Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: cZC6YX4xaIoX8rlX7vqZiB8xTBhLatjXrv9OkODrOOM=
Subject key identifier: D1:22:B1:07:42:24:6A:BF:E6:CD:3E:0E:A9:72:9D:BA:EE:10:7B:B1
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 0199FBEAFEC0B2D1F24315766A5A5F556086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 4B
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: DCMHJ6fM3fqTr3hirY1DKviVBEVI9ETaiGw7KYxlpiM=)
2: saWdrzat9gNhwDjToVtk8WsFYgw.roa (hash: gICbNWmSBInV+7Bf/50oOLEAVR12IrqsEIFbrP0sB00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fe:c0:b2:d1:f2:43:15:76:6a:5a:5f:55:60:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=d122b10742246abfe6cd3e0ea9729dbaee107bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:5d:cb:44:3c:41:04:d9:07:82:b6:be:68:
f8:c2:9f:e0:40:57:1b:a5:ec:fb:0b:77:14:50:ae:
ee:85:68:56:6c:48:c1:e0:1f:8f:ee:bd:b5:8c:d7:
24:56:e1:9d:37:a0:f0:2c:fc:31:e7:b9:30:79:fc:
fc:eb:13:03:60:5a:ab:2d:e1:56:a1:b7:ed:50:2e:
d3:55:47:3d:f5:a5:9f:fd:17:06:79:6d:fb:cb:61:
04:a3:a3:2c:a7:76:8b:91:69:61:33:8c:c1:f8:59:
64:64:a2:20:a8:e7:5b:0a:03:c0:0e:3f:cb:ba:f1:
d5:88:34:5b:89:4b:4f:11:e5:7c:3a:cd:07:41:60:
e3:85:20:80:f1:3d:e8:ae:80:82:b2:7c:3b:08:85:
9a:3e:70:21:b7:7d:b9:23:2a:0a:9f:31:47:2a:8f:
ce:92:ed:1a:7f:6b:11:63:70:fc:7c:61:85:15:ac:
5d:14:50:a8:3a:98:ca:d7:a4:3a:d3:05:d4:58:96:
b6:e2:83:7d:60:15:d1:95:de:de:b9:3c:3a:7d:04:
3d:cf:d5:ad:a6:57:2c:38:c7:25:4e:4b:e7:62:19:
d2:63:84:50:84:6b:8b:09:51:e2:08:8f:d6:0c:a0:
29:f5:f1:09:9d:8f:9a:88:c0:1c:b6:00:e7:37:d8:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:B1:07:42:24:6A:BF:E6:CD:3E:0E:A9:72:9D:BA:EE:10:7B:B1
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:67:94:94:11:56:17:cd:9e:32:24:4e:06:b1:fa:e8:f2:
ae:cd:32:e4:3b:7c:c0:e4:80:ed:16:7c:a2:9d:36:00:78:05:
2e:05:ca:9d:b9:83:09:7f:97:cc:81:46:6d:ac:d1:c2:8e:30:
62:9b:75:41:df:32:41:d4:19:90:b9:e8:0e:c0:a7:53:5e:91:
83:ba:2e:89:5f:60:39:16:c1:05:cc:8c:00:4f:87:74:37:45:
6b:be:50:fb:8c:57:2d:5a:a1:ec:4e:dc:3a:a3:30:a9:46:74:
28:64:f8:db:b6:db:71:49:da:ad:63:56:c5:2a:9b:a9:3f:1a:
86:49:10:5a:e0:52:c5:d7:91:75:02:87:fa:29:2d:8d:14:8e:
88:7a:b4:38:d6:0b:18:44:15:4f:4d:4f:38:a7:3a:1f:04:2a:
cd:ef:64:49:6f:2a:e3:de:2e:82:51:3d:5e:64:8f:81:b7:62:
af:df:5d:54:2f:ff:28:67:48:de:2f:89:c0:77:cc:47:b6:c7:
e2:65:aa:03:c5:6c:7e:2a:fc:56:4f:a5:df:a6:1b:d6:a4:51:
67:82:a5:cc:7f:09:36:69:78:86:e6:34:ac:35:70:7e:34:f3:
f1:5c:95:61:81:92:1c:b8:e0:88:ae:c9:4a:db:5f:d6:fb:93:
23:5e:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:17 2025 by rpki-client