Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: +qus1WkXQXzcUs3fq5SNh2sG/KFiF5Ck8BdWK/n+pOs=
Subject key identifier: BB:AB:31:86:5A:05:D5:03:AF:9E:2F:46:C6:62:B2:C0:50:77:98:3F
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 0199FF59532EA7EAD482AF0FACA4E7CD5E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 0921
Signing time: Mon 20 Oct 2025 02:01:08 +0000
Manifest this update: Mon 20 Oct 2025 02:01:08 +0000
Manifest next update: Tue 21 Oct 2025 02:01:08 +0000
Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: 92OcPFRcbs7vSmeH2WFhbMIrb7Rd/fumDlhTf5S68DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:53:2e:a7:ea:d4:82:af:0f:ac:a4:e7:cd:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Oct 20 02:01:08 2025 GMT
Not After : Oct 21 02:01:08 2025 GMT
Subject: CN=bbab31865a05d503af9e2f46c662b2c05077983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:76:d1:92:2b:96:98:65:8b:9a:07:c1:3c:
8a:df:15:3f:f8:ac:54:d8:9a:c3:4d:af:a5:b2:68:
ed:73:2c:37:1e:57:75:76:ad:48:db:5a:4d:38:79:
ad:df:5e:eb:fd:73:57:b4:ac:47:eb:b6:3a:4c:a5:
2f:41:ce:f1:14:f8:0a:fd:1c:18:f4:dd:8a:85:05:
3e:db:d5:b7:20:f6:c5:29:52:84:e6:93:de:5f:c0:
94:43:05:e0:af:35:38:29:1c:33:92:49:62:32:bf:
0f:7c:b8:b6:e1:bd:61:ed:b1:4e:b5:0c:6a:b1:ed:
d3:33:f4:02:8a:61:58:d2:5a:80:0c:32:13:9b:2f:
9c:f5:af:a9:fa:62:5e:bc:a4:ef:40:63:e9:49:5e:
84:25:7a:5a:9b:dc:4b:8b:56:b8:d2:78:f7:6b:dd:
7a:0a:5b:6d:57:2c:2b:8a:06:66:c3:b2:de:6b:0c:
6d:92:3a:8f:c8:3d:95:c7:d1:f3:13:35:ff:3d:29:
da:ce:fc:9c:a8:65:ad:af:09:dd:aa:05:81:fa:71:
a2:f9:89:d3:b8:30:9d:53:10:cd:11:cb:72:6c:86:
b7:79:68:7b:b2:7a:68:13:2a:96:ad:f0:19:b0:8d:
9b:55:83:0a:47:d5:c6:8b:3c:4b:0c:98:69:0e:43:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AB:31:86:5A:05:D5:03:AF:9E:2F:46:C6:62:B2:C0:50:77:98:3F
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:41:7a:0c:ce:b8:a3:fa:12:79:66:1b:3a:49:c3:39:00:7b:
df:cf:6a:ba:d0:cf:fa:bd:1f:3c:85:65:9d:f1:ec:e4:1d:4b:
33:c8:5b:73:4b:7c:4b:3c:80:37:58:c5:3d:c2:60:96:ce:ee:
0d:50:ba:ef:fb:a1:7d:ed:98:b1:f8:de:a3:af:09:b4:94:8d:
88:f4:38:05:3f:88:58:b7:44:22:31:14:b3:97:45:a4:c3:b8:
c5:95:6d:a0:18:6a:e5:9b:ca:f5:a8:cd:56:e7:86:77:b0:9b:
4c:ad:ea:2b:78:ca:65:4e:c2:4b:3c:82:58:5e:10:b5:6e:1a:
e2:f8:19:cc:5e:0e:be:f7:e4:e6:e2:8a:79:3e:22:1b:05:8f:
88:f4:ff:02:c5:4f:0c:8c:f8:60:b3:00:4c:18:86:12:a7:ff:
cf:c6:e0:4b:5d:aa:29:46:e4:68:8a:88:bd:a1:d9:10:75:de:
1b:6d:5b:93:9a:27:1f:d8:d0:cc:d5:d9:15:ab:00:8f:03:a7:
32:f8:84:8d:a9:ce:62:e7:9e:ae:90:72:ec:f6:e1:07:fe:2c:
5b:24:35:c6:c2:aa:52:e2:98:6c:fd:90:42:e3:1e:ef:cf:cd:
72:c4:be:97:1a:ab:d3:6f:54:16:38:02:e9:af:81:01:6d:d5:
d1:0e:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:05 2025 by rpki-client