Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File: orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier: xc9Ft+2nQ5d8IM/B5kLUUYwo12krOu0NmqaL1Ax1Tqc=
Subject key identifier: 7B:21:0E:7D:C0:DF:6F:05:C7:7A:D0:7C:E5:D2:85:BB:C8:0E:04:CA
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer: /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial: 019847783421F485C75453FF1C3366775CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number: 03A0
Signing time: Sat 26 Jul 2025 16:01:56 +0000
Manifest this update: Sat 26 Jul 2025 16:01:56 +0000
Manifest next update: Sun 27 Jul 2025 16:01:56 +0000
Files and hashes: 1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: ChewYt7y2CnvdkYIxYKtJe9ttbtM7KA92st29AKU7ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:34:21:f4:85:c7:54:53:ff:1c:33:66:77:5c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Validity
Not Before: Jul 26 16:01:56 2025 GMT
Not After : Jul 27 16:01:56 2025 GMT
Subject: CN=7b210e7dc0df6f05c77ad07ce5d285bbc80e04ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:da:78:5e:21:41:ed:4f:30:6c:c8:b9:6c:
ef:d1:32:a9:fa:57:77:32:07:12:6d:90:bd:ae:2e:
fd:bf:b9:b7:00:44:53:8a:cb:c8:53:76:13:1e:4a:
d3:38:19:4f:20:b9:eb:61:9f:2e:9d:4c:5e:bb:20:
3b:ec:6d:97:69:a3:bc:5f:4f:88:d5:d6:6c:92:7e:
ad:78:4c:e1:ba:e8:f1:27:5a:11:2e:df:39:6e:5a:
20:f9:4d:49:5a:44:65:f1:42:f6:bd:50:e5:b0:d0:
41:f1:83:ee:cf:ab:b0:26:04:1a:40:26:05:28:06:
61:39:4e:30:c7:1f:aa:ed:76:2a:49:b3:cc:af:a9:
7a:f1:46:d9:11:85:71:eb:be:79:0c:0d:54:a1:02:
c3:1e:89:f1:a4:f3:7f:35:57:76:d3:4c:ca:2a:dc:
6e:ba:a7:28:e5:66:a1:53:4c:8a:5d:f1:ea:89:f8:
f3:e8:c2:4c:d5:7b:f6:e8:b2:e7:6f:bc:4a:5f:75:
1c:f4:4e:e4:49:0e:34:8a:3f:5c:6f:23:21:a2:c9:
21:02:96:a9:c9:fb:ae:33:50:04:77:cb:5a:a5:dc:
0a:e5:c6:7d:66:e1:c9:14:7c:de:c9:9e:79:20:f1:
50:ce:3f:f0:8e:3b:36:bd:28:0d:82:d8:45:e8:da:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:21:0E:7D:C0:DF:6F:05:C7:7A:D0:7C:E5:D2:85:BB:C8:0E:04:CA
X509v3 Authority Key Identifier:
keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:55:e6:0b:43:6f:77:ff:2b:83:08:fb:8b:8b:6c:da:ab:
74:d1:8d:0c:81:1e:b2:32:67:2a:33:4b:fc:b8:ca:e8:5e:f7:
b8:29:75:3e:ca:c9:61:8b:eb:5c:4a:d5:2f:7d:8e:a8:1d:be:
f2:86:26:95:4f:b6:dd:99:fb:48:53:2d:df:21:e1:15:2e:7c:
85:a4:7c:7d:f8:c1:89:80:95:8b:44:43:2a:09:8e:3e:e4:1b:
49:05:5f:ae:9c:b5:22:7a:a7:32:54:5f:8a:67:00:9a:26:75:
5b:d5:62:f5:69:97:b8:5b:2f:67:43:a2:03:98:9f:2e:02:b7:
7b:f5:19:4e:aa:46:1b:4e:5e:5e:13:dd:b4:72:74:d2:f4:3a:
b7:9c:91:24:45:dd:d1:5f:ab:4b:ca:d7:36:4d:74:80:a3:7d:
fe:6d:19:c7:32:6b:2c:46:da:84:99:bf:8e:db:14:e9:3b:f4:
1a:35:91:b0:9e:ab:ae:04:cb:92:05:77:82:31:6b:a9:a6:b4:
63:85:3d:53:a7:b4:54:9e:a6:b3:2c:cb:31:27:9c:6d:44:ac:
77:f0:75:29:20:53:23:bc:ec:e2:02:14:e1:9a:0f:24:21:c0:
4c:51:a3:bd:a0:5e:07:b8:1c:dd:ec:f8:78:d5:6c:29:21:34:
b0:35:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:13 2025 by rpki-client