX+SqPDiyeYdrxfEeXpEzU8
FzNCJTHLrzDfDuc/tpzW8Ed3EbNrLhRvOvffK+lLN+W+VBx6sdhAiDl/CkyeEwXf
oUDft1R1Bi7850ZWHw/zG4xGJ0oxtgaPJ/3PyagXmq48VdnmcodFs33bSucVuhWi
WNuLspoZq59FIGyypgp2CThxCKh0Yv2WTpFNBjqzRQe9VyY48OOzjhuRg37hrlPF
aGjGQBeZ0B7uRg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:42 2025 by rpki-client