Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: zgf3VudqzjEmnNT8maaRmydWIL7+ktEfwYPEQ1zAvs4=
Subject key identifier: E2:16:46:FF:DA:4A:1C:BA:61:57:78:46:A3:B8:5A:D0:B7:99:E8:4F
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 0197B5FBAD15352FB3B18D8CA31A35BA1F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 0D30
Signing time: Sat 28 Jun 2025 10:00:59 +0000
Manifest this update: Sat 28 Jun 2025 10:00:59 +0000
Manifest next update: Sun 29 Jun 2025 10:00:59 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: N2OKTskPNW+DDPvA5LojyHNSgZY++iV5notQS3enmEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ad:15:35:2f:b3:b1:8d:8c:a3:1a:35:ba:1f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Jun 28 10:00:59 2025 GMT
Not After : Jun 29 10:00:59 2025 GMT
Subject: CN=e21646ffda4a1cba61577846a3b85ad0b799e84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:e8:eb:d7:dd:fd:2f:f0:4d:b6:83:b5:38:
49:23:63:a5:65:c6:7d:aa:d0:15:d3:65:25:60:f4:
88:d5:a3:a9:6a:ce:29:24:d4:31:ea:7a:f2:ac:71:
5a:98:6c:d1:e2:ef:c8:ed:eb:39:f1:39:11:a4:02:
3d:94:a2:d7:b1:06:a1:14:ba:5d:92:46:5e:82:38:
cd:c8:8f:0e:a7:dd:24:19:0c:55:b6:e4:27:af:cb:
fc:bf:e3:06:aa:10:45:ea:c7:51:c9:27:74:8b:c0:
0b:da:74:e2:95:9f:4b:7d:8b:b4:b3:49:59:e2:25:
da:0c:27:7a:e2:45:48:d8:60:78:11:06:51:e2:1f:
59:37:e1:46:ca:ea:9c:21:8e:bb:18:e3:3d:fc:5b:
64:b7:fe:b0:37:f0:f1:2d:34:02:e5:f7:27:4a:26:
a6:b7:f3:8b:3d:a4:08:ba:3e:7b:0f:67:32:47:f6:
68:53:18:d4:07:55:e3:ca:ad:83:da:2f:73:4b:06:
3e:f0:11:5d:70:14:04:65:83:a2:78:0a:6c:0b:0e:
60:9d:75:6b:31:ce:b3:96:46:e1:35:60:a9:0f:e1:
fa:bb:7a:7a:17:65:37:c6:61:5c:e6:f7:c1:a8:90:
36:ee:80:e4:fb:98:d4:bf:b7:27:72:a1:ea:14:b1:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:16:46:FF:DA:4A:1C:BA:61:57:78:46:A3:B8:5A:D0:B7:99:E8:4F
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:c2:e6:d6:ed:af:82:c7:86:d1:0e:ee:14:ca:c4:ee:84:
dd:ba:24:d7:eb:f7:35:bb:8c:fb:1e:2f:d6:a1:94:85:cd:49:
f0:fb:09:74:a6:17:03:83:ec:c1:fa:2b:65:ce:11:b3:c7:ab:
0e:87:7b:31:b5:ac:54:54:d4:43:c9:e8:41:8c:a8:04:5a:36:
27:bf:ed:9f:a8:69:2b:dd:f7:c7:35:cd:6b:92:88:e9:f8:7c:
1d:73:b1:e6:f4:40:8b:a4:ca:ad:04:93:44:ee:26:dd:e3:d1:
55:54:72:b2:d2:09:4e:00:ca:f3:47:ca:d2:0d:97:49:4b:88:
0b:05:e7:ea:9c:b9:dd:0d:d3:28:01:fe:08:57:bb:1a:07:21:
7d:fe:76:15:8a:60:63:6b:2f:b7:73:31:32:46:db:43:7e:24:
75:f8:8c:7a:bf:35:e9:0a:02:b6:79:da:84:33:7b:58:68:16:
b7:d1:54:75:66:7f:b6:f4:e9:3c:af:bf:1a:b2:b0:62:c6:a7:
61:aa:06:1d:7d:19:4e:e0:28:f4:36:94:f7:b5:7f:80:9c:8a:
74:8c:62:ce:93:a4:86:17:3a:d2:c1:e8:ee:2b:33:d7:fd:fc:
1c:a9:16:86:7e:24:01:e3:a2:bf:ab:43:94:ff:ef:09:52:cb:
27:e2:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:31 2025 by rpki-client