Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: YUmtYKbDGQ8whOVFg0qWJgEMO+k4+Qk6ncg8iL+QAJo=
Subject key identifier: 1D:CD:9B:0B:CE:A4:DE:26:57:B6:17:74:30:FD:53:5B:C3:D3:FA:22
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 01984AE5CA46867F915E9CA42B43591ECC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 031D
Signing time: Sun 27 Jul 2025 08:00:30 +0000
Manifest this update: Sun 27 Jul 2025 08:00:30 +0000
Manifest next update: Mon 28 Jul 2025 08:00:30 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: vMNVRbjqIaaPl7ZFj7kOEpCZx88sJw+atfElBl1oC1I=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ca:46:86:7f:91:5e:9c:a4:2b:43:59:1e:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jul 27 08:00:30 2025 GMT
Not After : Jul 28 08:00:30 2025 GMT
Subject: CN=1dcd9b0bcea4de2657b6177430fd535bc3d3fa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:02:1c:75:40:18:1d:8f:e9:80:c6:b6:18:
be:f0:fb:31:34:f8:02:04:f1:be:c3:0d:63:96:c5:
26:0a:80:b2:aa:18:ae:e5:4c:51:60:94:08:10:e9:
3d:ce:07:51:8e:3a:38:44:d6:c4:f7:d1:8a:c8:bf:
1d:40:c2:b4:6c:e0:8e:32:e0:a7:70:28:9a:fb:60:
83:db:aa:5f:3b:3c:cc:2c:59:28:6d:2b:fd:22:cb:
e7:5b:f1:bc:58:08:a2:17:db:f2:16:bc:18:51:75:
5d:37:e5:8a:c3:80:64:3d:ae:ea:d9:0c:e5:b8:94:
cb:17:d1:46:ab:95:ab:cc:97:ea:93:76:eb:73:fe:
9d:93:16:c9:7c:3e:cf:32:79:33:f3:79:6e:3e:6b:
35:e7:c4:4a:ff:8b:2b:41:ff:a4:27:4e:a5:90:39:
ca:61:4e:0d:83:27:56:79:a6:c0:02:19:cf:b7:88:
fb:80:2f:ca:a4:bd:f6:32:72:b7:22:64:0c:15:9c:
58:9d:94:4d:86:93:fb:88:1e:68:b6:f4:c4:65:e8:
44:08:e4:93:fe:e4:04:8b:53:1e:f5:56:ff:a8:be:
01:8f:19:2f:fd:49:7a:7d:3b:b6:09:82:f9:7c:cc:
9a:9a:c7:ef:de:38:06:b5:f1:bd:37:65:51:b5:58:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:9B:0B:CE:A4:DE:26:57:B6:17:74:30:FD:53:5B:C3:D3:FA:22
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f1:92:44:78:1c:e0:b8:e0:af:97:35:46:8f:77:a2:76:e4:
9b:8b:95:da:e9:36:67:14:1e:58:48:58:2c:e1:72:97:15:3c:
3a:f1:05:e7:e9:c4:74:3c:a4:99:0e:dc:a5:81:46:f3:6d:28:
82:f9:df:9c:26:4a:3c:cf:f0:13:84:2b:9c:7f:a8:92:16:54:
91:c4:40:75:1a:c1:1f:2e:e6:57:28:c0:74:2a:c4:3e:54:fe:
39:97:92:c5:5a:1d:f6:39:7b:06:1d:b4:4f:a9:d1:70:7c:ef:
f0:34:42:8c:49:8a:2c:78:ac:89:ab:28:fd:1a:c7:70:58:63:
da:83:a6:dd:fd:cf:e2:59:88:07:05:e7:77:ae:9c:85:bf:0c:
9e:19:b5:48:21:a1:f5:ad:70:83:08:a5:67:3a:1f:7f:4f:fc:
c0:33:f5:7a:ee:0d:e4:9f:01:ad:ad:1e:c8:26:53:55:25:40:
67:4c:50:f1:eb:e1:4d:69:ce:8d:30:b9:a7:fc:3e:dd:ee:8b:
71:34:58:70:7d:65:99:2f:8f:4d:d0:83:0e:dd:e7:c7:74:ae:
45:08:01:25:3e:f8:78:b2:3f:d5:57:fa:cb:f0:28:99:08:5e:
5d:d0:37:5d:c6:d5:d2:3e:21:ff:8b:23:34:d5:ea:3c:97:60:
7f:1f:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:54 2025 by rpki-client