Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: xV3jz790VYFY1tlxmMsbdQMREA3VuPEfvskVip3AmgU=
Subject key identifier: 62:55:6A:AF:C7:15:FE:F9:AF:3C:F0:26:C4:6C:93:98:B4:AE:93:A1
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 019A714A018B957DF9CF12EA53DDADB48887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 095C
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: Z2K3fv6AUyE85tE8qfaeOgDI4NLWMSZPqmjEZGa+eEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:01:8b:95:7d:f9:cf:12:ea:53:dd:ad:b4:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=62556aafc715fef9af3cf026c46c9398b4ae93a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:f8:33:e1:9d:c6:e0:36:e6:ac:89:39:d5:
be:fc:b0:42:9f:9d:28:a3:6a:11:a6:d1:b1:ae:7e:
30:08:23:ad:ef:53:58:0e:b2:08:e3:1c:36:3d:a5:
0f:07:b4:97:e6:9d:10:14:21:88:c4:06:e7:e6:66:
6e:98:f8:24:11:77:53:c9:14:16:90:1b:d5:b1:e7:
b5:6c:00:58:83:c3:f0:e8:b6:d6:06:a0:0d:55:bd:
72:fb:8e:f7:d4:ce:63:c9:9f:c8:d6:c0:5b:c7:99:
0e:36:8c:70:5d:25:01:21:6b:bf:45:54:e8:0e:1a:
ae:02:d7:33:1e:18:16:42:49:c8:5c:b0:f9:ca:0b:
21:96:eb:9c:7b:d0:ad:f8:27:0a:6f:7e:34:72:00:
01:f8:6e:c8:7d:7c:13:b7:39:48:d9:36:16:c8:ff:
cf:fd:c6:db:b0:78:9d:f0:71:44:84:2d:b8:7f:fd:
d4:07:f1:86:65:de:82:0a:87:c8:8e:54:91:9e:fa:
67:76:ba:27:a3:fe:49:58:c6:cf:1b:0c:c5:33:e9:
30:e1:35:26:5b:85:7f:f4:fd:24:7c:95:09:5f:fc:
5a:df:d6:00:6b:b0:85:3c:a7:16:56:d5:aa:3f:f5:
bb:1c:95:80:e0:d2:f8:a0:c3:17:4d:53:2f:71:ec:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:55:6A:AF:C7:15:FE:F9:AF:3C:F0:26:C4:6C:93:98:B4:AE:93:A1
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0d:62:58:86:ea:b2:f4:c7:1d:0d:55:90:bd:d7:1a:84:35:
c8:a7:02:bf:24:13:d8:2a:c8:f1:ee:32:01:a7:e0:81:2b:a3:
f7:83:06:2d:7f:01:dd:46:cb:14:0d:9d:7f:93:8c:47:a9:4a:
47:c6:48:cf:09:8e:ec:d9:04:78:44:19:88:f0:ea:c7:05:14:
30:b2:69:47:38:e7:b7:4e:95:55:87:e9:ca:c5:5a:a2:f8:25:
a6:51:30:90:56:3b:71:c1:13:32:65:65:4c:a8:33:24:7a:14:
fb:86:53:a7:ce:5d:ca:e3:7e:e6:c1:d3:be:82:82:1d:ce:0b:
9b:07:56:30:53:1d:67:d7:19:9e:91:17:cd:a5:7c:c2:8a:b6:
2c:6e:ee:c1:3f:fe:3b:2e:96:ca:ea:eb:d7:0b:1a:c9:b2:48:
1e:60:f3:61:82:3f:b9:bb:3e:60:c9:38:cc:88:ec:8e:56:2a:
bc:51:0a:49:64:38:44:9d:54:b9:7f:da:10:a8:21:94:e5:df:
b8:ae:f2:ca:4e:19:d1:09:9d:ea:ff:4d:30:2b:7b:0d:01:02:
d1:13:3c:29:41:84:e6:ec:5d:82:7a:2d:f1:41:fc:27:bb:dc:
fd:bf:12:5e:8b:cd:a3:1d:ee:dc:3b:28:0c:cc:eb:e2:34:89:
87:4c:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:17 2025 by rpki-client