Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: sGfputuWASP345Pgc1AsJmB6WCL1lN5hfinA3TbZTWI=
Subject key identifier: CF:11:51:5F:08:BF:2B:8D:BB:91:B6:3D:CF:A5:79:78:5E:43:B2:07
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 0196B935926D564C14E363B4CC6EBD3E98ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 061A
Signing time: Sat 10 May 2025 08:00:17 +0000
Manifest this update: Sat 10 May 2025 08:00:17 +0000
Manifest next update: Sun 11 May 2025 08:00:17 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: bPFlekwxvLvsCc2mt4Jbt5l6+23aDlggi3YNm6fa9g8=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:92:6d:56:4c:14:e3:63:b4:cc:6e:bd:3e:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: May 10 08:00:17 2025 GMT
Not After : May 11 08:00:17 2025 GMT
Subject: CN=cf11515f08bf2b8dbb91b63dcfa579785e43b207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:6c:ba:3a:bc:65:55:cc:cd:e2:db:d1:c3:
09:17:66:22:76:be:5e:41:27:6d:54:d7:3c:83:bd:
a1:03:1d:4c:5a:28:95:8b:a2:81:c9:ee:69:26:a0:
80:84:c6:96:86:c0:9f:a4:ec:e9:e3:24:c8:c0:c9:
8b:45:c1:4c:e0:12:30:cc:3d:30:e5:9a:31:db:e3:
2b:78:18:25:c7:75:99:1a:27:fc:0a:5b:8f:fa:c7:
87:e6:3a:ee:74:29:88:d4:76:67:ea:63:f3:8c:d0:
6e:0c:65:6a:02:a1:5e:b1:b0:a1:59:d1:bb:b4:7d:
a2:0d:ae:01:ff:88:42:d7:4c:28:49:59:bd:a2:a6:
6c:51:c3:04:98:1f:8b:c8:95:39:aa:9a:a0:78:61:
83:32:90:34:8b:d9:8c:a3:4a:a4:73:c4:07:58:be:
a2:8a:23:27:46:f2:33:23:27:87:df:23:9c:8b:15:
af:1d:5d:55:c0:d5:cd:10:db:b0:b7:62:60:4b:36:
fe:a4:0e:90:90:e0:74:9f:ea:65:12:e7:08:8b:ab:
94:61:ce:06:d4:ed:1e:e8:bb:d7:3b:1a:03:4d:24:
47:91:a1:85:f0:01:23:80:0d:71:35:39:c6:56:ed:
bb:bd:4e:bb:38:5b:84:4e:63:87:11:2b:7e:da:24:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:51:5F:08:BF:2B:8D:BB:91:B6:3D:CF:A5:79:78:5E:43:B2:07
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:e2:00:a3:d0:b1:d5:c5:fe:3b:6b:fb:b5:09:2e:f9:b4:
7d:c9:82:68:e5:75:a0:6f:ac:0b:f9:92:7e:97:e4:7d:c4:d3:
90:7f:1b:61:b5:21:34:69:b3:81:48:55:e8:ed:93:8a:cb:ea:
cf:e4:14:f7:4b:6e:71:ad:6e:06:52:b8:55:ac:d4:9e:66:94:
70:f7:bf:0d:c0:b0:0e:89:46:50:33:c3:fb:19:f3:84:7e:c3:
db:b7:25:94:fe:ca:3d:de:00:02:e9:94:32:49:67:2d:10:50:
8b:ef:dd:ea:d7:0f:62:97:b2:bd:d4:31:ee:c1:fd:34:df:05:
39:a9:d3:21:f2:fc:f8:4c:21:3e:54:20:f9:2d:1f:ec:70:6c:
b3:a4:a1:5b:5d:77:af:6e:69:d7:dc:a0:be:cf:af:5f:0b:21:
c4:8f:be:f8:7e:dd:7f:af:90:67:f1:6c:26:58:28:b5:2c:87:
1d:25:8b:69:ec:d2:c3:3d:bb:7b:e2:98:f1:d5:69:05:96:5c:
25:d7:9c:8d:ad:ff:c6:e6:b9:1c:cd:56:f0:61:c5:6a:66:da:
26:3e:7c:ce:62:18:fc:cf:c7:10:1a:6a:69:d3:73:61:fa:a2:
83:14:51:f5:c9:6e:63:bc:1f:85:74:37:08:57:dc:c3:6d:6d:
c4:3c:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:19:55 2025 by rpki-client