Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: 3GiQcYGvCKYCRA7GkJjJ0OyLfHa/c0NcOAbTsCMbpqo=
Subject key identifier: 92:86:75:3A:2D:76:39:1E:7A:32:D4:3F:05:6B:41:64:50:C0:5A:12
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 0197B5C4D7AA43720592A062C6FC917D7A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 40
Signing time: Sat 28 Jun 2025 09:01:05 +0000
Manifest this update: Sat 28 Jun 2025 09:01:05 +0000
Manifest next update: Sun 29 Jun 2025 09:01:05 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: Iu1qOsn6EAaV0aESIADsK+XbvTbqGm0gKrn+NRwim3o=)
2: T6FOCyz_je-bCYNA14loRkLn-go.roa (hash: RTnOVvTVNPz5Tb8FJf3ztpbxOQkBZj4f/NkLYwSkf+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d7:aa:43:72:05:92:a0:62:c6:fc:91:7d:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Jun 28 09:01:05 2025 GMT
Not After : Jun 29 09:01:05 2025 GMT
Subject: CN=9286753a2d76391e7a32d43f056b416450c05a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:b1:26:99:b4:df:da:a7:05:3a:e5:43:d5:
00:48:f8:a4:bc:8c:09:a4:e8:7f:08:6d:c0:8d:2a:
a4:2a:8a:bc:60:60:71:dc:92:d8:77:7e:19:7e:d5:
44:b9:db:4f:1f:5f:1c:9a:58:60:c1:39:04:10:1e:
cf:3d:12:2a:6d:d8:72:4a:3b:bd:c6:3e:d2:ab:4c:
d8:36:a7:2a:9e:b9:09:c9:07:a2:61:79:f6:0f:a7:
78:36:b0:34:ea:e9:b7:40:14:f6:0d:28:ab:27:7c:
47:d6:f1:90:44:ed:fe:b4:b2:b5:44:db:3e:82:97:
a5:cb:13:72:97:97:f1:09:ee:7f:b6:1c:2e:fa:21:
de:f8:63:f4:81:1c:10:29:f9:5e:1d:2a:b8:d3:30:
ed:65:ff:8f:45:7e:03:b8:e8:55:36:cf:3f:80:22:
31:b1:fc:3c:da:dd:13:7d:2d:f5:ff:66:0d:dc:f5:
af:e5:aa:47:9f:5e:b2:0d:da:c7:da:6e:0c:fa:bf:
0a:cf:11:c8:47:33:33:f5:a3:d1:1d:e1:76:8b:a6:
c1:1c:2e:e8:29:b9:0c:9f:36:5f:cb:fc:c6:aa:80:
ae:ea:f6:f8:08:39:31:f7:6e:df:4e:23:29:34:30:
c0:be:59:ff:a5:5b:36:9a:61:ce:f3:b3:b1:a7:8e:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:75:3A:2D:76:39:1E:7A:32:D4:3F:05:6B:41:64:50:C0:5A:12
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:6c:05:df:80:0d:22:76:bf:d5:22:a5:16:3a:89:d2:87:07:
8e:19:4e:85:85:22:f9:82:48:57:d9:5b:b7:9b:4a:54:9d:ac:
43:20:a3:6b:1f:1f:5d:bf:14:13:4c:13:49:f2:2d:9a:04:42:
9b:a3:03:ff:4b:37:7c:3c:da:3c:2e:5a:fd:1c:f2:87:a8:7f:
4c:5a:87:99:55:b9:88:b1:f6:fb:ee:75:b1:5d:19:7f:7f:c3:
55:1a:02:c9:69:05:17:bd:04:93:9c:b0:1e:16:08:94:2b:fd:
d4:66:eb:04:4d:97:61:b6:ba:92:d4:8f:6d:86:72:57:a1:d1:
de:36:8e:a5:70:ce:ee:16:26:c9:21:8a:e6:3a:f2:16:35:af:
dc:92:24:e0:4b:9a:fa:9a:17:bf:08:64:79:5f:e7:01:9e:7c:
42:07:7b:7c:c9:81:d4:62:26:fb:c7:00:44:b2:d1:bd:79:f6:
11:39:90:52:89:77:52:84:ce:3d:1d:49:da:1f:c7:f5:21:17:
4c:f7:53:fe:01:a9:63:ed:17:3b:53:99:81:f7:a4:b2:39:1b:
53:8a:c1:d1:59:72:c7:07:18:b2:66:f0:53:07:4a:9b:07:97:
66:c4:9e:ed:e1:f3:28:62:b8:53:05:ed:df:5f:69:31:47:b7:
20:c7:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:34 2025 by rpki-client