Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: YSPA76zvwPV8rCXFp4lvzYw0CPJQkyihr+xUaJUYruM=
Subject key identifier: 50:FC:0F:AB:F1:10:3B:29:51:8F:D8:1E:0F:CC:33:61:AB:07:D5:60
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 0198D9CE7775F1C9C067D060E0781F4BBB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0367
Signing time: Sun 24 Aug 2025 02:00:43 +0000
Manifest this update: Sun 24 Aug 2025 02:00:43 +0000
Manifest next update: Mon 25 Aug 2025 02:00:43 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: tNfgBRccwWMbU8rOoeaWb4h7EGgIcsYVxiSV2iENwGA=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:ce:77:75:f1:c9:c0:67:d0:60:e0:78:1f:4b:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Aug 24 02:00:43 2025 GMT
Not After : Aug 25 02:00:43 2025 GMT
Subject: CN=50fc0fabf1103b29518fd81e0fcc3361ab07d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:08:b7:8a:fd:0e:a1:98:15:5c:0a:a5:f3:
29:79:b4:ee:ae:4e:be:38:11:92:9b:1f:7e:a3:7c:
7d:37:14:7d:a8:e4:8c:a8:63:13:f1:2c:8c:ce:15:
a4:eb:54:3f:7a:45:d6:f4:de:b9:ee:8e:98:28:7f:
81:98:cf:ae:0e:b2:9b:1a:59:c4:db:b5:52:f0:c6:
a9:15:37:ff:dc:8b:c2:55:6e:a1:83:20:4c:84:00:
27:48:09:01:95:88:c9:90:54:01:ef:37:d3:62:70:
04:83:19:91:56:75:bd:9c:2e:8c:c7:42:42:7e:8b:
0b:74:dd:f6:39:ff:44:75:f5:25:17:6a:fc:23:e2:
06:63:06:6a:3c:7f:63:55:f2:bf:f2:8a:4c:5f:7d:
f9:d6:0b:41:4b:77:07:88:78:9e:b5:84:52:20:27:
18:b0:c4:6f:58:5b:0d:ce:db:19:f7:d3:00:9b:84:
e2:f8:ce:a4:10:49:d9:d4:87:9e:72:9d:3d:ac:54:
12:63:b5:a6:4d:c3:76:85:52:8c:03:05:f0:48:5f:
6b:78:3a:f8:bc:85:7f:50:21:6f:13:cd:5c:d2:7e:
5c:6c:99:75:31:f8:be:12:41:20:79:7d:05:b3:d9:
e5:e8:48:22:bf:19:cb:49:81:49:ad:f1:e2:b0:7c:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:0F:AB:F1:10:3B:29:51:8F:D8:1E:0F:CC:33:61:AB:07:D5:60
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e1:c7:a7:95:73:47:96:7a:82:54:af:11:e1:2d:9c:00:ae:
54:90:41:3b:90:d5:11:c5:6c:59:38:68:7b:b6:24:49:d6:98:
b7:2b:dd:28:93:91:22:df:43:20:57:d9:b8:3d:71:1e:3b:08:
7b:b4:20:c7:1d:de:a7:8d:f9:ee:1d:db:ed:b6:df:f8:0e:4b:
ac:10:57:c3:50:c5:e1:b2:81:3d:44:6d:91:38:0d:02:aa:07:
80:1b:3c:31:ba:f1:e9:67:9f:6b:8a:38:a1:e4:0a:7f:4f:8c:
3c:2b:ff:b7:4b:bb:f6:fe:ff:7e:b8:23:55:b6:8f:e8:82:5f:
fc:e9:08:34:36:b4:2b:02:de:d4:90:16:32:dd:cd:f6:6f:64:
50:16:25:4b:49:c9:d0:c3:4a:11:91:bd:ce:ff:6d:b5:7e:c9:
d8:69:ed:52:b2:f2:6c:68:7b:9c:3e:1c:37:75:f4:7c:bc:9e:
99:dc:f1:b8:6e:61:6b:74:0e:ae:2b:c1:47:70:f3:5c:6c:cb:
6c:e1:a8:e6:f9:b7:fd:4d:5c:0f:ba:6f:e6:0a:9b:7b:82:f4:
0a:fd:1c:3b:89:73:8d:d3:e6:70:5c:4b:0d:f5:66:b0:1f:85:
a8:a2:f9:55:ee:52:5e:55:65:0b:d3:ca:34:fe:47:f5:4a:7d:
2b:3c:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:04:29 2025 by rpki-client