Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: aGVsQiEFmKifFsrNp72zinzDTwFqaHh2dVj3IsiuB2U=
Subject key identifier: B2:B6:AF:A8:46:7E:91:FE:8D:8E:E7:D1:B8:3E:5D:91:72:40:CB:FD
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 0197B8212DBB51BFB2D17784ABAE60C80399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 07F3
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: 56uY8RjY9mOpAbeLiFgG1RrzLg7dWbFZkDBT7Gc3kvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2d:bb:51:bf:b2:d1:77:84:ab:ae:60:c8:03:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=b2b6afa8467e91fe8d8ee7d1b83e5d917240cbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:b3:a0:b1:05:af:57:4f:b1:54:13:18:2a:
6d:55:b0:6f:03:b9:35:bc:62:f1:57:31:ad:4a:73:
90:a2:aa:01:fd:c8:1c:69:69:b9:3d:80:4f:e2:0b:
1a:ab:80:88:e6:b9:3a:5d:a6:4e:a2:31:5c:c8:1d:
81:e5:8b:ec:15:41:17:30:18:8a:2a:c8:dd:3a:15:
38:bc:26:cd:e9:84:cc:1c:24:99:71:c3:17:38:b7:
7a:f9:24:72:82:15:4c:6a:21:85:c7:37:fe:7f:28:
d8:e0:35:b3:ea:2f:cf:3e:09:47:07:71:2e:e2:91:
80:58:cb:83:4d:16:fd:b7:68:80:b9:78:c1:9d:f9:
90:a5:96:a3:74:a7:4f:d5:83:e7:a9:c0:33:18:89:
be:8b:8b:51:c4:c2:1f:1f:3c:f5:64:02:be:74:4d:
a9:b5:d5:23:71:d7:57:70:20:8f:61:31:2c:64:a4:
7f:70:e4:e5:a0:69:42:52:a2:05:12:f0:1e:76:4c:
c8:02:63:18:30:6f:9d:4d:b2:c4:7e:f9:98:18:99:
0f:5d:c2:a7:ae:81:e0:d6:a7:ed:cc:31:57:5a:3a:
33:b3:70:24:07:96:b9:c8:c4:e6:51:37:cd:7d:0e:
9a:20:10:b4:62:58:dd:d9:29:ef:06:cb:30:9c:e8:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:AF:A8:46:7E:91:FE:8D:8E:E7:D1:B8:3E:5D:91:72:40:CB:FD
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:76:8c:29:1c:d6:a8:dc:68:e7:bb:54:62:dd:19:df:ba:
75:61:de:0a:37:1e:ee:33:51:ce:62:a2:4f:dc:e7:06:2d:6d:
70:c5:ba:b8:67:58:7a:6e:07:4d:c0:3c:f4:dd:30:35:36:58:
56:ae:31:ee:ad:2e:ad:77:c9:5f:74:4c:9d:fc:f8:ee:f3:c9:
a1:22:bd:92:ba:21:80:66:83:ca:eb:63:dc:2c:fe:8d:fa:78:
02:d9:27:27:e3:c8:b6:3d:2d:cf:51:87:0b:0c:57:c1:5e:f4:
6b:27:22:ae:4a:53:13:18:1c:0b:61:6f:87:c7:9a:74:4f:d2:
67:50:ef:f2:e3:3c:ce:fb:7e:a6:d8:40:5d:a3:cf:d1:6b:0b:
1e:c9:5d:c2:03:46:d1:82:f9:04:4a:4d:47:0e:46:85:b6:4e:
e7:0d:81:b4:e8:20:57:62:56:cc:40:a7:7b:1e:00:69:f3:f1:
0f:8b:db:81:2a:6d:74:b2:5f:22:57:12:62:2c:af:e5:46:33:
79:3e:4a:1a:da:5e:67:f7:5c:7d:85:73:62:47:47:00:d6:d7:
be:12:5b:af:6d:01:8a:c8:d2:88:1d:2b:4d:b6:e8:83:3c:23:
19:71:8c:c6:fd:11:b2:03:72:23:6b:76:ad:33:d6:37:f8:57:
9e:32:4c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IS27Ub+y0XeEq65gyAOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWJlMmIzNjc5OTA0YjYwYTJmYzM5OWI3ODA4MWM4NmIw
MzhkOTkwHhcNMjUwNjI4MjAwMTExWhcNMjUwNjI5MjAwMTExWjAzMTEwLwYDVQQD
EyhiMmI2YWZhODQ2N2U5MWZlOGQ4ZWU3ZDFiODNlNWQ5MTcyNDBjYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGWzoLEFr1dPsVQTGCptVbBvA7k1
vGLxVzGtSnOQoqoB/cgcaWm5PYBP4gsaq4CI5rk6XaZOojFcyB2B5YvsFUEXMBiK
KsjdOhU4vCbN6YTMHCSZccMXOLd6+SRyghVMaiGFxzf+fyjY4DWz6i/PPglHB3Eu
4pGAWMuDTRb9t2iAuXjBnfmQpZajdKdP1YPnqcAzGIm+i4tRxMIfHzz1ZAK+dE2p
tdUjcddXcCCPYTEsZKR/cOTloGlCUqIFEvAedkzIAmMYMG+dTbLEfvmYGJkPXcKn
roHg1qftzDFXWjozs3AkB5a5yMTmUTfNfQ6aIBC0Yljd2SnvBsswnOjAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK2r6hGfpH+jY7n0bg+XZFyQMv9MB8GA1UdIwQY
MBaAFLkb4rNnmQS2Ci/DmbeAgchrA42ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTkt
MmI5YmY4MDUxYzhiLzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTktMmI5YmY4MDUxYzhi
LzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAx2jCkc
1qjcaOe7VGLdGd+6dWHeCjce7jNRzmKiT9znBi1tcMW6uGdYem4HTcA89N0wNTZY
Vq4x7q0urXfJX3RMnfz47vPJoSK9krohgGaDyutj3Cz+jfp4AtknJ+PItj0tz1GH
CwxXwV70aycirkpTExgcC2Fvh8eadE/SZ1Dv8uM8zvt+pthAXaPP0WsLHsldwgNG
0YL5BEpNRw5GhbZO5w2BtOggV2JWzECnex4AafPxD4vbgSptdLJfIlcSYiyv5UYz
eT5KGtpeZ/dcfYVzYkdHANbXvhJbr20BisjSiB0rTbbogzwjGXGMxv0RsgNyI2t2
rTPWN/hXnjJMcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:21 2025 by rpki-client