Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: FTjZkHX/zHBMVBSoac0BbdvmEDLI0lh5k+QYf3GXOhY=
Subject key identifier: 6B:28:35:46:BC:78:E0:C3:FB:34:7F:51:77:36:61:02:9F:01:60:DE
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019A7226496DA65490D0B2EA2DAA7B08EE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: h9E5TyO4AIvIUAg5WzVjz5CdzM3003LqRYLjKxaVK4I=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:49:6d:a6:54:90:d0:b2:ea:2d:aa:7b:08:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=6b283546bc78e0c3fb347f51773661029f0160de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:39:8f:c9:20:00:65:f3:5a:77:8c:ef:1c:
d2:44:f1:3e:76:71:27:ba:e0:1a:51:6c:6d:51:da:
6a:fb:65:b8:17:b7:f9:be:00:cc:68:f5:d8:7b:fe:
43:0e:5c:44:9d:57:7a:31:3a:8e:73:6b:78:1c:ae:
7a:82:09:bd:78:91:41:f2:da:ff:09:6f:27:e7:fa:
39:b3:ac:b7:ea:2b:83:bf:ae:f4:1f:38:36:77:a9:
df:e4:c9:84:94:c4:7e:d0:f6:80:34:46:ed:67:da:
8e:30:3a:d9:ea:2e:6b:08:ee:d9:9d:d3:8d:26:86:
48:c3:d7:e1:db:bc:57:5d:06:85:66:e5:e9:f9:49:
a8:41:be:c4:ad:13:f4:28:92:61:0c:cc:8c:7e:fb:
61:8a:1f:cd:ea:25:4c:af:52:e3:00:64:80:c4:46:
34:4a:45:52:e4:62:1a:3c:2b:e7:6e:16:46:ed:67:
3e:1d:40:b5:11:83:12:22:de:31:70:66:ed:50:78:
06:46:23:4d:e5:1f:4c:86:02:ab:76:dc:a9:15:7c:
10:e7:ee:de:e9:e9:c7:2f:d0:31:0d:fc:48:74:8a:
22:83:6c:42:08:ac:7d:b6:14:ea:22:05:0c:e3:3d:
74:86:33:3b:4c:ee:72:0b:dc:8c:4f:d8:28:ce:b1:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:28:35:46:BC:78:E0:C3:FB:34:7F:51:77:36:61:02:9F:01:60:DE
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c3:33:f2:f4:4d:58:03:2d:b8:99:45:cc:5b:6a:3c:5f:bf:
45:3e:13:41:a4:30:b9:f9:04:e3:cd:c3:ae:b5:30:f2:77:48:
49:19:3e:b2:71:50:1f:cc:1d:5c:78:05:fa:35:99:85:24:84:
50:0f:ea:ef:b5:88:85:b6:10:5e:9f:be:c1:35:f2:7e:62:64:
0b:60:42:61:1e:eb:83:11:84:0a:a1:5e:6e:5f:82:1a:30:21:
79:40:bb:bf:f0:b2:6c:96:86:3f:bb:67:21:b3:8f:cf:b9:d6:
7b:90:6a:b6:88:28:7f:ad:d9:62:a3:7f:22:6a:00:27:08:76:
11:53:69:7d:f7:6b:1f:af:b2:12:49:71:aa:95:3d:92:fe:ff:
fc:1c:59:14:79:b2:6c:2e:98:9d:40:35:f1:d8:4a:82:9c:da:
1b:14:39:f1:2c:aa:0c:e3:2f:87:d6:62:2d:20:8e:2e:66:59:
1e:7d:ed:59:ce:af:20:f5:83:cc:a6:f1:0a:a7:ce:a8:e7:a7:
c2:e4:69:fd:12:26:f5:68:3d:2f:2e:1a:1b:30:3b:11:17:3a:
ea:f2:0d:da:90:ea:e0:71:64:6c:00:12:4f:b8:53:0f:1b:68:
1f:2d:4c:2f:7e:42:43:22:bd:19:37:65:18:d2:b2:36:87:f4:
f8:78:cd:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkltplSQ0LLqLap7CO5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy
YzA5ZjkwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD
Eyg2YjI4MzU0NmJjNzhlMGMzZmIzNDdmNTE3NzM2NjEwMjlmMDE2MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Y5j8kgAGXzWneM7xzSRPE+dnEn
uuAaUWxtUdpq+2W4F7f5vgDMaPXYe/5DDlxEnVd6MTqOc2t4HK56ggm9eJFB8tr/
CW8n5/o5s6y36iuDv670Hzg2d6nf5MmElMR+0PaANEbtZ9qOMDrZ6i5rCO7ZndON
JoZIw9fh27xXXQaFZuXp+UmoQb7ErRP0KJJhDMyMfvthih/N6iVMr1LjAGSAxEY0
SkVS5GIaPCvnbhZG7Wc+HUC1EYMSIt4xcGbtUHgGRiNN5R9MhgKrdtypFXwQ5+7e
6enHL9AxDfxIdIoig2xCCKx9thTqIgUM4z10hjM7TO5yC9yMT9gozrFo2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsoNUa8eODD+zR/UXc2YQKfAWDeMB8GA1UdIwQY
MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt
Y2U4ZGQ2ODk4YjI3LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3
LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcMz8vRN
WAMtuJlFzFtqPF+/RT4TQaQwufkE483DrrUw8ndISRk+snFQH8wdXHgF+jWZhSSE
UA/q77WIhbYQXp++wTXyfmJkC2BCYR7rgxGECqFebl+CGjAheUC7v/CybJaGP7tn
IbOPz7nWe5Bqtogof63ZYqN/ImoAJwh2EVNpffdrH6+yEklxqpU9kv7//BxZFHmy
bC6YnUA18dhKgpzaGxQ58SyqDOMvh9ZiLSCOLmZZHn3tWc6vIPWDzKbxCqfOqOen
wuRp/RIm9Wg9Ly4aGzA7ERc66vIN2pDq4HFkbAAST7hTDxtoHy1ML35CQyK9GTdl
GNKyNof0+HjNDA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:34:00 2025 by rpki-client