Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: fgI79zrF9mHXBGnPykQaI9TVgoWRtFbi3gtpkpX3eIM=
Subject key identifier: 61:49:FA:C1:E5:AE:6E:28:92:7B:40:A5:FF:B1:26:4F:B5:AF:EC:7E
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 0196C9BBCBB4765AE41881C05241288D5F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 13:00:49 +0000
Manifest this update: Tue 13 May 2025 13:00:49 +0000
Manifest next update: Wed 14 May 2025 13:00:49 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: tHw7LPzCv20IWOPLz5NckGNehOhZuEvwUjCRfJRyM1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:cb:b4:76:5a:e4:18:81:c0:52:41:28:8d:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: May 13 13:00:49 2025 GMT
Not After : May 14 13:00:49 2025 GMT
Subject: CN=6149fac1e5ae6e28927b40a5ffb1264fb5afec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:21:52:5f:fb:b1:da:42:fa:37:23:33:e3:
3c:3a:3a:9e:f0:3f:5f:f7:60:8c:97:1f:8d:16:07:
4d:eb:ea:54:12:44:5f:a1:01:39:32:c5:34:10:2e:
92:e1:d5:88:bb:4e:d0:eb:53:5e:85:8b:40:9c:8f:
75:86:cf:3c:67:22:8a:c9:92:bb:dd:f5:68:60:3a:
fa:3a:3e:0f:e2:e7:1c:60:89:aa:79:fa:f4:05:5b:
66:cd:0b:13:0a:8a:12:38:a7:08:66:2e:d8:e2:7a:
11:b4:91:22:54:f7:8a:33:57:f7:57:51:e3:8d:95:
6e:5a:88:da:ef:36:2d:02:e8:fc:f8:20:69:38:14:
14:ab:38:7c:68:aa:bf:7d:a5:b2:84:0e:2b:50:75:
c0:29:46:43:49:64:b2:04:02:c9:47:58:14:03:4b:
23:f2:98:ed:e7:b0:15:fc:fc:d4:6d:17:21:17:4f:
e4:c3:b5:7b:6c:2e:af:62:98:6a:d6:ee:70:e9:2d:
d4:b6:ad:58:61:32:7f:2b:d5:65:15:5d:67:fc:bb:
96:f7:cf:cc:40:0d:82:ae:b5:15:15:cf:92:2c:7b:
a2:3a:d8:56:cf:c0:de:8f:01:7f:70:08:5b:d2:6e:
a5:33:16:73:2f:6b:c1:e5:a6:aa:84:9f:0c:67:27:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:49:FA:C1:E5:AE:6E:28:92:7B:40:A5:FF:B1:26:4F:B5:AF:EC:7E
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:92:ce:d4:b5:53:3a:e6:a5:fe:86:ed:9b:ad:51:5a:6f:03:
9b:67:64:f0:42:65:ed:9a:9e:b2:c2:a4:43:60:e5:93:eb:f5:
f8:8a:8f:6b:c2:ad:14:5f:3a:e9:69:fb:5c:2a:39:b5:21:05:
81:8f:db:a5:74:bf:62:22:0a:18:80:aa:de:72:42:89:99:9a:
4f:6a:9c:aa:18:a7:95:37:dc:d0:c0:ab:4c:81:e5:2c:28:68:
e8:33:43:55:18:00:06:01:b3:1e:17:75:5b:ac:11:15:c0:7a:
33:dd:09:5a:e7:60:8b:35:6b:25:e4:f7:75:3c:1a:de:76:e0:
f3:ed:86:97:33:62:95:74:6d:80:01:2f:be:18:b6:8e:8d:92:
cd:66:c0:f9:1e:0a:7a:ae:e5:c8:70:1f:67:97:80:6b:f0:7f:
ef:7e:3f:fb:70:ad:2d:e3:e2:26:88:ee:b4:8c:a1:6e:9a:3d:
7b:65:7f:a7:aa:fd:e4:6a:6d:ac:bf:5f:72:a0:24:6d:8f:a3:
65:cd:66:46:2d:e1:00:53:d8:20:30:1c:13:b4:7c:94:1a:f8:
35:49:32:af:dd:96:5b:e3:9a:e6:5d:4d:22:f5:d4:14:da:6d:
ad:7f:3e:f7:b7:5c:d2:64:96:9e:23:a5:da:76:8d:67:6f:fd:
8e:3c:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:41:18 2025 by rpki-client