Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: iprqc7D+xD2RnK6RZDpgnRB9KJ2jNpjEJ3lwArUNO/0=
Subject key identifier: B7:1E:98:C9:1B:33:26:2B:32:57:B2:33:E9:26:E0:C6:D6:CA:BE:45
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 0199FC8F32308A94DF4357AFD4B8C2303E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: i35qjF+M3bwp6NEojy945O/DL7NSbcPXCJMDp78+wqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:32:30:8a:94:df:43:57:af:d4:b8:c2:30:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=b71e98c91b33262b3257b233e926e0c6d6cabe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b2:95:35:0f:1c:0f:68:95:b0:1c:52:e7:09:
cd:e6:36:d5:23:bc:18:7c:7c:d1:d5:14:9f:ee:08:
c5:c7:57:d3:ce:5c:bb:28:16:48:5a:62:ae:97:af:
6f:ad:14:8d:8a:fa:13:3c:dd:eb:ea:48:52:b0:d0:
17:8a:5d:11:b0:49:af:6a:63:8a:2b:87:7f:51:72:
57:53:69:37:30:d0:34:19:85:d7:c7:a4:d4:55:be:
8f:c8:9a:27:14:d9:05:70:98:a6:dc:42:21:13:06:
98:90:61:0a:be:5c:9e:02:13:5d:2d:95:b7:6d:72:
b1:67:e3:8d:60:68:f4:c9:de:57:39:4f:7f:eb:20:
d8:a0:60:22:db:0a:27:3b:10:a1:b7:86:2b:4e:a0:
23:c2:60:f5:61:29:11:c5:ce:03:be:11:1f:98:21:
a6:da:1e:0b:16:37:2a:bf:fe:04:6c:a9:96:cb:10:
ae:b0:da:66:ab:94:c2:5b:af:e2:70:4a:20:2a:23:
88:a3:1e:9d:0f:8c:d4:32:2a:3a:5f:0f:06:fe:af:
0a:89:93:67:5e:b0:fb:b1:d5:a5:3d:47:82:45:98:
5b:5b:21:fe:ad:23:54:f0:a7:8c:ca:eb:a3:4a:5b:
f1:28:3a:35:a8:31:cb:73:06:7e:ca:b4:4f:bb:1a:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:98:C9:1B:33:26:2B:32:57:B2:33:E9:26:E0:C6:D6:CA:BE:45
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:30:0d:5f:6e:4a:b7:34:a7:4a:be:29:f3:55:63:4d:4b:
f1:c0:e6:45:a8:bc:79:b4:32:e3:59:78:63:30:f6:bd:d8:1a:
6a:99:12:61:92:fd:f5:61:fb:d3:35:c6:08:2f:e8:cc:9c:5d:
ce:a5:07:63:dd:e4:31:0f:85:67:08:14:0c:c9:5e:9f:b7:64:
0a:ba:e6:69:3e:f0:63:b9:6d:c6:0e:b8:b4:99:6f:5e:fc:60:
23:e9:77:9f:82:14:b9:8c:5d:6b:2f:42:56:fa:a1:c4:62:e0:
58:54:25:54:2c:c3:60:79:d2:c1:37:aa:4d:68:57:40:db:f1:
5c:03:4d:9e:fc:47:4e:76:fc:5d:5c:b9:5a:99:fb:b4:6e:bb:
60:da:f8:56:b0:d1:33:c5:22:bf:e8:8b:0a:6f:1a:0f:c6:50:
e8:8a:51:ff:72:a0:f7:fa:11:89:36:23:6d:fd:cd:b3:22:22:
0f:bc:16:aa:2e:6a:57:0b:3e:f0:f7:fe:b7:52:d9:50:6e:06:
c5:d4:12:32:9c:a0:60:91:2a:81:12:63:56:f9:96:b2:74:69:
b2:b8:63:74:6d:8a:2e:d9:0b:66:41:ee:20:78:ba:b8:d6:2c:
2b:cf:9b:d8:fa:bf:ea:95:2b:ef:10:26:2f:a9:74:b1:75:b1:
7d:e0:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:31 2025 by rpki-client