Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: dE4i6i/9yjFo1Z5gBq2kH4oxSK5KTl5q5PJZ37sYpgU=
Subject key identifier: 6B:DB:88:12:B1:E6:F2:D9:D4:ED:D4:B0:E6:4C:69:50:7C:96:55:B4
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 0197B77C79420DF7195C30FAC150BEBADEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: U2PkgfdQc3EgNwEicYvaGwIkL9LreBETwy6VdmavBSw=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:79:42:0d:f7:19:5c:30:fa:c1:50:be:ba:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=6bdb8812b1e6f2d9d4edd4b0e64c69507c9655b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:d3:94:d3:ca:9a:90:27:29:40:0a:8d:d9:
52:7b:e6:ac:b3:35:d3:c8:87:14:47:3a:a3:1b:bb:
4f:cb:4b:e9:b2:23:8e:20:eb:1c:9c:ae:d6:ea:2d:
bd:4e:71:59:7b:de:b8:22:52:08:73:f5:ed:16:c1:
4a:fb:9f:46:c9:3b:fa:9b:bf:9a:58:1b:f5:73:80:
53:56:49:a7:12:08:e9:44:f1:15:7d:ce:e5:e3:e0:
f4:30:7e:1c:1b:17:59:3e:fb:41:87:4a:d4:b8:bd:
1d:68:12:9a:30:5c:1d:e6:dd:c7:3d:83:56:03:11:
c7:a8:e9:df:5d:fd:f7:a5:e8:e1:2b:ac:a5:c1:31:
e0:35:38:18:0b:6e:52:9d:aa:7d:a5:57:81:30:e9:
9c:8b:c7:43:2e:df:88:87:83:7e:1e:e1:54:b2:01:
60:9a:f5:56:13:e5:21:5d:e3:ec:c9:11:79:e2:e3:
9f:a7:6f:d5:d6:71:56:b7:c5:df:22:45:c1:0c:c4:
dc:23:bb:7f:5f:a5:f5:b2:fe:e6:d9:a8:db:a0:0c:
f2:c2:e4:93:e2:59:f8:b6:b6:d6:c9:ef:d5:14:b6:
3d:e5:dd:11:48:b6:66:0c:bd:04:62:56:44:69:a5:
00:96:03:f4:b8:94:d0:07:b0:35:84:28:83:81:92:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:88:12:B1:E6:F2:D9:D4:ED:D4:B0:E6:4C:69:50:7C:96:55:B4
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:18:97:c8:14:46:1c:c8:cf:84:29:3a:0b:1e:8d:b4:26:
12:3f:2d:9a:d4:c7:e7:69:16:25:0e:3b:a1:76:58:2e:0c:3c:
6d:74:24:44:2b:e8:2a:38:86:19:7f:42:25:b5:70:32:a2:f5:
3b:e4:d8:a3:48:a4:98:c7:9a:14:ff:e6:6c:8e:e1:e5:2b:62:
63:54:4b:f0:64:f3:80:07:fb:69:94:14:a3:e9:51:d5:7a:26:
4b:c4:a2:a0:91:11:ec:79:c4:84:59:48:84:9d:4c:6b:9c:8c:
fe:7f:4c:05:3e:f3:6d:4d:a3:ac:c0:5b:1e:67:f6:d7:8c:29:
0a:72:e4:ff:a6:31:03:20:47:ae:e1:20:a2:98:66:96:98:38:
d2:d2:f0:ea:a4:b9:38:ff:4e:ed:62:3b:e0:9f:60:67:b7:cd:
b1:78:be:b0:a3:fe:98:d5:db:de:2c:58:96:12:29:e9:96:85:
51:8d:ae:bb:21:ce:7e:f7:55:62:05:3d:c2:77:59:72:cd:5d:
c7:03:ea:66:15:a5:f8:88:d7:f7:1d:e8:63:ac:f5:d8:b2:8b:
d2:ef:66:51:9f:17:bd:0a:69:b8:3f:21:fd:fe:db:e0:8f:a4:
70:11:c9:f8:37:e4:5c:8c:63:39:94:e4:ad:28:8a:fc:65:49:
d4:c7:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:14 2025 by rpki-client