Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: qoejXJ1CBXubo2YjU/rD6XhKk/mFK6LNL17VeOASXSg=
Subject key identifier: 3F:55:AC:B5:6C:6A:11:6B:E8:66:C6:CA:B7:8C:E4:5C:7C:78:FB:28
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 01976DAB87195BDDC7500FDD2CA1770EF332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 09:00:47 +0000
Manifest this update: Sat 14 Jun 2025 09:00:47 +0000
Manifest next update: Sun 15 Jun 2025 09:00:47 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: EnIPq1Q7BOPE6xc1MGcokGKo/wrRydNBy4fGEw4cAzs=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:87:19:5b:dd:c7:50:0f:dd:2c:a1:77:0e:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jun 14 09:00:47 2025 GMT
Not After : Jun 15 09:00:47 2025 GMT
Subject: CN=3f55acb56c6a116be866c6cab78ce45c7c78fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:01:c7:3e:d8:6e:51:e0:af:ea:c1:24:d4:
6e:ab:3e:2c:da:e6:19:cd:80:c2:f3:7a:75:8f:32:
cb:da:a7:04:2d:8d:d8:a4:49:52:8d:8a:63:72:3b:
e3:e0:fe:9f:06:8f:b6:fc:b7:32:6a:5a:3c:ca:fe:
96:0f:46:f4:cc:db:f3:c3:0a:0f:ef:d9:3e:6e:d1:
84:ce:9a:ac:7a:d9:4e:25:be:1e:8e:fb:1c:50:fd:
56:23:f9:ae:9c:c0:de:5f:7e:1a:ac:07:35:39:91:
70:33:2e:2c:65:33:33:f0:14:69:58:f7:4c:37:39:
48:22:02:04:f4:5e:d0:12:d9:8b:01:3c:6d:24:b7:
61:dc:e8:2b:e5:d2:70:30:66:77:a4:88:92:81:a9:
00:9c:7d:88:75:73:c8:96:7c:9f:d3:7c:52:21:e3:
e8:52:0e:df:c4:63:92:55:e1:45:9f:08:94:24:f5:
31:7b:e1:ac:38:d3:b6:2b:27:5e:87:bb:f0:8d:be:
0b:df:83:1c:00:3c:53:8a:ed:9e:be:20:2d:37:03:
64:bd:31:f0:d5:a3:55:2c:10:49:72:a0:40:5e:b9:
02:a1:3f:cf:7f:35:26:24:c5:db:ad:3d:7c:93:98:
55:03:06:8a:f9:1d:cc:7e:3d:27:dc:1e:22:f5:bf:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:AC:B5:6C:6A:11:6B:E8:66:C6:CA:B7:8C:E4:5C:7C:78:FB:28
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:84:c7:b1:c0:b2:bf:cf:f8:bc:ab:d3:e1:a3:64:e1:e9:93:
7e:c1:c9:ac:51:e1:5d:ea:2a:db:04:df:1f:aa:a2:4d:da:8e:
99:4f:df:09:fd:76:96:43:c0:37:2c:14:60:f5:f6:f7:e4:20:
ef:79:23:81:e3:2f:c1:8a:a8:0a:e6:61:73:05:13:77:65:57:
00:a1:56:54:6e:0e:b4:21:59:8b:b4:1e:6a:f3:cc:fb:fb:8b:
2f:d3:1e:37:26:1e:ed:50:38:f3:d1:09:c6:b3:e5:a2:4b:d0:
55:9f:7e:11:8e:ac:8c:93:11:3b:74:a5:4f:05:0f:ea:41:59:
54:7d:1d:e0:79:a9:93:7f:a7:24:ef:2a:6a:91:e5:f7:2f:98:
ee:00:e6:78:b4:9d:b6:5c:04:f9:37:97:50:bc:64:17:50:86:
c4:00:34:25:a5:5c:0c:a9:78:52:b5:0e:3c:f5:3c:cf:6a:22:
75:93:62:0d:6b:f9:8e:79:72:8e:bb:b7:88:c9:34:5f:32:31:
f5:fe:c7:42:fc:3b:c1:eb:b1:b1:9f:27:40:0e:8b:dd:b5:5a:
ce:05:f4:de:f6:67:3a:c1:d9:30:60:5f:de:4d:86:c0:27:c6:
ff:8d:17:c5:4c:d5:33:60:50:48:20:5d:40:a8:a4:dc:c8:17:
69:ab:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:32:56 2025 by rpki-client