Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
File: viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json)
Hash identifier: aXE/ofzFKOSH4E1eAMI2TVJEsQqxYX5mSxC1FjFJr7w=
Subject key identifier: 2E:DD:6A:2D:23:DB:9B:E0:D6:CD:C4:85:A1:01:7F:E5:C4:6B:9B:0F
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial: 019A725C9A13A88CDF684753DE672A9E592B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
Manifest number: 1463
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=)
2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: XJFiELoS4ncnZODtUctfu4UWYOnk0e0K43LyzA7JAjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9a:13:a8:8c:df:68:47:53:de:67:2a:9e:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=2edd6a2d23db9be0d6cdc485a1017fe5c46b9b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:91:e7:0e:84:95:09:d5:65:90:4e:96:5f:
d0:ce:60:30:5a:0a:66:fa:f8:a7:a0:13:9e:e9:74:
a3:6b:c6:79:1a:d7:95:fe:d6:57:d8:d5:fa:cb:d7:
a7:42:76:24:d9:ca:5f:58:b8:1c:fa:b1:fe:36:4a:
1e:6a:93:ee:1d:47:ac:75:1a:6b:47:56:86:00:bc:
53:d8:6c:20:4c:fb:17:88:f5:4d:16:ea:d6:04:09:
58:13:de:5a:a1:be:da:f0:e5:4b:5f:b8:4f:82:45:
eb:81:c6:09:dd:6d:6f:82:b7:82:8a:33:06:e5:6c:
71:3f:65:fc:3f:4e:c8:4d:12:37:ec:2a:0c:57:dd:
0e:ca:93:76:48:58:6d:df:cf:7b:c7:87:a1:b9:28:
18:83:52:aa:b5:3e:01:58:d1:8c:9e:52:7b:30:69:
c3:b2:2e:70:4e:05:0d:83:de:f4:56:5c:e6:25:a9:
e2:13:5d:6b:4e:a8:28:0d:4b:f4:c4:2a:99:73:de:
6a:d1:69:dd:83:cf:47:b2:0d:c8:ef:3f:ef:88:fd:
cd:d4:73:c9:14:91:09:e8:80:ed:c7:a5:fa:38:66:
d7:8d:a2:e9:b5:2f:22:20:23:87:fa:15:ab:a8:43:
e0:0f:94:06:b0:86:97:e5:84:43:d9:fc:fd:02:a1:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:6A:2D:23:DB:9B:E0:D6:CD:C4:85:A1:01:7F:E5:C4:6B:9B:0F
X509v3 Authority Key Identifier:
keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:66:13:dd:82:e1:a8:79:c9:d3:32:93:7b:55:6f:e7:40:d7:
62:10:2d:8d:d0:9c:33:fd:47:dd:0d:3f:94:64:32:43:9f:73:
29:fb:50:55:5b:ea:6a:05:2a:39:58:6a:67:03:f4:45:6f:ee:
7d:54:42:5b:5d:df:eb:ce:cc:69:ee:b2:b5:b8:49:31:7b:27:
38:eb:d9:3a:8e:6d:d4:50:d4:c2:e8:6d:d2:fb:15:0a:74:b7:
50:db:03:b7:b1:2c:61:20:04:21:ec:f4:6a:b3:bd:b0:ad:b7:
9e:eb:b0:b1:6a:9c:1f:34:ec:09:f8:dd:af:33:6a:93:02:be:
d9:b6:f6:a0:e6:e0:bc:4b:19:a5:83:c7:34:0c:d8:8a:94:74:
69:57:16:db:6e:8f:6f:e6:e2:e9:1c:5e:0b:ec:82:8b:68:22:
8e:e5:5b:eb:bd:91:64:4e:88:73:a9:c0:de:27:4f:35:26:ae:
06:1a:e3:96:00:3b:cc:96:ce:f4:29:71:89:a5:01:ce:42:5c:
67:bf:3f:8d:fc:2a:94:76:68:b0:59:0b:f2:fc:11:1d:df:bc:
6d:4d:c4:fe:db:e2:97:33:77:d6:4e:b2:24:aa:49:1d:c4:87:
6b:c8:db:1a:3d:17:2a:ae:9b:dc:57:d4:54:77:22:15:9c:99:
75:e5:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:51:36 2025 by rpki-client