Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: DM8EhBYk7tw/UdZNonujw/Y2aGQEjWR4geycW3FBXm8=
Subject key identifier: 43:2C:1E:3E:C9:5D:17:59:33:7B:A0:24:6C:39:05:2C:DE:E7:FC:B1
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 0199FEEBA0B4536DD31D9A1D4F87C3BF4C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 016F
Signing time: Mon 20 Oct 2025 00:01:18 +0000
Manifest this update: Mon 20 Oct 2025 00:01:18 +0000
Manifest next update: Tue 21 Oct 2025 00:01:18 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: 4gM88q0Y+Eu30xgq6YT0uJKvKwxBS0R8vK1gNfX31eE=)
2: T6FOCyz_je-bCYNA14loRkLn-go.roa (hash: RTnOVvTVNPz5Tb8FJf3ztpbxOQkBZj4f/NkLYwSkf+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a0:b4:53:6d:d3:1d:9a:1d:4f:87:c3:bf:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Oct 20 00:01:18 2025 GMT
Not After : Oct 21 00:01:18 2025 GMT
Subject: CN=432c1e3ec95d1759337ba0246c39052cdee7fcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:97:34:5b:0c:2d:be:d3:7a:a1:3a:56:6b:
52:ee:aa:95:dc:5c:5a:65:9e:22:91:30:58:c6:c9:
df:77:8e:29:81:d8:ba:6f:6b:b3:e9:f2:ad:45:6d:
95:f2:5e:d0:0b:37:a8:a3:01:73:b5:46:56:a9:2b:
3e:27:70:e1:49:e0:94:e8:f0:36:1c:e3:e2:24:db:
85:dc:4d:8f:aa:a5:9e:e2:87:61:42:48:31:90:02:
d7:30:a7:a8:01:ee:ad:f2:8d:aa:12:fb:32:79:54:
a9:dd:17:8c:c2:67:aa:80:72:5f:cf:51:54:7f:59:
ed:f9:7f:4c:77:ee:ec:3c:9c:f2:41:a6:5e:02:dc:
0d:dc:48:96:b8:cc:93:d0:43:45:1b:4b:9c:da:ec:
db:42:b0:70:de:6f:5a:11:7a:c0:40:ea:3c:d9:90:
33:b8:b7:08:4c:f6:27:97:be:7b:66:13:cd:06:ff:
bf:ba:c8:69:76:5e:c4:6d:27:25:1f:ea:c7:68:66:
14:67:96:e0:7f:59:dd:7e:fc:aa:3f:db:c5:51:f9:
06:df:80:09:0d:50:5d:98:77:bb:79:59:39:b2:1c:
79:e3:7c:91:ea:28:37:fe:ce:37:16:59:5d:57:e5:
66:0f:07:18:ce:0e:23:ee:0a:be:a0:18:27:1e:23:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:1E:3E:C9:5D:17:59:33:7B:A0:24:6C:39:05:2C:DE:E7:FC:B1
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:39:69:00:ed:35:be:8a:73:02:b2:d0:7e:8f:99:6d:b6:
ca:65:ee:49:ae:94:f4:25:58:a4:70:de:40:b8:6f:b0:57:03:
8d:c7:1d:09:5c:75:68:00:5a:ac:df:3c:99:d5:16:11:06:4b:
94:15:0f:e6:9f:85:ee:0f:27:77:ca:75:73:71:d5:dd:44:2a:
e8:e2:b8:9f:f4:28:a1:9e:97:1b:4e:d4:94:ed:17:59:66:99:
fc:50:a4:3f:24:23:c4:c8:1f:6d:75:4f:52:e4:35:9b:07:8c:
51:ca:81:f9:4b:7d:d0:35:f8:e6:d8:05:58:65:00:13:5d:12:
af:bf:5b:bb:2f:32:52:09:a8:75:d6:58:ff:2f:73:e5:36:c9:
20:ee:b5:c2:a4:bc:38:5b:8e:32:bb:01:85:96:32:62:fd:20:
0b:d2:35:19:46:6f:7a:71:fb:9f:7b:16:04:e6:4e:17:c7:b3:
04:96:03:43:54:d7:06:35:27:43:19:43:57:ca:b8:06:6c:25:
47:19:19:b5:44:46:bc:1b:96:3f:36:6b:fb:fe:3b:14:1d:ed:
87:5c:c0:00:7c:39:a3:21:12:70:54:1a:35:c4:52:77:8b:06:
4b:e3:50:f6:5d:12:c3:3c:93:c7:23:2c:82:ef:79:5f:e0:d0:
10:6a:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:43 2025 by rpki-client