Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: O6yjcA+Yaf2nWbzgdJ08GgAhHsIsUOronLtF6wMOCYs=
Subject key identifier: BA:C3:D3:8E:15:76:67:0F:49:0F:C8:41:A3:4D:E7:3E:B0:E5:1A:D1
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 0198D5F19830A2FD2D3A5AE9E094F2D90A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 0887
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: IwCbokaXpsRnWO4HMl6f3VY2QmlU844VM2tWBqk1NUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:98:30:a2:fd:2d:3a:5a:e9:e0:94:f2:d9:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=bac3d38e1576670f490fc841a34de73eb0e51ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:c2:52:b7:0c:83:51:f4:91:59:26:0a:f9:
90:98:de:35:be:b5:c1:b8:65:1d:4b:da:be:d5:79:
c8:08:30:19:bd:eb:18:cd:02:05:40:5f:61:b1:ee:
24:f5:3d:60:64:c8:97:10:b7:f3:9e:a2:47:49:a5:
87:22:ed:9c:0e:40:d4:63:1e:86:e8:a3:10:67:15:
78:f2:28:0a:a7:f3:30:ce:82:ee:a4:d5:5f:19:68:
10:a3:a0:79:cb:11:9a:b5:25:f3:51:c3:9f:a6:5d:
a2:a3:3f:86:26:8e:c1:7d:e9:5e:55:b7:4d:4b:19:
1e:92:a0:22:8b:73:53:34:29:ca:10:0b:5a:a4:6c:
75:bc:61:fa:ae:51:a9:0a:1b:17:c6:52:46:63:50:
03:5c:7f:33:45:71:e2:fa:a0:ff:eb:db:71:11:70:
5d:68:39:7f:f1:1b:cc:5a:41:c6:a9:89:ce:4a:8e:
24:88:20:04:7f:60:11:8a:b0:74:f1:8c:85:4b:72:
5c:24:1e:ec:76:78:ed:26:fc:86:5e:8f:dd:ce:2c:
42:d5:af:d8:4c:af:e8:95:0a:10:2f:1d:83:e9:62:
81:16:90:f7:ee:65:af:5a:82:29:12:ed:4d:46:ee:
10:46:92:5d:08:e0:b0:0b:a8:40:8f:f3:8f:54:87:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:D3:8E:15:76:67:0F:49:0F:C8:41:A3:4D:E7:3E:B0:E5:1A:D1
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:be:07:0a:0a:90:6a:63:58:fc:21:00:83:76:52:0e:c7:24:
2b:75:e0:2d:cc:eb:58:91:2a:8d:2c:75:e7:9e:af:1d:58:17:
fb:63:0d:af:8e:cf:16:6d:35:05:e5:7d:09:81:db:d3:d6:06:
7b:0f:9c:07:32:bf:17:08:58:a6:95:6b:4f:50:01:e5:41:61:
85:70:85:68:0b:31:f1:8a:44:80:c1:4c:7d:fb:be:ae:62:f6:
a8:68:59:0f:a6:b0:d0:43:ff:ac:f6:24:35:36:0f:25:56:d5:
a8:7b:16:08:a9:47:74:c2:7a:91:04:87:a8:51:03:56:0a:ee:
58:12:37:49:c1:5d:60:4b:ec:37:5d:f3:74:2e:95:b1:aa:87:
7e:7c:ce:3e:44:70:61:34:f4:e2:a2:ba:1b:cd:92:36:07:f3:
c1:e0:b6:03:49:3c:84:97:c8:67:a6:a3:14:d0:43:71:16:9b:
9f:22:de:d4:47:0d:9d:93:eb:1a:b5:ed:31:c8:f8:ec:89:0d:
9b:5a:eb:24:a4:98:b2:3b:90:77:ea:e9:bd:0e:3b:ab:f4:fb:
12:af:00:ce:9b:d5:1b:b4:62:ae:04:b1:32:8c:53:8e:e5:f5:
fe:6c:d6:ca:8c:12:a1:ca:a3:a6:ef:5a:05:45:35:73:ff:4d:
f9:c6:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:08 2025 by rpki-client