Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: uSl+VIhSbEOxmvHS+wwmyYfflgu852fv0ou4fcbInZI=
Subject key identifier: 23:2D:D2:63:8A:C1:FE:BB:64:36:2F:A9:F2:52:BB:FB:AD:05:C9:B3
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 0198D54E7881E161CD335A7F59B5259E486F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: W3z47kAGF5OXrmr5x0HOHz3KHOcz2DiomYViMa9DFkc=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:78:81:e1:61:cd:33:5a:7f:59:b5:25:9e:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=232dd2638ac1febb64362fa9f252bbfbad05c9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:35:b9:40:8c:ff:c6:9c:73:60:90:f6:ab:75:
4d:55:07:f7:e9:06:17:c6:dd:6c:2b:ea:b1:89:39:
9f:9f:a8:be:32:87:71:de:71:40:0f:15:69:7f:75:
6a:b0:ac:77:cf:3b:3f:be:d2:2b:f7:ea:71:c8:5e:
5d:94:da:f8:cf:61:2b:a6:bb:41:80:9b:5a:f8:76:
33:4c:55:51:02:9f:cd:24:e5:62:fa:c2:9d:f6:ab:
00:70:9f:83:8f:68:f7:9e:fb:13:91:78:33:0a:94:
0d:02:57:df:18:9e:aa:a4:38:07:23:98:0f:3c:4e:
28:9f:60:23:9c:fd:a2:f2:38:ac:7c:6c:dd:16:c0:
fe:99:4e:3d:c6:f4:52:1f:82:13:d5:c9:bd:a1:80:
f2:2d:c9:01:95:5a:2a:0e:07:80:90:fa:39:1a:3b:
33:d6:86:68:f7:ca:87:21:dd:01:51:81:ff:f4:69:
a3:c6:8f:ac:4b:37:0c:fd:18:af:02:60:e0:fb:78:
89:53:2c:09:e8:46:78:f2:a4:95:78:b4:f4:78:4c:
aa:0a:cd:ed:ad:e9:00:3d:d4:b9:ae:f3:bd:99:b5:
75:5c:10:b5:11:4e:03:13:43:15:76:bc:d4:dc:56:
c0:eb:f4:67:cb:ee:5c:64:ab:84:ef:19:c3:b1:ec:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:D2:63:8A:C1:FE:BB:64:36:2F:A9:F2:52:BB:FB:AD:05:C9:B3
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:12:c7:06:27:9c:cb:bf:8c:4a:79:52:48:fc:70:11:86:a0:
e5:54:65:c8:85:bb:ec:28:f9:80:e1:88:72:42:44:eb:8e:05:
16:44:76:99:39:5d:4a:29:b6:83:05:fe:85:4f:72:e0:13:5f:
35:e4:86:83:e1:1e:7c:97:c4:4e:4a:b4:96:b1:68:b1:62:d1:
de:16:83:cc:f4:e0:0f:a5:95:3f:cd:f3:65:64:0e:9e:cc:c8:
64:27:79:91:1f:c0:21:7b:d7:9c:cd:bb:5c:1e:05:93:0a:9c:
64:c9:26:5a:78:4c:89:8c:5a:5b:0b:06:e3:b0:cd:cd:11:22:
5d:2c:8c:01:dd:7c:8a:b8:69:45:c7:db:8a:60:a6:0a:1a:68:
4f:44:ab:a8:7a:14:40:0f:9f:c1:0e:e2:c4:38:ce:df:7d:97:
08:c1:66:2a:df:85:57:08:bd:56:33:33:70:c0:12:87:0b:e6:
6e:01:5c:1f:76:4a:85:db:46:58:a5:01:41:f3:3e:31:3c:41:
32:3e:60:62:03:35:b6:ab:db:41:e9:61:94:d5:67:4f:0f:16:
3e:62:55:70:84:ac:66:64:86:d6:75:40:34:e1:f4:20:83:b0:
46:7b:91:cf:1c:ac:32:3d:f4:12:04:8d:7b:5c:e0:c9:85:16:
90:8f:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:31 2025 by rpki-client