Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: eTH1gkagarH9Dzni3L1Y5FbOIkZunD7BtfyVvXBm4/U=
Subject key identifier: D1:40:95:42:E2:BB:0E:1C:42:18:47:A8:3F:B7:1D:2A:D9:0D:11:72
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 0197B745AD369D0C7EF6B4F17520B3343449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: DylYFz4Bb3ebWa1C1CnqiM0nS3SIi/NWii+UZ/AXQKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ad:36:9d:0c:7e:f6:b4:f1:75:20:b3:34:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=d1409542e2bb0e1c421847a83fb71d2ad90d1172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:80:10:44:33:73:68:e8:d2:de:78:76:b1:
34:87:64:eb:c6:98:94:36:9a:04:1b:b0:a3:ba:76:
19:37:92:f2:2f:35:0f:e3:0b:77:6f:78:e1:8c:b3:
8e:58:bc:ac:75:c7:f5:e7:56:cb:1d:6c:50:04:0a:
47:c0:c7:82:40:b9:62:23:13:14:a1:b2:1f:81:58:
3f:43:a5:de:01:e6:01:fa:d2:73:fe:52:28:2c:af:
53:33:e5:db:08:15:e1:bd:a5:db:b2:45:a2:a8:e0:
62:3d:41:7d:1b:ec:aa:73:5c:d1:85:0b:e8:88:72:
3a:79:c2:a8:99:f9:b0:8b:36:26:40:41:b1:32:82:
21:5a:fd:8c:95:a0:86:ea:b9:a5:e4:23:a3:44:3c:
a6:80:46:62:5f:05:43:d4:7a:24:4f:f8:9e:74:ba:
0d:a8:2c:86:7e:e1:10:95:d8:91:65:d0:f0:7b:1f:
cd:0d:02:d5:3f:b1:97:a0:da:04:bf:9b:79:fe:18:
a6:e9:0b:a4:79:3e:29:b0:5a:62:2b:4b:79:1f:14:
b5:b3:c5:14:34:9f:7b:5e:07:6e:a3:08:79:d4:69:
83:58:8b:42:7c:ca:d4:2c:db:9a:4e:d7:31:36:0a:
98:6f:cd:64:e3:77:98:15:21:ad:f3:1f:41:2e:94:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:40:95:42:E2:BB:0E:1C:42:18:47:A8:3F:B7:1D:2A:D9:0D:11:72
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5f:9c:40:78:e8:be:d8:78:45:a3:67:01:c0:df:2b:14:4e:
6a:12:93:ca:45:d1:f7:e6:50:2d:b8:a7:06:05:85:84:53:e0:
c1:11:5f:31:ac:78:b3:fd:80:40:ce:3a:9b:1c:27:00:11:cc:
b7:8e:21:95:a2:b6:fa:32:32:c9:04:7e:bb:63:f3:81:e9:22:
9c:f0:88:48:5d:b3:98:b1:8d:2e:99:e6:43:49:b6:54:05:9c:
75:19:a0:13:31:19:4a:af:ac:cd:ff:4e:e4:83:34:b4:37:c2:
1b:83:ea:4e:da:fa:d6:08:05:fa:bc:e8:61:eb:ed:2c:d5:9c:
30:4a:00:e2:47:9d:c3:17:65:88:95:fc:08:5a:87:51:38:8c:
0b:3e:9d:b9:c4:62:6d:30:e4:25:e2:05:e5:7c:4b:77:0f:70:
df:55:e8:fa:e5:7e:60:ab:be:45:80:94:e3:1b:f0:bc:a6:c7:
b0:51:b7:81:eb:90:7f:5c:bd:4d:06:c8:49:3a:0e:08:c8:00:
5f:14:fa:01:47:e0:92:f3:01:58:fc:c7:a2:da:64:3e:ca:0f:
69:db:63:bc:b4:ad:39:b9:03:b6:e8:f3:3a:87:55:82:d8:aa:
fa:54:8a:ea:c1:65:c6:c4:92:37:21:81:7f:f8:01:9e:73:c8:
bc:3a:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:59 2025 by rpki-client