Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
File: orLY2dCvlBb6vW8gNfpyiO-XyME.mft (raw, json)
Hash identifier: W9qFh//0PoDp3MhgpFnsACmVVEocxjDjFH/0x9cDjDk=
Subject key identifier: 49:0F:C8:F4:DB:E2:E6:13:FB:E1:A7:A8:24:5A:1F:D6:05:3D:DC:21
Authority key identifier: A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
Certificate issuer: /CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Certificate serial: 0198D6CD9704A4577CE056A4C14425914AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
Manifest number: 0690
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: orLY2dCvlBb6vW8gNfpyiO-XyME.crl (hash: iqzDuZ+zpivlJrWxGVW474jYuTTqM3kQmRptpV2wJpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:97:04:a4:57:7c:e0:56:a4:c1:44:25:91:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=490fc8f4dbe2e613fbe1a7a8245a1fd6053ddc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:4f:19:21:9f:1b:d5:36:92:8b:d8:1b:4f:
86:52:e2:23:cc:15:41:36:2d:c7:fa:90:82:3b:5b:
d7:0a:5d:35:63:9e:5d:a5:90:ba:e3:2e:5d:9e:c3:
a1:11:7e:c4:ab:08:14:f7:65:23:a3:be:a6:c9:01:
67:8c:5f:9f:57:a2:9a:08:a8:f6:08:64:5e:b5:33:
3f:e5:cd:15:3c:30:1b:b2:68:7f:31:79:f3:34:49:
33:c6:95:18:55:8e:19:13:72:2e:07:e2:64:23:91:
24:25:e4:e1:cd:64:41:13:09:ac:d7:d6:92:6f:a7:
50:53:55:96:29:41:7a:02:a8:a1:81:2b:19:e9:53:
38:61:78:50:4f:cb:bf:fb:fd:5a:0e:6e:51:43:a1:
99:4c:de:47:8f:5c:81:db:23:3a:92:4a:d0:08:00:
67:98:99:d5:7f:67:52:41:98:4d:02:8c:9f:db:72:
46:07:1f:fc:58:9c:b0:75:97:af:87:4b:19:59:f6:
04:b4:0e:45:e3:b0:c6:3c:11:9e:fe:7f:8d:84:40:
0c:ab:71:d8:cd:4d:20:84:df:a3:ea:62:df:f9:b4:
92:8b:11:9a:11:2f:78:4c:52:7d:bb:ec:21:f9:2a:
1c:79:ae:15:72:00:44:d4:3a:75:57:34:30:d6:a5:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:C8:F4:DB:E2:E6:13:FB:E1:A7:A8:24:5A:1F:D6:05:3D:DC:21
X509v3 Authority Key Identifier:
keyid:A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:df:43:e0:cf:6c:4e:01:56:76:91:78:9f:51:65:82:0f:
a1:ef:b6:f8:4d:e0:d6:dc:10:00:95:bc:e3:71:eb:ea:3a:d9:
64:28:33:f7:5c:50:d0:f9:8c:5b:c7:d9:28:0c:f2:18:b6:88:
b8:02:93:31:94:cc:5a:17:fe:82:da:7f:03:18:a6:a2:e5:4a:
c1:78:2a:cb:35:1f:3b:6e:ea:99:6a:a3:67:4a:97:5e:30:c5:
9d:fa:bb:78:bb:a0:a8:08:a9:d8:c6:22:ea:fa:d8:35:c9:67:
76:ca:0a:b6:e5:19:fd:cb:0f:15:05:d5:e0:c2:62:ab:dc:ad:
d1:68:17:3c:e4:a6:a1:7a:d3:a3:45:f1:b3:e2:ac:27:44:16:
7e:8a:14:54:f8:de:d3:37:63:19:52:5f:ea:8d:63:ac:db:fb:
e4:ee:34:ea:64:d4:64:f0:b4:3a:49:05:81:bc:18:a7:96:e8:
75:ad:70:02:60:a4:25:34:08:8d:a1:d0:6b:d1:68:bc:da:56:
05:7a:28:e6:ca:07:40:23:8f:94:a5:24:b4:7d:1c:52:0f:ec:
86:53:72:30:0a:ac:e5:9d:7c:d8:f7:14:14:43:e3:af:f5:b6:
58:f7:b5:69:f1:b7:02:23:a2:c5:c6:9b:e5:3b:63:7c:04:a7:
50:ad:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:56 2025 by rpki-client