Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: INloNd/ANuQwb2riaZzg3uhZaxFoz11/R/JKAEEEdtI=
Subject key identifier: CE:A0:9C:06:74:25:E7:AC:6B:D5:82:62:2E:E2:6D:EE:20:78:22:99
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 0198D4DFE7C75DE10D718DA088660093E95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 1357
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=)
2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: F9wjrNGSOFoxJp18+s8yJO+SI0wGrz9o1NUEew16Ptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e7:c7:5d:e1:0d:71:8d:a0:88:66:00:93:e9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=cea09c067425e7ac6bd582622ee26dee20782299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:65:32:07:b9:b1:7a:8c:1d:22:f8:bb:6d:
46:be:05:87:69:81:04:c6:c4:2b:59:c6:c7:0b:e4:
6f:09:ba:55:44:a3:87:b2:24:e6:25:a1:9e:61:d5:
65:b2:ea:ec:cc:74:e2:05:a3:da:0b:f3:d1:69:b0:
99:bb:34:be:15:4f:a3:3c:1d:85:12:88:b1:19:ad:
67:3d:c2:3e:e3:2b:fb:b7:6e:0b:42:42:94:8f:a8:
d6:72:3b:80:d3:86:58:b1:07:5b:7f:88:79:fc:22:
dc:48:17:34:82:08:5f:48:b6:d4:98:62:c1:e6:b4:
28:81:b9:0a:47:c3:5b:e5:87:cd:d3:aa:52:34:a3:
f9:6d:65:86:6c:14:c3:8d:2c:88:7c:aa:86:80:af:
07:13:bf:5e:7e:22:e4:b4:ce:79:9f:3b:16:2d:f7:
93:0b:e4:5a:4f:26:f5:1e:96:63:fd:82:86:f3:71:
ca:51:86:7a:3d:f4:bb:15:ef:7d:07:17:d8:43:b8:
5d:74:7a:cd:03:95:22:a7:cd:55:8e:fd:8f:4a:88:
cc:5a:d1:b2:fe:98:61:91:50:bd:b7:a3:6b:16:23:
b7:f3:17:b1:71:9c:41:0d:63:bc:8b:82:89:99:08:
30:cd:fd:b3:63:5f:2f:42:62:f2:93:34:b2:5a:39:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:9C:06:74:25:E7:AC:6B:D5:82:62:2E:E2:6D:EE:20:78:22:99
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2a:94:13:b8:6b:33:6f:44:66:14:2c:f3:ff:22:b6:a0:bc:
6a:8a:e6:e2:e7:95:cf:e7:90:39:65:44:c5:28:d9:60:93:0b:
f6:a7:97:52:36:79:1c:ca:b0:eb:52:00:60:f3:d7:f6:16:12:
6d:e5:6a:f5:71:77:14:06:44:e2:d0:e2:e8:59:12:a7:c2:eb:
37:56:2a:7f:52:9e:80:83:32:5a:4e:ef:02:b7:b6:fc:61:49:
12:35:f1:df:d7:7f:ed:ff:13:c8:05:fc:6f:8a:29:67:70:b6:
e3:27:90:9b:a4:ec:3f:cf:45:ee:c4:74:26:03:fc:c4:d5:86:
77:e1:7a:ad:d5:cc:17:f1:16:f6:d0:0a:7b:67:b6:62:37:dd:
38:94:67:1f:19:6b:17:0a:38:4a:a8:5d:db:f2:40:51:7e:35:
6e:e6:8c:22:98:36:4e:32:35:a6:24:5b:f0:ad:fa:fb:9b:22:
ab:96:ee:31:7f:fd:e7:39:5f:34:e8:07:15:44:17:f4:24:a8:
ac:e5:01:bf:0d:18:c3:53:22:94:34:b9:f0:95:ea:7b:c4:a1:
b5:49:54:37:b4:04:20:6e:b6:2d:76:cf:ac:05:d8:4c:10:db:
c6:4c:b9:d3:be:3c:81:61:ea:3c:93:03:5f:cd:ef:b8:e8:01:
8f:8f:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:12 2025 by rpki-client