Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: FD2vjrnpSu28JtejCGeVdGMTxtokXGzMNA6CI5p3rQ0=
Subject key identifier: F7:3F:D5:E1:98:1D:AB:9D:B8:6E:7F:E4:87:78:E4:DE:13:39:3D:3E
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019A552DE4713A3074CEAA4423FC8C56DA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 18:01:02 +0000
Manifest this update: Wed 05 Nov 2025 18:01:02 +0000
Manifest next update: Thu 06 Nov 2025 18:01:02 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: nh92cQtGa2c00zh5p6mL01SwJMgLGpr2JPIx7RB0fpI=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:e4:71:3a:30:74:ce:aa:44:23:fc:8c:56:da:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Nov 5 18:01:02 2025 GMT
Not After : Nov 6 18:01:02 2025 GMT
Subject: CN=f73fd5e1981dab9db86e7fe48778e4de13393d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:e5:f6:e3:2f:1b:d0:54:d7:ed:38:15:ff:
5a:86:76:ac:8f:ae:97:97:0e:32:c9:5f:e5:b3:40:
30:3a:28:a5:f3:fa:ec:9e:ae:24:a0:e7:94:7c:5c:
00:cc:1f:18:db:ea:78:97:fd:7a:50:6f:99:1e:57:
04:e4:f5:82:60:7d:05:0a:a5:e7:36:61:49:ab:59:
ce:2d:3a:2c:6c:8e:8b:c4:a0:c5:60:27:34:9a:fa:
75:4e:cd:79:7d:eb:f8:17:e1:01:c5:c0:b1:02:c1:
f1:c5:bf:d9:7a:35:51:3d:f9:28:bb:53:d1:4b:ae:
f8:b2:75:fc:4d:29:b0:73:d0:22:8b:59:25:d8:99:
fc:aa:6c:2a:c5:99:f2:ad:ac:d4:e0:6a:a3:bb:d9:
6c:38:22:d2:e8:d3:e0:49:89:f9:15:65:bf:cf:d2:
34:24:fe:14:fa:3b:cb:99:75:d5:81:e4:75:6f:4e:
b3:31:33:d5:5b:e4:d2:df:ca:05:25:fa:da:2e:fa:
1c:28:ab:c3:14:0e:6a:99:f0:64:8b:ab:f2:ea:32:
ce:86:a8:5b:8a:d0:6a:9f:55:6b:9a:a2:80:99:91:
4a:8b:e8:76:1d:81:dd:f8:15:8f:28:29:8d:33:27:
c0:ea:6a:0a:10:70:78:c0:ba:2c:6b:b6:c2:d3:7f:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:D5:E1:98:1D:AB:9D:B8:6E:7F:E4:87:78:E4:DE:13:39:3D:3E
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:91:a1:85:68:90:a1:32:c5:61:9c:5f:01:4c:cc:ef:a5:ff:
5a:b7:7b:68:1f:49:37:29:91:9a:98:37:6f:a9:a1:28:58:e1:
12:f1:3a:ee:ce:81:4e:d8:bd:52:8d:bd:a3:e5:b6:1e:c4:cc:
92:2e:21:24:6c:6e:15:8e:de:4b:75:aa:fc:f6:3a:fa:79:10:
c3:c1:d9:f2:36:20:d2:3a:36:58:1b:ef:4f:60:b2:d4:b3:90:
fd:8e:21:c6:0d:a6:56:9b:a7:4f:0c:c5:6e:e6:42:75:19:43:
54:40:18:11:97:44:81:08:42:2a:61:c7:44:a9:d3:d3:38:ce:
41:f7:5c:b2:96:87:ec:95:27:0f:b3:43:fa:7e:b1:bb:82:2c:
5b:89:c4:ea:52:07:5a:3c:66:5a:43:a4:16:be:02:d8:9b:c9:
d9:28:07:7c:89:5c:7f:ea:80:d9:4f:5d:2c:9a:77:74:fc:d8:
22:05:b8:34:60:ba:73:81:2b:78:36:4c:35:02:ae:17:19:e5:
48:0d:a8:ef:21:1c:44:84:1b:03:05:cd:95:24:97:d8:fd:cf:
88:e0:61:27:8a:28:91:3b:bb:43:33:24:b4:8a:8a:3a:91:43:
d4:fa:43:b1:5d:78:60:56:15:12:ad:3e:54:5e:ef:f2:c9:57:
fb:36:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:09 2025 by rpki-client