Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: CJW9ydVGFwuqt+IXYb4bytzmL9t0NC1jw6dPpjAbYbQ=
Subject key identifier: 60:3F:8C:6B:FF:DC:A3:AD:00:D0:A1:2B:5E:17:A0:F9:35:42:81:5B
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 0196759E4BE110261CBFE2F980E96E549EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 074C
Signing time: Sun 27 Apr 2025 05:00:30 +0000
Manifest this update: Sun 27 Apr 2025 05:00:30 +0000
Manifest next update: Mon 28 Apr 2025 05:00:30 +0000
Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: dlOD367QhWBaRWfmoyO1rUjE/itF854sbDb+Da8wxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:4b:e1:10:26:1c:bf:e2:f9:80:e9:6e:54:9e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Apr 27 05:00:30 2025 GMT
Not After : Apr 28 05:00:30 2025 GMT
Subject: CN=603f8c6bffdca3ad00d0a12b5e17a0f93542815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:8a:92:7b:27:da:fd:ff:07:3a:50:ba:b6:
9e:76:78:44:8b:ca:2b:35:cf:38:f6:df:f3:f1:5d:
80:70:2a:1a:5a:96:48:f0:e4:eb:9e:47:39:0f:98:
d2:5d:52:e3:e0:00:bc:07:b5:81:26:b1:63:02:ee:
07:d1:a0:42:1c:01:be:00:cb:76:02:f8:a8:de:a1:
d2:c8:8c:56:7a:40:ba:de:70:e3:b2:4e:35:af:42:
8f:49:dc:f9:d4:1f:11:0a:29:52:34:b4:52:a1:7f:
7e:67:b4:7b:bf:5a:fd:fd:90:36:4a:0c:52:6b:40:
ff:29:2f:bd:9e:65:83:67:3b:ef:50:f5:ff:2b:f4:
60:fa:fd:da:9b:33:9f:3c:b0:59:c7:39:35:7d:03:
3b:40:d4:d7:32:b4:c9:f0:ec:75:17:7b:03:32:fd:
42:6b:78:2c:8f:45:ea:64:d2:01:36:64:16:88:a2:
85:3f:70:21:42:11:73:ff:60:aa:17:13:84:41:ec:
f7:6f:1d:d0:02:d1:af:39:4d:b3:ff:b8:e8:f5:a6:
65:46:6a:c4:11:97:0a:a9:f9:af:e6:2e:28:dc:2a:
41:af:13:b8:07:e1:ee:ff:38:56:03:ee:64:95:ce:
13:e0:a6:c8:de:da:83:5b:36:00:ee:ec:a8:52:9a:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:8C:6B:FF:DC:A3:AD:00:D0:A1:2B:5E:17:A0:F9:35:42:81:5B
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:57:a6:ad:1b:c0:3e:ca:04:0a:36:0b:05:2e:0f:43:b1:9f:
c7:48:16:b9:7c:1b:38:d8:e0:2d:9b:f2:9a:5a:ce:b8:fc:48:
23:0a:6f:4e:dc:af:22:3e:49:c7:19:d6:db:8c:50:75:d3:6e:
e0:a0:78:9c:b1:16:ff:af:64:1f:22:30:b6:89:33:81:f0:3a:
33:af:1a:68:69:54:17:f6:c1:17:87:9b:c2:fb:d2:39:41:24:
26:c0:59:b4:f9:81:01:f8:c2:18:2a:83:b9:32:b8:17:c1:ac:
d3:fc:4a:51:e6:b4:27:3e:62:99:58:f8:b8:15:69:d6:bf:ba:
2e:7c:5e:bf:88:e5:41:81:94:a9:80:c7:ac:ff:f9:54:29:b4:
32:e5:5f:47:1f:85:ad:02:5e:3e:e7:0c:3b:8d:32:78:c8:ba:
2e:14:a8:ce:05:44:55:76:35:ba:88:e6:f7:b7:4a:d0:da:b3:
c0:dd:aa:78:41:0f:f9:ee:b7:61:8a:2d:39:3f:23:a9:b9:03:
ae:ec:c1:15:f6:60:fc:6e:07:ca:9b:90:e0:1f:c2:80:fa:2f:
48:52:9c:36:82:86:97:d1:52:73:a3:7c:20:d3:ee:49:05:7e:
d2:73:3a:73:40:b8:ba:7a:b3:f6:cd:0d:3e:25:45:36:18:37:
0a:ff:83:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nkvhECYcv+L5gOluVJ7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWJlMmIzNjc5OTA0YjYwYTJmYzM5OWI3ODA4MWM4NmIw
MzhkOTkwHhcNMjUwNDI3MDUwMDMwWhcNMjUwNDI4MDUwMDMwWjAzMTEwLwYDVQQD
Eyg2MDNmOGM2YmZmZGNhM2FkMDBkMGExMmI1ZTE3YTBmOTM1NDI4MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rKKknsn2v3/BzpQuraednhEi8or
Nc849t/z8V2AcCoaWpZI8OTrnkc5D5jSXVLj4AC8B7WBJrFjAu4H0aBCHAG+AMt2
Avio3qHSyIxWekC63nDjsk41r0KPSdz51B8RCilSNLRSoX9+Z7R7v1r9/ZA2SgxS
a0D/KS+9nmWDZzvvUPX/K/Rg+v3amzOfPLBZxzk1fQM7QNTXMrTJ8Ox1F3sDMv1C
a3gsj0XqZNIBNmQWiKKFP3AhQhFz/2CqFxOEQez3bx3QAtGvOU2z/7jo9aZlRmrE
EZcKqfmv5i4o3CpBrxO4B+Hu/zhWA+5klc4T4KbI3tqDWzYA7uyoUprhUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA/jGv/3KOtANChK14XoPk1QoFbMB8GA1UdIwQY
MBaAFLkb4rNnmQS2Ci/DmbeAgchrA42ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTkt
MmI5YmY4MDUxYzhiLzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTktMmI5YmY4MDUxYzhi
LzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1emrRvA
PsoECjYLBS4PQ7Gfx0gWuXwbONjgLZvymlrOuPxIIwpvTtyvIj5JxxnW24xQddNu
4KB4nLEW/69kHyIwtokzgfA6M68aaGlUF/bBF4ebwvvSOUEkJsBZtPmBAfjCGCqD
uTK4F8Gs0/xKUea0Jz5imVj4uBVp1r+6Lnxev4jlQYGUqYDHrP/5VCm0MuVfRx+F
rQJePucMO40yeMi6LhSozgVEVXY1uojm97dK0NqzwN2qeEEP+e63YYotOT8jqbkD
ruzBFfZg/G4HypuQ4B/CgPovSFKcNoKGl9FSc6N8INPuSQV+0nM6c0C4unqz9s0N
PiVFNhg3Cv+Dhg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:56 2025 by rpki-client