Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: sq6LSm3RvzurW5SxJFqoLV4X+efjYqrcHLFtMPrbegA=
Subject key identifier: 82:B3:6B:B1:5A:DE:FB:00:88:FD:7D:2F:0F:A8:1D:85:EC:EF:56:D2
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 019A0591F919DECF3699B63BBA4F1BDFED3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 0232
Signing time: Tue 21 Oct 2025 07:00:43 +0000
Manifest this update: Tue 21 Oct 2025 07:00:43 +0000
Manifest next update: Wed 22 Oct 2025 07:00:43 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: 12tfFME67+S57PEap7DJ1B6qnDM26S/MACIB0ANybXs=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:f9:19:de:cf:36:99:b6:3b:ba:4f:1b:df:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Oct 21 07:00:43 2025 GMT
Not After : Oct 22 07:00:43 2025 GMT
Subject: CN=82b36bb15adefb0088fd7d2f0fa81d85ecef56d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:a3:d1:85:67:4a:c1:68:f9:e1:48:89:b6:
d2:43:54:89:de:c1:cd:46:0e:6b:22:a6:86:45:ca:
5a:c3:6b:5a:be:a3:49:1d:43:f5:d9:c3:f5:fa:aa:
46:bb:8e:a2:fe:35:bc:fd:a7:ee:dd:f4:3f:33:3f:
31:c3:76:68:09:1e:da:d1:6d:b5:1d:90:f4:7e:d1:
ce:7d:fd:af:6e:4b:0e:43:0d:2f:a6:07:d1:75:5e:
8f:28:e6:70:bb:ba:97:9d:6d:c0:07:d6:29:b4:3a:
51:38:3a:ef:f9:cb:c4:f2:8c:db:1c:21:b5:7c:0f:
cb:fd:f8:0d:fd:0a:57:d6:b6:79:2f:10:ee:4a:cc:
a6:d9:86:a3:33:09:28:9e:11:5e:d8:73:77:af:1c:
86:24:6f:54:8b:06:7e:1d:3e:e2:6f:f2:de:1c:80:
84:fc:e9:6f:d3:da:76:f1:95:01:77:9b:e9:b1:9c:
f0:12:f5:60:59:16:f1:41:88:63:28:f6:bb:fc:9c:
58:2e:14:0b:74:2a:4b:0f:81:32:cb:6a:d5:b3:9d:
24:7a:bf:53:d8:9a:ca:5c:fb:11:e4:fd:0f:3d:e1:
0b:86:1b:91:9a:44:35:98:f7:94:ba:e0:6e:30:2a:
d7:9f:f7:ca:dc:00:0a:94:61:4e:b1:21:52:00:2c:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:6B:B1:5A:DE:FB:00:88:FD:7D:2F:0F:A8:1D:85:EC:EF:56:D2
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:fe:0e:a8:fd:56:09:41:f9:f2:a2:8d:31:5b:51:be:f4:
e4:9a:cf:b5:6b:7d:33:8b:9b:e8:0e:4b:0b:fe:a3:ec:5a:4d:
c4:3a:bf:b9:5d:92:4f:e3:99:62:96:37:45:21:21:04:8f:d9:
ee:6b:2a:9d:70:6d:f5:e2:9a:5d:f7:44:7c:0c:f2:54:5a:a0:
1d:f6:6e:c4:8c:7a:6e:3b:79:9a:5c:2a:31:f5:d3:4a:29:6d:
4f:b3:4d:eb:42:d2:46:82:8e:68:96:c1:12:4f:4f:dc:12:bf:
c3:d8:8c:73:7c:6e:af:05:e1:22:f1:7d:71:55:fc:fb:5b:e3:
cf:08:63:28:5e:8b:72:b5:f6:81:41:62:f2:29:07:49:f9:b7:
3b:a5:0f:8e:60:2d:d8:a3:05:52:1c:ad:56:58:a2:f2:37:a3:
48:8b:49:54:06:5e:47:7e:08:69:be:57:7c:4a:6b:8b:93:09:
2b:e9:3b:bb:eb:5f:da:d3:42:54:ac:98:58:20:38:52:a5:b9:
4f:7d:2a:7b:b4:f5:6f:00:06:85:d3:87:38:d1:0d:76:dc:61:
88:36:d9:08:4d:4b:26:da:09:b3:5a:67:c7:2e:a3:5e:63:09:
93:f1:1d:62:e1:51:ff:25:2b:ec:49:18:b6:89:b8:34:a0:89:
cb:44:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:21 2025 by rpki-client