Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: bgdh7bGSQgNUrliXYCmifs7fCP1LPdwUujlB1kqvrVc=
Subject key identifier: 69:D8:30:4A:7D:95:1F:33:BA:F6:E0:F5:86:A4:4F:9E:51:93:D7:E8
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 0196C796D8D91AE5787FD5494D6B41633C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 03:01:14 +0000
Manifest this update: Tue 13 May 2025 03:01:14 +0000
Manifest next update: Wed 14 May 2025 03:01:14 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: sNprn6Zi9JsT+9hrnPTI2Oud1sU91xdD33nCnhS09K8=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:d8:d9:1a:e5:78:7f:d5:49:4d:6b:41:63:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: May 13 03:01:14 2025 GMT
Not After : May 14 03:01:14 2025 GMT
Subject: CN=69d8304a7d951f33baf6e0f586a44f9e5193d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:98:e0:1a:88:06:1b:15:a3:0e:22:65:15:
54:bb:70:93:ea:20:0d:9f:b2:9d:96:13:50:b4:95:
b7:de:3a:ad:38:21:87:01:63:7d:0f:e4:ad:3a:31:
52:69:22:a4:c8:28:99:af:39:06:b1:24:15:55:25:
4f:93:90:b7:ed:c4:7b:44:25:3e:7f:44:0a:e9:ce:
c8:6f:61:e7:61:41:e2:b6:a9:62:db:52:65:92:cd:
61:d5:5e:4e:28:6c:51:14:18:d2:a6:41:a5:3c:c7:
ee:ec:f9:6f:cc:f6:92:21:1b:6d:67:d3:c2:ff:47:
b8:7e:c9:17:0d:ad:34:dc:54:4e:7b:b4:8c:1b:1b:
75:1e:d7:9f:8d:5c:06:c6:eb:46:c6:3f:5e:0b:a7:
ca:72:b6:3c:85:23:1b:c6:3e:80:01:37:1c:02:80:
7f:d2:c6:f4:ce:a8:98:3e:ee:7b:73:9a:b9:68:1d:
db:9f:37:26:9a:fa:77:ce:d7:89:98:7e:6f:a6:1e:
c4:90:7b:5b:11:82:12:36:ee:0f:1d:10:54:a3:cb:
35:14:28:08:01:4d:7b:a1:5c:e9:da:2f:ba:4e:9b:
46:70:23:56:54:fe:8b:7d:23:1f:85:65:da:4a:8b:
6f:25:ab:a3:51:04:58:6f:39:72:06:ef:58:d5:e0:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D8:30:4A:7D:95:1F:33:BA:F6:E0:F5:86:A4:4F:9E:51:93:D7:E8
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:01:64:88:84:87:72:ef:69:b4:66:91:05:f5:64:4a:9b:1e:
b5:a7:8d:b3:eb:df:62:86:84:4f:3c:19:fa:8f:0f:6b:ef:16:
1d:68:e1:be:e0:a7:3e:d4:c0:6e:34:2d:8f:c9:bf:8e:74:fb:
68:69:f9:45:e1:24:58:bb:26:a9:5a:bb:75:ea:13:98:62:1e:
e5:15:28:1d:1b:f9:df:0b:52:b3:67:a3:fe:45:ec:29:61:00:
cd:27:d2:a9:26:77:aa:0a:0e:77:f6:2f:03:c5:3a:7c:82:dc:
d6:ca:aa:e5:d7:81:90:7a:16:04:79:4e:e7:f0:bf:72:7f:20:
c3:13:61:94:f1:bd:6e:e7:f4:c0:19:d3:26:7b:e4:39:41:7b:
2b:84:fd:b1:8a:10:f7:37:cf:43:e5:28:df:7a:f4:64:16:ce:
65:39:b2:01:a2:a3:71:78:71:6e:1a:78:cf:59:7c:8a:4b:67:
54:8e:61:ef:52:72:2c:5a:63:31:cf:ac:b5:96:a3:66:78:47:
5a:a6:9b:d7:19:a5:2e:5d:d7:6c:db:58:da:76:1e:74:9a:b1:
e7:7f:05:18:c4:da:de:72:09:6f:c2:09:56:2e:06:ed:73:4e:
ca:bb:dc:61:3e:13:d5:f5:19:b4:49:40:4d:d9:05:75:24:99:
a4:1b:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:40:44 2025 by rpki-client