Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: y289wgRgtHfyE7Ir8/6KUzlJz6R1qZ62zKpFS29MrBQ=
Subject key identifier: 1B:BE:92:BD:20:1F:32:FC:20:FD:B2:84:28:71:A7:29:C7:B2:9A:FD
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 0199FC8F9F18C514079884800A760E232757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0D5C
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: RUx2LU3QfhNiCMz15hPLHtCQUfTL19jkDr/svfsPdzI=)
2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:18:c5:14:07:98:84:80:0a:76:0e:23:27:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=1bbe92bd201f32fc20fdb2842871a729c7b29afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:da:3c:cb:59:37:38:96:75:0c:dc:52:48:
58:56:8e:75:d5:29:2f:23:54:ba:72:b0:08:a9:ec:
1c:2a:28:d5:7a:9d:c6:ad:f7:45:c6:ba:fa:03:c0:
95:d0:6e:56:18:86:72:97:f7:2c:97:12:1a:e0:d2:
f5:0f:77:2f:86:4b:61:2d:ea:53:bf:81:5c:26:6e:
48:b5:44:c8:d5:65:b6:23:ca:20:b5:ae:e2:45:e6:
7f:fe:2a:d8:b0:ed:0b:87:03:5c:e2:d8:05:00:ff:
38:6b:21:92:d2:19:32:eb:da:14:16:01:e2:d0:44:
41:9d:26:7e:80:40:63:5c:02:fd:37:bf:17:d2:e7:
96:6c:d9:fd:60:5c:f4:de:51:cb:66:cd:76:19:6a:
fd:dc:88:7a:a9:f1:ca:14:52:14:b1:2f:2b:4a:6b:
ef:a8:82:48:e4:dc:a3:c0:4f:65:14:2a:2f:19:1f:
06:99:2e:7a:94:db:ed:9b:84:7a:20:3c:59:b4:5a:
45:f2:11:07:e1:af:db:1e:68:a4:59:ce:1f:91:bb:
2b:61:d4:42:1a:09:a8:1f:38:9e:56:9a:e7:2f:26:
17:9d:ac:bf:09:2c:1f:e8:9f:cc:9e:8d:d6:1f:ab:
81:74:54:26:e2:2d:1a:9e:f1:09:79:4b:b9:ce:fc:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:92:BD:20:1F:32:FC:20:FD:B2:84:28:71:A7:29:C7:B2:9A:FD
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:0b:74:46:fd:a1:62:ca:9a:0a:52:da:ee:94:d2:7f:e2:
1c:a1:8d:53:b9:3d:f3:b3:53:fa:44:1b:42:70:f7:57:e3:14:
ef:cf:dd:e9:0d:c3:d6:94:75:ee:2c:62:3b:6f:c2:15:77:be:
6d:84:6c:13:0b:23:45:24:3f:a2:52:47:c6:00:23:54:25:33:
aa:39:13:38:da:c7:9b:9d:cc:a5:74:03:1c:1a:17:55:84:1b:
6e:32:16:22:5b:af:ff:7d:eb:3b:e0:56:2e:1f:63:de:67:77:
f8:de:02:ca:c2:82:bf:58:18:bd:21:cb:ad:58:73:bf:df:ed:
e7:fb:5b:a3:c2:ed:7d:6d:56:5b:03:b2:dc:84:03:52:63:26:
05:a1:62:39:79:3a:2d:50:ef:1f:97:fb:0c:86:52:07:79:8b:
60:f1:0b:85:c0:bb:0d:28:7b:26:0b:94:ab:ff:8c:f3:4f:24:
e1:72:3a:f1:76:87:e8:84:0e:e9:7d:1d:21:97:e8:1d:ae:ba:
da:4c:10:54:42:78:1a:5c:36:74:8e:fe:80:9a:9a:82:fc:ff:
a5:00:d3:58:0f:9d:e7:41:b2:e6:55:6a:15:e1:c7:3d:08:d0:
ed:59:52:5c:5f:3b:b5:18:48:92:01:80:de:ed:ee:7c:96:28:
43:20:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:59 2025 by rpki-client