Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: uHODWdLsrlcR2Sac9RhUd98qaeDyKbAuyoHgExwIKVE=
Subject key identifier: 3D:52:ED:46:3A:4C:47:3A:8E:B7:5B:9E:A2:8E:AB:9E:E9:21:43:DB
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 0197B70EA7C59631D750CC42606DF5019AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: dRgK2jmA1KdkZoMJvgXnuFQrrUTS7/cHGWurTgXRI7g=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a7:c5:96:31:d7:50:cc:42:60:6d:f5:01:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=3d52ed463a4c473a8eb75b9ea28eab9ee92143db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:49:76:bc:29:43:39:1f:2f:ed:6f:b2:0b:
75:4b:b3:d0:51:a3:d7:b9:fd:c5:a3:39:cd:10:37:
3d:df:ea:19:21:d0:8b:7d:c5:db:34:7e:f7:73:e8:
7e:b5:eb:a0:b2:c8:8f:0c:c5:28:91:8f:16:14:1b:
7b:a1:57:a9:9b:32:74:52:dd:9c:44:70:e6:e2:64:
75:02:f5:81:18:27:3f:55:74:a8:05:92:4b:c9:58:
b3:a5:2e:db:90:8b:70:7b:1d:14:a2:5e:54:d2:e8:
22:99:1b:cf:60:cc:6e:ee:60:e9:27:20:d3:5b:ee:
aa:f6:f2:97:de:8a:88:8a:a5:6c:4c:68:47:59:b0:
19:ee:c2:d1:fb:fe:31:35:e4:4c:28:0d:e5:ac:94:
30:02:ca:93:8e:74:bc:fc:58:38:a4:81:e0:58:e6:
a0:83:a7:17:e4:00:5d:cb:cc:ab:6b:3c:03:28:74:
42:e4:04:af:18:8c:7b:87:17:23:f3:8f:bf:12:8e:
11:83:aa:f3:c8:41:38:bd:c7:9d:58:ae:7e:65:48:
01:80:a3:0f:a9:63:3c:5a:57:5a:0e:e4:91:51:66:
0c:bd:64:e6:18:3d:a2:4b:4a:24:60:e2:46:ca:0c:
54:7f:e7:c8:45:bd:6d:71:e1:31:62:52:ac:a0:7a:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:ED:46:3A:4C:47:3A:8E:B7:5B:9E:A2:8E:AB:9E:E9:21:43:DB
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:47:23:96:63:ad:70:2f:13:a6:a4:b7:5e:d7:d3:1e:d4:cb:
38:44:42:be:f3:a2:bc:c2:23:77:26:4b:de:70:2f:a3:52:2a:
a0:1e:bb:71:e8:27:3a:17:58:9a:d1:57:2e:47:e6:f4:22:f8:
fc:ec:42:8b:61:0a:9b:0d:00:ea:fe:62:0f:2a:63:81:90:50:
c8:8e:d8:56:27:a5:2c:8e:10:68:8f:1a:6c:86:1b:f0:dc:11:
67:a2:1a:83:da:ba:a1:8d:30:eb:9b:f1:b7:9e:42:23:23:f6:
78:97:05:93:c3:bc:59:db:53:b9:3d:71:e6:40:e8:1a:53:2a:
fe:25:43:1c:19:9c:c6:e2:fd:8a:7b:f1:ca:2c:ea:da:31:5e:
cb:90:d7:19:78:37:be:f6:92:e4:1a:c9:96:77:d2:e3:8b:ed:
ec:18:cd:28:64:51:d3:ec:69:89:3d:78:0e:f4:8c:0e:9b:01:
1c:15:07:fd:31:33:6d:f9:3a:6c:64:75:e0:44:bc:4d:0e:31:
a5:c6:64:c3:70:3a:f3:91:d2:7c:a6:e5:3c:2c:21:cf:e2:56:
13:8f:c5:9d:9c:95:4d:dc:52:9b:05:ab:6a:6b:a6:2d:14:ee:
26:5d:4b:59:04:1c:ba:46:32:5d:86:86:fa:4b:82:52:29:b6:
7e:f1:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client