Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
File: orLY2dCvlBb6vW8gNfpyiO-XyME.mft (raw, json)
Hash identifier: myBWrUK4FhK8gVay1ALDyjjQW8+nMRA7wde53w5uleY=
Subject key identifier: A5:87:32:7F:97:A6:D4:48:93:CA:6D:91:5D:07:AD:A9:AC:9C:D7:97
Authority key identifier: A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
Certificate issuer: /CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Certificate serial: 0197B70F016AD3540437590058B2C9AE4974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
Manifest number: 05FB
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: orLY2dCvlBb6vW8gNfpyiO-XyME.crl (hash: sm0BD6JwDJkShtqZ59v+ACRqWNO7KVRy05EAMY5Og6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:01:6a:d3:54:04:37:59:00:58:b2:c9:ae:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=a587327f97a6d44893ca6d915d07ada9ac9cd797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:2c:b4:43:81:13:52:57:5b:a2:7c:97:8f:
26:ef:10:a6:36:5d:af:ff:0b:6d:fe:f5:ca:b5:38:
b7:72:bc:f5:c4:4d:0b:eb:34:52:cf:e9:20:15:c1:
04:9a:77:ae:13:45:05:ca:03:43:41:db:eb:f4:39:
18:5e:2b:83:07:4f:be:f4:70:69:fe:bc:bc:36:f7:
c3:16:86:a6:19:c4:29:f4:78:ef:3c:fa:3d:27:09:
a3:5c:ec:6f:d9:2f:c8:44:c8:86:74:26:bb:be:04:
30:64:c5:71:eb:f0:fa:1e:46:24:64:45:a9:2f:fb:
db:0a:c8:48:a9:84:12:f6:c0:ef:e9:2a:79:72:5d:
65:7a:73:9b:16:4a:71:e6:9d:0e:89:50:1f:5e:f2:
57:f6:26:6f:69:ed:53:ba:7c:fe:17:b1:5e:a3:d1:
e5:02:45:62:72:6c:5c:2e:04:7e:2b:93:a1:8b:18:
49:e8:63:03:cc:6b:57:08:ef:d7:aa:9c:29:f6:6a:
7a:47:5d:b1:70:7d:de:ba:f4:88:39:6a:b8:d7:5b:
c0:cc:04:1c:ef:5e:23:a4:4f:4f:e6:7d:55:97:94:
1e:ac:f7:e7:fe:25:7a:40:56:84:fa:36:c4:92:41:
9d:17:26:fa:17:ef:be:5b:29:92:dc:ce:84:1b:de:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:32:7F:97:A6:D4:48:93:CA:6D:91:5D:07:AD:A9:AC:9C:D7:97
X509v3 Authority Key Identifier:
keyid:A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:d7:0b:e1:bd:0b:5f:06:44:1d:2e:92:62:3c:9f:2c:3f:
e5:7c:13:df:ae:47:37:c4:01:73:be:ce:be:40:30:68:6f:ff:
8c:39:fd:96:86:f0:46:74:3a:a2:8f:7c:24:8e:bb:ab:6b:c1:
a7:66:f0:7a:e1:19:f3:cc:cb:a7:96:d5:3a:4b:3b:71:57:4d:
19:84:60:32:f1:0b:bd:22:ac:5a:be:f3:11:1c:21:5c:94:3e:
4b:f1:c9:42:38:98:6c:e6:37:29:8d:d6:c5:ea:29:60:de:63:
1c:10:76:ec:8e:40:18:10:0f:4f:ac:40:4b:8d:06:90:70:86:
98:3d:bf:42:f0:96:9f:50:b6:b5:b4:70:7d:de:cf:ba:fb:60:
6b:be:f3:e6:cd:2f:90:cb:e5:60:1b:d1:ad:bd:5e:76:63:d0:
10:66:e0:6d:29:7b:72:2f:ab:c9:e2:65:a6:b8:a3:e4:50:58:
78:d1:24:f2:65:83:e6:0e:08:d4:ed:4b:ca:94:b1:54:40:ac:
ae:f7:3c:a9:59:b0:c0:f4:4a:b0:9a:f0:c4:1a:e7:5e:ba:8e:
93:71:52:77:68:ff:dd:00:2d:0e:44:c3:68:c2:b0:c3:19:61:
86:ce:c6:ea:f7:5e:74:6e:6c:07:5e:2a:fc:9a:0c:2a:36:9f:
73:22:9c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwFq01QEN1kAWLLJrkl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjJkOGQ5ZDBhZjk0MTZmYWJkNmYyMDM1ZmE3Mjg4ZWY5
N2M4YzEwHhcNMjUwNjI4MTUwMTQzWhcNMjUwNjI5MTUwMTQzWjAzMTEwLwYDVQQD
EyhhNTg3MzI3Zjk3YTZkNDQ4OTNjYTZkOTE1ZDA3YWRhOWFjOWNkNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYkstEOBE1JXW6J8l48m7xCmNl2v
/wtt/vXKtTi3crz1xE0L6zRSz+kgFcEEmneuE0UFygNDQdvr9DkYXiuDB0++9HBp
/ry8NvfDFoamGcQp9HjvPPo9JwmjXOxv2S/IRMiGdCa7vgQwZMVx6/D6HkYkZEWp
L/vbCshIqYQS9sDv6Sp5cl1lenObFkpx5p0OiVAfXvJX9iZvae1Tunz+F7Feo9Hl
AkVicmxcLgR+K5OhixhJ6GMDzGtXCO/Xqpwp9mp6R12xcH3euvSIOWq411vAzAQc
714jpE9P5n1Vl5QerPfn/iV6QFaE+jbEkkGdFyb6F+++WymS3M6EG94bzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWHMn+XptRIk8ptkV0HramsnNeXMB8GA1UdIwQY
MBaAFKKy2NnQr5QW+r1vIDX6cojvl8jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JMWTJkQ3ZsQmI2dlc4Z05mcHlpTy1YeU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zYTI4ZTMtODU0NC00OGM2LThiOGUt
YmFmN2JhMGM0MTc3LzEvb3JMWTJkQ3ZsQmI2dlc4Z05mcHlpTy1YeU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zYTI4ZTMtODU0NC00OGM2LThiOGUtYmFmN2JhMGM0MTc3
LzEvb3JMWTJkQ3ZsQmI2dlc4Z05mcHlpTy1YeU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcirXC+G9
C18GRB0ukmI8nyw/5XwT365HN8QBc77OvkAwaG//jDn9lobwRnQ6oo98JI67q2vB
p2bweuEZ88zLp5bVOks7cVdNGYRgMvELvSKsWr7zERwhXJQ+S/HJQjiYbOY3KY3W
xeopYN5jHBB27I5AGBAPT6xAS40GkHCGmD2/QvCWn1C2tbRwfd7Puvtga77z5s0v
kMvlYBvRrb1edmPQEGbgbSl7ci+ryeJlprij5FBYeNEk8mWD5g4I1O1LypSxVECs
rvc8qVmwwPRKsJrwxBrnXrqOk3FSd2j/3QAtDkTDaMKwwxlhhs7G6vdedG5sB14q
/JoMKjafcyKcPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:32 2025 by rpki-client