Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
File: viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json)
Hash identifier: lGYkHLUaO3QnVEKGi9e7byssqxIDCDSPUllF587BPBY=
Subject key identifier: 49:AB:82:41:B7:3D:B4:82:5F:33:8A:8E:A7:A9:3D:E7:A7:9C:C2:B9
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial: 019749318C672CDD0E2F2A3EC8049E9E1918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
Manifest number: 12C0
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=)
2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: zANudVMAQKIOBYVOnoDTUeKbvAKiG5aHz2AJX+4vdMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8c:67:2c:dd:0e:2f:2a:3e:c8:04:9e:9e:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=49ab8241b73db4825f338a8ea7a93de7a79cc2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:62:2f:0d:38:cf:e9:d1:6a:4b:29:d5:40:
64:1d:4b:82:c7:2b:97:b0:03:34:b3:25:ea:98:7e:
2c:e3:f2:8c:d2:52:08:02:80:e9:43:87:66:20:94:
f8:e0:93:b6:1f:07:28:22:06:8a:81:53:0d:77:80:
42:38:74:6d:0d:75:f2:01:97:b0:41:f9:2d:37:a9:
1e:56:09:11:ae:64:51:99:ce:3b:0b:ad:f3:97:ef:
de:36:d3:a6:91:e5:c7:c9:19:75:cf:aa:e9:ee:8f:
c8:a6:e6:c1:fc:90:70:4b:84:25:88:21:24:02:30:
55:a2:9c:d1:37:f8:3d:b4:e3:93:77:26:c3:78:d6:
2c:29:8e:fe:c2:d1:20:35:89:a4:f4:70:ac:c6:c6:
de:b8:9d:a4:02:aa:08:8a:58:13:15:4d:d4:5a:58:
43:e4:e6:91:33:36:f0:5b:f4:ca:76:29:64:61:17:
8c:8b:9c:03:26:0a:89:a7:ff:3f:d8:e8:54:12:35:
a7:77:c3:a7:c9:b1:d5:89:c2:13:56:53:5c:e7:13:
c2:bc:a4:c8:66:98:15:09:44:03:23:1f:4a:4f:54:
7c:68:4f:c4:15:5c:0b:aa:81:a6:e5:fb:35:55:90:
c6:22:26:ca:72:06:a2:fb:7b:bb:f9:f2:23:e0:9e:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:82:41:B7:3D:B4:82:5F:33:8A:8E:A7:A9:3D:E7:A7:9C:C2:B9
X509v3 Authority Key Identifier:
keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:49:12:b5:9f:25:29:db:27:14:7e:81:96:0c:ed:59:59:52:
e4:65:45:c4:3a:e3:91:b9:91:86:0b:4d:88:b0:53:f1:d6:b4:
15:fd:5b:68:2c:b6:f6:d5:f9:a9:3f:54:c9:0f:49:4c:bf:ca:
85:f1:d2:1e:b6:b8:1a:ba:0f:f0:b7:06:2b:91:f7:37:e2:fb:
fa:b5:b3:e9:bd:1d:a7:54:2f:a3:3a:0d:c9:2c:45:24:60:35:
12:39:ec:fa:76:45:cd:58:68:7d:8c:18:4e:f1:7a:f9:c8:2d:
b3:b4:4b:f3:fb:64:2c:3f:3a:d5:a4:27:50:30:94:b3:d7:2b:
8e:97:bd:bd:5a:be:9f:1c:1e:99:e5:e0:78:3f:7c:59:82:1d:
05:bc:70:45:74:4b:e4:3b:a6:d3:3c:e4:6c:a6:e4:15:0d:d2:
68:9f:70:de:6f:83:6d:7b:3c:25:75:bc:f8:17:df:7c:6b:d1:
d5:72:f1:bb:77:4b:18:07:ab:e8:89:b3:52:e0:3f:e9:16:ac:
0f:7e:11:0c:36:b9:d1:c8:7a:65:d6:86:33:eb:d4:97:29:0a:
ee:23:d4:e3:7c:de:e3:52:f7:8e:aa:ac:a5:ce:60:44:66:e5:
7f:35:ce:40:ed:9e:82:5f:27:d1:12:07:79:84:40:85:02:2e:
b8:e3:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:05 2025 by rpki-client