Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: dkMq7xdtiU8t2lz5nhe00U8DnOMhF5ZMMLUwpaIldcM=
Subject key identifier: EC:A3:3F:B3:43:37:93:8E:69:84:40:A7:6C:61:DF:06:21:49:80:F1
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 0199FCC683142B39EB0310C80C0E332B9B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: dBeUHgj9qQPxFgA3oMiBPrLzQsWHUu/CIE8ZNGCI5J4=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:83:14:2b:39:eb:03:10:c8:0c:0e:33:2b:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=eca33fb34337938e698440a76c61df06214980f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5f:0a:4d:e5:f0:d5:d1:be:0a:15:39:85:8c:
fb:c2:09:4d:40:98:00:f8:7f:3d:2d:a4:bc:a7:2f:
38:07:b7:f6:82:29:2f:50:4d:6b:a6:31:d0:fa:94:
d3:09:54:3f:1c:af:94:75:3b:1f:f8:7c:72:4e:ca:
77:13:d5:62:9a:f9:e4:66:6a:11:24:7d:c6:3c:26:
fa:2b:3d:7b:4b:55:35:b1:09:1b:f0:7d:31:d2:e6:
20:cf:9c:1c:4e:f4:4e:aa:f5:63:a6:40:e1:dd:40:
95:9d:9c:5b:3b:54:e8:82:cb:2c:a0:76:5d:ca:6f:
30:ea:8a:48:3b:ac:f5:6d:b6:fe:4d:43:ec:af:e1:
c3:d7:d4:f0:40:6b:a4:1c:69:67:17:bf:07:60:fd:
ee:94:95:fd:be:18:1f:ce:d0:63:00:0e:95:4f:54:
ee:1d:20:44:bb:c9:7b:26:1c:dd:8b:91:fe:88:48:
03:98:d2:d2:c3:28:c4:89:3c:e1:0f:ad:1a:2e:d3:
c0:cc:61:b6:23:a1:0e:8c:51:03:f9:68:36:85:c0:
0a:af:39:3d:87:2b:e3:76:30:41:c8:04:ef:de:a3:
f4:1c:f6:93:f7:63:61:fb:8c:3c:2c:34:aa:20:01:
60:60:c8:5c:6d:8b:b5:7d:e4:ed:8b:49:3b:bd:dd:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:3F:B3:43:37:93:8E:69:84:40:A7:6C:61:DF:06:21:49:80:F1
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f8:27:53:fa:95:4f:a6:5a:13:03:06:56:a9:9c:77:0c:2c:
e9:da:ca:f9:52:f3:ec:34:31:ee:ea:ce:cb:98:06:2d:36:67:
7f:d4:64:3d:59:72:2d:02:52:17:31:9d:52:08:d1:7d:1c:01:
93:e7:fa:56:22:51:be:86:60:ac:d9:9d:80:ad:c7:cf:6e:2c:
86:28:16:b2:4f:55:c6:96:03:16:80:d4:cb:fa:c8:9b:23:71:
20:8d:83:a7:91:d5:6a:df:59:77:ab:d9:57:22:b1:ba:b4:df:
48:1f:9a:a4:bf:78:38:5b:f7:f5:7b:93:c1:6b:d7:6c:58:15:
2b:0a:ba:e3:66:05:f1:b8:e7:04:74:34:d7:12:dd:5c:4c:d6:
64:fe:1f:c9:bd:79:ac:db:66:06:30:6a:94:33:63:bd:f6:7a:
d9:06:e1:94:e0:15:d0:63:a6:93:e4:76:07:19:b5:44:31:c3:
0e:19:e6:5e:46:d6:6b:14:ea:3c:09:97:5e:37:e3:d3:40:d0:
f7:f1:ab:28:74:83:a5:71:00:f4:4c:6f:5c:70:2e:3b:a1:34:
a6:dc:cc:16:d6:03:40:00:a8:f1:a6:80:de:42:1a:37:b7:66:
0a:4b:af:5a:b6:d7:27:c7:53:5f:90:42:ba:95:61:ae:31:dc:
ee:aa:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:45 2025 by rpki-client