Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: 4pHP1Y3SvcCu0Q/qvcKRSKn3WHBWK7qGaCCVta4ko54=
Subject key identifier: 8D:BD:BB:B4:60:B3:4A:6C:D4:D7:B7:08:48:0E:3C:94:4C:26:86:1E
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 0199FC58F268AC5B3979261C2E128D042752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: 4hleQBO/VW6FLshrn145Gcg2N8cl48aE+7tF3XTOcdU=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f2:68:ac:5b:39:79:26:1c:2e:12:8d:04:27:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=8dbdbbb460b34a6cd4d7b708480e3c944c26861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:ac:8e:6e:aa:34:82:36:bf:75:3b:d7:80:
06:ad:52:7b:fa:8d:f5:13:c4:90:72:c3:75:4b:03:
cc:a2:18:bc:24:c3:93:a5:e3:98:73:85:e1:7e:9f:
1f:18:c2:af:f5:8c:7e:f3:36:cb:89:90:87:cf:1d:
2a:64:a0:1b:10:d9:cb:d2:ad:fd:b0:8e:8b:14:bc:
ed:49:95:43:32:01:a8:a8:cc:d1:aa:1d:83:0d:7b:
9b:6e:d1:c6:3e:39:a9:b9:f3:93:29:cd:a8:4a:a3:
9f:d8:79:f2:b4:92:cd:f3:1a:0d:f9:68:2f:73:2a:
69:46:dc:06:39:de:e3:04:25:fd:0f:ac:24:7e:b0:
a0:40:41:ac:de:d1:67:39:25:07:91:55:2d:9c:e1:
a6:7d:36:b2:e8:43:8c:aa:ca:8b:e9:a3:d6:e8:38:
76:a7:f3:f3:09:90:e1:17:e4:a7:83:d2:07:3d:bb:
a0:a7:56:6e:48:31:c3:68:b4:c0:65:84:27:d5:c5:
62:07:50:84:1c:78:ee:f9:7a:5f:32:1b:79:94:e8:
39:63:fc:e8:b7:1f:dc:99:6d:e3:b3:f6:a5:f4:7c:
ed:e4:59:e6:03:4d:c0:4e:c4:56:b6:ee:f1:d4:21:
70:2b:4e:35:d1:38:0b:f7:fb:eb:be:0f:49:e5:3f:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:BB:B4:60:B3:4A:6C:D4:D7:B7:08:48:0E:3C:94:4C:26:86:1E
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:31:0f:92:0d:84:e1:f7:d0:f9:ce:10:5b:05:c8:10:59:
bf:af:51:12:e5:c0:18:31:8c:19:40:20:24:be:f3:e9:0c:df:
57:35:97:2c:e2:df:13:a6:6d:ae:ae:55:52:d9:bb:17:98:9b:
6e:bc:a7:2a:d4:1f:49:53:e9:25:0d:36:58:f5:e5:f8:9f:ce:
c1:a2:00:ae:c7:fa:4f:d0:6e:42:32:cc:19:1a:fa:c7:cc:15:
9c:94:58:0c:09:08:55:d5:38:8f:ca:e2:83:8d:46:20:81:bb:
36:3b:2a:d5:28:58:e3:33:b4:b7:5e:d4:57:4e:54:bc:e3:ed:
fc:12:3c:6f:22:93:b7:37:42:cd:18:67:b5:93:9f:76:aa:5d:
d2:f0:b8:45:b5:a4:9e:7e:fe:ac:9c:99:b0:c5:ab:c8:d0:29:
d7:a3:f8:31:e6:e2:2b:3c:3f:bc:7b:d9:b0:eb:25:08:29:80:
1d:22:ec:14:6b:ce:e0:6a:ac:ff:98:7f:1a:7e:a3:23:de:ca:
92:b5:e2:b4:8b:f3:ce:1e:1a:64:92:cd:02:19:17:b8:a5:bc:
23:12:e2:48:cd:55:4d:d3:1d:b6:d9:73:22:d2:c6:f4:92:f7:
77:73:e3:bc:a7:e9:ea:f6:f1:81:12:50:d1:47:e3:f2:06:ca:
52:eb:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:08 2025 by rpki-client