Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: MBzmgrvyQp3sFZSh/1F41tb57kV2all5WfUWCY7oAu0=
Subject key identifier: 5C:BA:B0:2C:84:EE:F6:BE:A7:B4:52:BA:27:69:77:D5:AD:E9:DB:88
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019850B190454D15DF9D8E79BED300417004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 06ED
Signing time: Mon 28 Jul 2025 11:01:10 +0000
Manifest this update: Mon 28 Jul 2025 11:01:10 +0000
Manifest next update: Tue 29 Jul 2025 11:01:10 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: ByFYpXew9E3wlTpzJNCE1tdN701LP0tzIA2Y5+l06xU=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:b1:90:45:4d:15:df:9d:8e:79:be:d3:00:41:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Jul 28 11:01:10 2025 GMT
Not After : Jul 29 11:01:10 2025 GMT
Subject: CN=5cbab02c84eef6bea7b452ba276977d5ade9db88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:65:4f:3f:a4:df:8e:bb:c6:17:ed:ab:b8:
85:c5:30:e1:85:39:7b:b2:d5:e5:d7:ce:ec:fb:32:
f1:e4:b8:d1:fa:18:85:35:0c:fe:3f:26:aa:6d:2a:
9b:29:24:37:ac:0c:18:e1:88:10:ec:2c:92:b3:05:
9a:92:1d:d5:f9:a5:c4:eb:ed:ab:ea:26:cd:72:f3:
37:88:ff:3a:f0:74:ba:3f:c9:ee:65:07:0d:a1:8f:
f1:42:05:50:73:86:0d:6c:ca:0e:89:8b:5c:57:eb:
c4:18:93:e8:dc:a0:1d:88:ef:f5:3f:55:f5:4d:c6:
26:37:f3:c9:fc:0e:e0:62:37:2b:e6:31:3b:17:c5:
f0:89:a0:d4:6c:f7:84:10:d0:f8:24:22:2d:a3:eb:
7d:19:61:56:5e:27:e9:a4:0b:89:88:94:e0:db:9e:
88:9a:a6:e4:72:f3:2f:ef:40:0e:ec:13:bd:6d:ad:
5a:47:a5:93:3c:1b:b9:e6:db:6f:03:af:5f:76:dd:
84:41:83:b0:b5:aa:af:59:5a:88:06:50:07:12:6e:
92:7f:fa:a3:fc:27:70:a7:b2:f3:3b:66:9f:1d:3a:
07:62:3e:ed:e5:7a:fb:59:69:83:c1:19:51:94:00:
04:ef:b3:fb:58:96:93:ff:6d:58:34:ac:c7:16:b8:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:B0:2C:84:EE:F6:BE:A7:B4:52:BA:27:69:77:D5:AD:E9:DB:88
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:d4:6d:4a:dd:a0:cd:05:49:03:cc:38:e7:4f:d4:36:0f:
97:6a:27:52:7e:ef:b5:6e:44:30:a7:c4:b2:b2:42:70:0c:12:
61:94:23:13:83:e9:3d:6b:9b:24:f8:3b:f1:7e:2c:47:ef:88:
f2:4e:c0:5c:c8:43:c9:74:aa:ce:2d:fe:45:f5:85:6a:00:ae:
98:fc:bb:7c:ec:27:d1:05:29:d7:d1:c8:8e:e7:40:75:18:7e:
af:47:78:f1:b1:8b:ee:0b:74:da:74:f3:49:14:29:c7:40:cb:
f3:32:c0:54:d6:3d:0f:f8:7f:ef:6f:dd:f1:5b:57:2a:82:ad:
eb:1e:96:f8:48:3d:3f:fb:ed:38:11:c8:3e:7e:d4:fb:f9:46:
55:81:f6:40:d9:5b:e3:a9:4f:39:fd:b9:5f:6e:8c:70:3d:e9:
be:2b:d3:44:a4:0d:9f:5e:1b:8e:f6:f9:9f:2c:fe:aa:ab:81:
10:9d:9b:ef:f1:aa:ab:ff:c0:c3:df:70:02:73:51:92:50:8f:
a8:e2:1f:e2:71:b5:f1:be:8d:da:31:1b:4a:e7:da:40:f7:28:
5b:7c:a1:1c:03:aa:2f:01:9b:cf:f6:87:fa:ba:fa:ed:3f:14:
15:16:a0:e9:c7:42:ff:ba:2e:78:ca:60:e9:3f:87:7b:87:b6:
d2:d3:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:47:51 2025 by rpki-client