Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: tCycml3wmM4xXzX193+2Nw+rNMgDp7uGq9IWKyKl8CM=
Subject key identifier: 0B:72:86:BF:71:21:BC:19:65:EC:49:F2:45:DD:32:E6:4A:16:22:33
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 0199FB463507D7F2D5687D71C5E6FA5F295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 0E5D
Signing time: Sun 19 Oct 2025 07:01:46 +0000
Manifest this update: Sun 19 Oct 2025 07:01:46 +0000
Manifest next update: Mon 20 Oct 2025 07:01:46 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: CocwV/kynytaapbHUrfKs7Nr5ZGk3C+3yWOxeit8jdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:35:07:d7:f2:d5:68:7d:71:c5:e6:fa:5f:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Oct 19 07:01:46 2025 GMT
Not After : Oct 20 07:01:46 2025 GMT
Subject: CN=0b7286bf7121bc1965ec49f245dd32e64a162233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:95:8f:9d:a6:8f:0b:af:4f:55:e0:81:47:
bf:bf:e5:97:35:72:cb:50:df:24:4c:7f:99:59:4d:
9b:08:ca:9f:87:d4:e0:4a:f9:34:1b:8d:73:b0:dc:
e7:eb:ce:d3:30:95:01:76:e7:6b:f5:c1:42:f2:14:
ad:7b:8f:ff:4c:9b:32:c3:b3:19:a7:97:cb:85:97:
33:d6:3f:8c:36:79:3d:75:ce:c3:c4:08:c4:63:e3:
42:60:7f:f2:ac:41:f7:34:0c:88:42:21:e2:7b:eb:
88:42:86:2d:6d:06:27:41:c1:0a:23:55:47:25:75:
df:cf:7a:ef:2a:b5:01:4a:77:88:d4:24:57:52:89:
12:ae:48:05:e0:f5:88:60:b1:36:19:de:e3:e3:a6:
e6:0b:ed:b7:30:b3:4e:06:14:3e:35:1a:c2:c2:76:
4a:ce:2b:e5:05:54:af:a4:cd:7c:1f:1a:d9:9c:4d:
18:42:86:1a:a2:59:a1:7c:bf:4c:c4:60:a0:de:23:
c8:27:f2:8f:47:56:1d:6d:06:3b:3b:08:7e:09:15:
6e:b9:b1:e9:4a:af:d4:0d:70:52:a5:83:74:6c:c4:
87:bf:e9:a7:c8:78:77:43:e9:55:2c:d8:d2:3e:59:
a2:ea:c4:a0:b9:bf:93:fc:0e:18:4c:45:2f:7c:8a:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:86:BF:71:21:BC:19:65:EC:49:F2:45:DD:32:E6:4A:16:22:33
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:48:47:b9:4e:14:2e:98:7d:1b:3b:24:c5:b1:e7:66:7b:8c:
b4:c6:f6:ee:4a:23:44:10:db:b8:3e:d2:32:41:95:8c:6d:a4:
f2:14:13:6c:16:16:f9:70:0b:00:da:4b:18:c7:d0:68:3e:6f:
be:fb:8b:34:29:b9:a5:eb:20:c9:82:2a:05:66:ec:f1:63:6c:
bd:94:70:b1:31:46:fd:70:a9:59:b0:b7:45:c3:75:bc:26:bb:
7c:23:d8:1d:0c:8b:79:ca:fe:35:7c:5a:ef:17:d2:47:15:9b:
cd:7b:50:12:aa:51:cf:b9:0a:99:70:e5:49:05:52:59:53:77:
b1:db:b0:3e:fe:0a:2d:a6:b1:b0:74:db:f6:dd:31:5c:1f:b6:
14:73:ea:aa:5e:ae:68:53:05:94:5d:44:c2:83:6a:26:87:fe:
e0:1d:64:11:ae:3b:4a:18:8c:3d:e5:6d:9e:dc:e9:29:75:1e:
ba:81:7e:91:ad:62:44:97:da:16:d0:26:3f:d2:64:cf:cb:49:
d0:11:f2:fb:35:98:ff:19:32:ec:d5:0c:cd:17:69:7a:44:40:
fa:68:7d:41:34:90:18:c5:fd:14:22:b2:a2:18:96:57:a3:1c:
c0:04:64:bb:43:22:57:b2:93:96:85:97:a0:3c:5a:85:0e:19:
fb:4d:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:31 2025 by rpki-client