Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: sVrBoWtZvgzoSMLAqFFdvQwY4FyH1DKYYPR6svSllhs=
Subject key identifier: F5:B3:EF:06:BD:F5:68:BF:75:B0:09:F1:09:2F:60:A2:C1:B3:F9:36
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 0198556A0724C06E2D36DDB2EB71D306AD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 09:01:08 +0000
Manifest this update: Tue 29 Jul 2025 09:01:08 +0000
Manifest next update: Wed 30 Jul 2025 09:01:08 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: OOHz8QqH2nyxLn0J9INsmIJPyvp/qjP41x40CxEUtjM=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:07:24:c0:6e:2d:36:dd:b2:eb:71:d3:06:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jul 29 09:01:08 2025 GMT
Not After : Jul 30 09:01:08 2025 GMT
Subject: CN=f5b3ef06bdf568bf75b009f1092f60a2c1b3f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:bc:a1:9c:cf:fb:0f:80:45:fe:47:df:52:
8f:12:76:da:af:41:b7:30:53:fd:bf:eb:e8:b2:ef:
56:22:b6:53:62:18:bc:53:4b:fb:8d:00:b4:94:19:
1b:a7:a0:7e:83:ca:2b:57:7d:c3:cf:12:62:61:0c:
79:61:6a:7d:ea:eb:2d:1b:82:1e:37:86:1b:fa:f0:
87:da:3e:7c:2b:58:06:ca:6e:3d:1f:30:b3:f2:d6:
ec:13:b3:ef:b0:cc:a0:08:77:54:c5:48:4f:6c:85:
52:32:7c:6e:ef:34:5c:74:c8:0e:ed:de:c8:83:dd:
3b:91:e3:19:1a:bd:bd:f1:c0:05:3e:5b:50:dc:30:
04:de:ea:7d:96:42:3d:2b:ba:14:38:8b:a8:27:1f:
6e:37:39:17:40:e1:76:9e:c5:73:61:37:78:cc:64:
d9:a1:09:81:e7:61:1e:ca:99:82:fb:35:77:4e:f4:
7d:52:65:03:ee:b1:3f:9c:c0:98:d5:de:fe:78:04:
f7:4a:24:58:3d:20:d8:88:69:21:0e:c5:e6:1d:7f:
cd:84:dc:e6:bc:ec:2d:cc:cd:99:35:88:43:34:d8:
9a:14:82:f1:dd:8c:76:d9:c1:c6:b3:37:df:c1:42:
77:bf:a2:d3:51:b0:bb:1b:82:f1:85:0d:6b:68:54:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:EF:06:BD:F5:68:BF:75:B0:09:F1:09:2F:60:A2:C1:B3:F9:36
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:06:76:f2:b5:2f:ff:ef:5f:9d:c5:0a:80:62:b1:8a:6e:24:
22:1c:30:27:6a:c2:ea:4e:cd:29:91:ce:42:94:84:a2:46:3f:
04:83:92:7d:9f:6f:aa:a8:a3:8f:4a:42:bd:2b:4a:53:67:8a:
67:50:dc:0a:9e:e2:07:9a:e9:e7:06:96:73:0a:25:5a:c5:7e:
b3:ae:41:b2:bd:a5:1c:28:20:0b:45:8f:9c:42:3a:21:75:10:
98:14:33:17:da:3e:90:d3:27:6d:2c:d6:30:1a:f1:0e:50:8e:
a1:e1:e9:4b:23:18:f8:bd:82:a3:75:7d:89:e7:26:12:b3:85:
39:0a:0b:6d:38:ce:a5:e1:db:f4:70:e4:5a:7c:fd:97:05:45:
62:d4:37:9f:de:3e:4a:88:66:7d:2d:c5:8e:f4:e8:98:2f:35:
81:f4:0a:c9:52:05:5a:92:1b:93:90:52:72:e7:3a:1c:66:d8:
11:bd:99:2c:48:df:bc:0d:56:d6:e4:39:79:c4:c2:ab:b6:01:
49:e4:ce:36:7f:1a:f2:6c:19:43:8a:86:76:0c:35:2e:31:aa:
6c:34:04:01:9c:9e:5e:da:be:6e:d6:48:d3:f2:25:87:a1:65:
6b:de:e3:07:27:31:f8:f8:70:5a:1e:d0:7d:df:2b:5d:37:cb:
82:49:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:28:13 2025 by rpki-client