Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: PA/3iY1HX1eUyi/WTskQRTlqUkO1Yjv7jvUPfGVd9v8=
Subject key identifier: A3:89:A4:6D:C7:09:0E:1E:46:B6:A8:E9:B0:F1:BB:BE:21:93:3C:9C
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 0198D5BBFDD62710FFFB1244426C2EDB4FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 0DC5
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: fHogzbBUrfbnPGFKRCbk0mw1hGe+EcCNKZbaFazX8ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fd:d6:27:10:ff:fb:12:44:42:6c:2e:db:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=a389a46dc7090e1e46b6a8e9b0f1bbbe21933c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:a2:c9:8e:aa:70:1d:e6:b0:2b:9d:76:35:
1c:23:c7:3f:e0:eb:0d:77:9b:86:53:6f:b8:de:e8:
7c:fb:72:a7:b2:95:da:87:7b:ee:30:76:5e:7a:dc:
d2:f7:3c:c7:c5:61:08:1b:a3:81:a4:4a:ff:57:30:
34:0f:c7:44:e8:63:49:9a:a0:28:2a:44:5b:bf:a3:
fd:e1:23:d9:b9:b4:43:58:fa:d8:f3:b0:2e:d0:9a:
46:0a:4f:41:b2:1d:93:88:57:2e:4e:5a:59:c5:b1:
84:a2:77:a0:f0:0b:d3:7f:ea:3a:01:9a:04:ae:83:
15:4d:04:2f:d2:0f:19:7b:be:ba:13:44:04:71:ce:
6f:ac:f8:ec:b5:75:50:ab:91:e2:10:3f:dc:f4:e3:
9a:d9:80:1f:34:c7:bd:4c:fc:8b:9e:1a:dc:ff:f1:
94:c3:c3:3f:91:98:ba:98:24:75:ec:4f:d3:bd:17:
5b:9a:c7:be:46:9f:f5:60:80:ba:e5:42:f0:f7:ba:
7a:52:9d:eb:2f:8a:88:20:5e:6d:bf:6e:83:5b:d1:
fe:6b:5b:47:92:0b:7f:ce:c7:ea:f7:1b:8b:3b:5c:
2a:94:dd:e0:a5:7e:b9:61:3b:80:9d:c4:43:ed:6d:
cd:54:e1:b8:ad:79:97:52:3a:4d:43:ef:4b:39:ce:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:A4:6D:C7:09:0E:1E:46:B6:A8:E9:B0:F1:BB:BE:21:93:3C:9C
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a1:96:68:ee:4a:9a:71:14:79:84:95:fe:90:82:8f:b7:a4:
12:55:7e:ce:c7:ee:9b:61:03:f0:51:6d:2c:b5:e2:ad:d2:9d:
1a:79:e0:c4:45:06:7e:7c:e8:c9:fa:2a:b6:21:13:86:49:5f:
50:53:96:9b:25:1c:33:92:39:55:22:3f:f9:21:54:f4:51:35:
9d:a4:7b:d3:cc:a8:f3:18:ae:f4:3c:43:de:74:9c:6a:40:ff:
fe:e1:12:40:29:30:58:bc:13:f2:03:fe:b1:e7:c3:4d:48:dd:
18:83:eb:33:16:73:9f:25:b2:d7:10:45:7a:fd:c4:a5:1c:34:
7c:6b:a9:f3:2f:a1:26:99:50:61:9c:40:91:a3:cc:85:83:22:
a6:ff:94:74:44:78:3a:19:96:a3:d8:41:37:09:d6:9e:3c:b0:
f5:c4:74:9c:73:4d:b8:56:5d:36:51:25:dc:6d:4f:e5:98:a3:
55:1f:82:ef:53:cf:9c:3d:0b:24:f3:3b:5d:e9:51:7a:b8:f6:
03:21:77:3c:e9:ab:62:16:1b:2b:38:89:f2:57:00:40:e5:93:
d0:b9:e5:d2:0d:3a:aa:bd:95:de:c8:52:da:74:ef:7b:5b:9d:
eb:4c:f4:80:b0:15:86:14:55:bc:3f:0b:25:03:c9:3e:1d:ad:
01:5f:c7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/3WJxD/+xJEQmwu20+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWJlNmQ0Mjg4ZmJlZGViZjg2NDJhNmExZTM5NzdhZWE1
ZjFmMzUwHhcNMjUwODIzMDcwMjAzWhcNMjUwODI0MDcwMjAzWjAzMTEwLwYDVQQD
EyhhMzg5YTQ2ZGM3MDkwZTFlNDZiNmE4ZTliMGYxYmJiZTIxOTMzYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NOiyY6qcB3msCuddjUcI8c/4OsN
d5uGU2+43uh8+3KnspXah3vuMHZeetzS9zzHxWEIG6OBpEr/VzA0D8dE6GNJmqAo
KkRbv6P94SPZubRDWPrY87Au0JpGCk9Bsh2TiFcuTlpZxbGEoneg8AvTf+o6AZoE
roMVTQQv0g8Ze766E0QEcc5vrPjstXVQq5HiED/c9OOa2YAfNMe9TPyLnhrc//GU
w8M/kZi6mCR17E/TvRdbmse+Rp/1YIC65ULw97p6Up3rL4qIIF5tv26DW9H+a1tH
kgt/zsfq9xuLO1wqlN3gpX65YTuAncRD7W3NVOG4rXmXUjpNQ+9LOc6GDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOJpG3HCQ4eRrao6bDxu74hkzycMB8GA1UdIwQY
MBaAFDkb5tQoj77ev4ZCpqHjl3rqXx81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYt
ZTVmYjRhYzExMGRiLzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYtZTVmYjRhYzExMGRi
LzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6GWaO5K
mnEUeYSV/pCCj7ekElV+zsfum2ED8FFtLLXirdKdGnngxEUGfnzoyfoqtiEThklf
UFOWmyUcM5I5VSI/+SFU9FE1naR708yo8xiu9DxD3nScakD//uESQCkwWLwT8gP+
sefDTUjdGIPrMxZznyWy1xBFev3EpRw0fGup8y+hJplQYZxAkaPMhYMipv+UdER4
OhmWo9hBNwnWnjyw9cR0nHNNuFZdNlEl3G1P5ZijVR+C71PPnD0LJPM7XelRerj2
AyF3POmrYhYbKziJ8lcAQOWT0Lnl0g06qr2V3shS2nTve1ud60z0gLAVhhRVvD8L
JQPJPh2tAV/HBg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:05 2025 by rpki-client