Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: CHbqe30JPFvI4ERnSKx+02OT6bK2RiML66rMRnuZUAA=
Subject key identifier: 02:FB:D8:AC:3F:2B:E3:6A:54:E2:B9:51:6C:AA:4F:5F:E7:86:BC:5C
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 0196BE5C44CB22D0FA0035DBF2FF576813D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 08:00:40 +0000
Manifest this update: Sun 11 May 2025 08:00:40 +0000
Manifest next update: Mon 12 May 2025 08:00:40 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: NZ4rMcXEPdYysokwdGvoX5AAF1pbAd2xY3emW+5ffU8=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:44:cb:22:d0:fa:00:35:db:f2:ff:57:68:13:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: May 11 08:00:40 2025 GMT
Not After : May 12 08:00:40 2025 GMT
Subject: CN=02fbd8ac3f2be36a54e2b9516caa4f5fe786bc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:eb:77:9e:a7:0a:d0:33:da:30:8d:0b:d6:
da:1c:9b:e5:04:27:1a:63:5d:34:90:08:0c:d1:db:
a5:95:4c:a1:26:6e:8a:85:62:8f:63:46:f5:e1:44:
13:76:97:5e:7b:ad:35:96:0b:de:e2:bc:7d:d6:72:
8c:e5:9d:99:70:d9:a6:89:95:89:2d:4a:ab:b8:4a:
d0:10:63:6a:f9:34:61:b3:37:dd:cb:ec:fb:38:fa:
7b:c3:fd:c7:cf:95:f3:56:ec:ca:a0:bd:04:ba:bd:
a5:e5:c3:57:7c:88:bd:5e:44:d0:83:d8:c1:ae:29:
24:98:7a:1a:12:ea:72:2e:b3:04:de:65:ae:b5:80:
1b:be:b5:08:f1:65:49:86:a5:5e:db:01:e0:b8:d4:
c9:1c:cd:8b:3b:7c:a0:91:97:49:9b:03:a0:bd:34:
07:dc:6f:c2:62:40:c9:75:f5:98:40:ef:b9:a7:08:
33:21:66:a0:b5:3e:b2:99:33:b1:ec:b5:62:7d:8e:
94:b6:eb:78:c5:a7:8e:0f:66:7b:ac:4c:b3:ee:f3:
f6:60:b8:36:34:03:42:ca:db:57:fd:6a:a1:74:91:
8f:47:32:3b:d3:78:8e:35:77:d9:96:98:fc:32:4d:
d7:29:4b:95:c8:9e:6d:1c:8a:2a:ef:24:1e:4c:40:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:D8:AC:3F:2B:E3:6A:54:E2:B9:51:6C:AA:4F:5F:E7:86:BC:5C
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2c:7a:9d:a2:ad:03:6d:03:38:5d:75:30:30:88:74:d0:8c:
99:6c:15:73:93:94:a2:44:61:b0:c3:87:75:60:9e:c2:db:f0:
b7:12:84:79:f1:93:a0:9d:3a:74:ad:9c:84:15:5d:91:f2:c8:
83:90:67:03:e5:5d:aa:d3:59:f1:05:e7:bd:05:f9:a4:90:08:
f4:9b:3c:4d:82:f0:09:21:9a:66:f7:71:55:f6:66:8b:dc:3f:
3b:af:a5:1b:e8:53:a4:8c:99:50:f0:8a:72:95:04:69:26:6a:
01:2e:66:df:28:cd:e5:37:57:62:39:8e:b1:98:f8:78:81:80:
59:b0:cf:7c:f8:08:79:d2:a5:21:77:be:88:58:a4:1e:4e:c0:
10:6e:af:29:b5:b5:42:4a:09:6a:50:a2:a4:fb:f0:60:9e:11:
47:cf:a3:0f:66:51:9f:a5:6d:1c:c7:44:61:2f:f0:d2:a3:b9:
55:c4:03:57:2d:2a:64:39:57:59:1f:02:ec:e9:fc:33:56:22:
37:c5:80:ad:28:eb:24:ee:37:89:06:bf:34:bb:da:4d:73:cf:
75:ad:13:81:4e:9b:73:88:ab:a9:b4:ba:1d:d3:49:49:51:64:
5f:9d:65:49:a0:e7:e8:8d:22:ea:ab:63:06:3e:09:f0:2b:d9:
d4:ee:12:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XETLItD6ADXb8v9XaBPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0
ODQ0YzAwHhcNMjUwNTExMDgwMDQwWhcNMjUwNTEyMDgwMDQwWjAzMTEwLwYDVQQD
EygwMmZiZDhhYzNmMmJlMzZhNTRlMmI5NTE2Y2FhNGY1ZmU3ODZiYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5jrd56nCtAz2jCNC9baHJvlBCca
Y100kAgM0dullUyhJm6KhWKPY0b14UQTdpdee601lgve4rx91nKM5Z2ZcNmmiZWJ
LUqruErQEGNq+TRhszfdy+z7OPp7w/3Hz5XzVuzKoL0Eur2l5cNXfIi9XkTQg9jB
rikkmHoaEupyLrME3mWutYAbvrUI8WVJhqVe2wHguNTJHM2LO3ygkZdJmwOgvTQH
3G/CYkDJdfWYQO+5pwgzIWagtT6ymTOx7LVifY6Utut4xaeOD2Z7rEyz7vP2YLg2
NANCyttX/WqhdJGPRzI703iONXfZlpj8Mk3XKUuVyJ5tHIoq7yQeTEBDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL72Kw/K+NqVOK5UWyqT1/nhrxcMB8GA1UdIwQY
MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt
MDUwMjA0NTMyMjg2LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2
LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyx6naKt
A20DOF11MDCIdNCMmWwVc5OUokRhsMOHdWCewtvwtxKEefGToJ06dK2chBVdkfLI
g5BnA+VdqtNZ8QXnvQX5pJAI9Js8TYLwCSGaZvdxVfZmi9w/O6+lG+hTpIyZUPCK
cpUEaSZqAS5m3yjN5TdXYjmOsZj4eIGAWbDPfPgIedKlIXe+iFikHk7AEG6vKbW1
QkoJalCipPvwYJ4RR8+jD2ZRn6VtHMdEYS/w0qO5VcQDVy0qZDlXWR8C7On8M1Yi
N8WArSjrJO43iQa/NLvaTXPPda0TgU6bc4irqbS6HdNJSVFkX51lSaDn6I0i6qtj
Bj4J8CvZ1O4S3g==
-----END CERTIFICATE-----
Generated at Sun May 11 12:36:30 2025 by rpki-client