Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: CdaFBmLqMvu96JbLFlstDcbJgK49TfSsC0Aq9DmzYmY=
Subject key identifier: FE:FB:E3:F9:E6:D6:3B:05:8E:20:65:98:68:B9:AF:CF:19:4E:4D:61
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 0198D73B5436E4A48FCA259155F7024CF74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 0F21
Signing time: Sat 23 Aug 2025 14:00:46 +0000
Manifest this update: Sat 23 Aug 2025 14:00:46 +0000
Manifest next update: Sun 24 Aug 2025 14:00:46 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: RKs7tAT2KQor6D2YM/K879hFIyae8Ulv+xdMKFPjsYY=)
2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:54:36:e4:a4:8f:ca:25:91:55:f7:02:4c:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Aug 23 14:00:46 2025 GMT
Not After : Aug 24 14:00:46 2025 GMT
Subject: CN=fefbe3f9e6d63b058e20659868b9afcf194e4d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:4e:28:e8:ba:38:24:13:3c:d9:59:06:4a:
9a:d6:bf:de:5c:99:7b:4b:3c:8a:cc:a6:e5:d9:aa:
e8:7b:51:d0:02:e8:8a:e3:83:86:07:2d:32:cd:0a:
1b:d4:1d:6d:8a:74:5e:d7:85:d5:f2:e2:fc:01:51:
52:5b:dc:e5:ce:95:04:40:5f:9a:b4:49:07:f6:9a:
d6:46:44:96:7b:5d:93:01:5c:53:0d:9d:44:68:16:
08:3b:75:4e:b0:7a:1c:37:f7:08:d9:ec:d1:55:06:
30:41:f3:e1:ea:06:c4:27:f4:43:5e:bd:6b:2d:5f:
ab:5c:a8:73:d5:c7:d2:94:a7:b1:42:f4:c4:c0:86:
b5:c4:75:27:8e:4c:9b:bc:0b:6e:f0:92:82:28:14:
83:2c:d5:81:3c:bf:bf:4f:ae:6c:8c:ad:22:f1:36:
1e:ab:96:96:12:6a:47:ba:a1:21:56:16:29:7f:ee:
e8:c0:91:86:77:0b:5e:67:c9:e5:91:1e:51:5c:9d:
81:d5:6d:ff:5d:ec:58:a6:de:d9:7f:90:13:58:be:
13:a3:9a:16:23:ec:a5:2d:59:3d:33:85:f2:b5:6e:
ca:44:88:b8:78:32:98:dc:df:c1:c6:cb:5c:15:d2:
a8:f8:db:27:f8:82:44:58:88:3b:02:b1:ce:1a:d2:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:E3:F9:E6:D6:3B:05:8E:20:65:98:68:B9:AF:CF:19:4E:4D:61
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:b5:68:98:21:f4:19:0d:16:bf:d3:d3:3d:9a:79:d6:c5:
9d:c8:6e:bc:0f:44:16:76:b8:41:04:10:7f:f4:b2:09:28:2f:
4a:82:3b:59:7a:4f:ae:d8:85:db:3b:6c:05:95:d0:24:df:b1:
22:19:a0:6a:2b:06:21:64:b1:dd:ab:99:cc:be:5a:86:1a:ea:
5b:f2:d7:91:81:4d:dd:e7:65:2b:d7:27:d2:89:8a:ac:cd:67:
83:7d:b8:66:31:1c:e8:8e:e9:70:2f:36:e6:43:8f:e0:db:ad:
31:bd:90:40:b7:b0:5d:77:9d:88:df:5f:89:89:79:d6:2c:c1:
57:a7:f2:c9:72:88:64:e7:cd:e6:b2:d7:d9:ea:93:3b:50:0e:
09:b3:78:bd:af:a0:c4:44:df:54:1e:ef:93:99:d9:c0:af:b0:
dc:95:3e:73:0a:94:af:3e:d0:d2:7b:99:76:db:a7:37:dc:da:
d7:6f:fa:c9:8a:39:46:b7:6a:fa:83:40:ea:ef:d1:59:ae:ac:
b7:9f:de:3b:44:ef:55:af:0b:e7:9d:2c:90:69:6f:1c:71:4c:
38:1c:93:a1:96:11:f3:42:76:a3:58:48:e6:1b:b2:11:88:51:
ed:43:d9:82:f2:4f:bd:5d:91:46:05:5b:bb:cb:b1:95:de:6d:
dc:df:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:56 2025 by rpki-client