Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: D2xTpWTTfDyW+YzX/t2afMha5TpXISKjRqudu5D79t0=
Subject key identifier: DE:A7:12:B6:A6:3F:82:7B:54:4A:1F:40:1D:B5:36:DC:81:6E:6B:5E
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 0198469B233113F5F0C8FE139790B7266300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 8B
Signing time: Sat 26 Jul 2025 12:00:28 +0000
Manifest this update: Sat 26 Jul 2025 12:00:28 +0000
Manifest next update: Sun 27 Jul 2025 12:00:28 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: ukDovOUxIfxxYbI4EhqQupUYq81Hs7I7yrXC+HgJUgI=)
2: T6FOCyz_je-bCYNA14loRkLn-go.roa (hash: RTnOVvTVNPz5Tb8FJf3ztpbxOQkBZj4f/NkLYwSkf+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:23:31:13:f5:f0:c8:fe:13:97:90:b7:26:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Jul 26 12:00:28 2025 GMT
Not After : Jul 27 12:00:28 2025 GMT
Subject: CN=dea712b6a63f827b544a1f401db536dc816e6b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:74:dd:d2:03:c5:39:dc:50:12:44:af:74:
f9:b6:f4:9e:82:ff:32:19:5d:5a:be:e3:bf:f0:1e:
87:2a:06:b3:2b:8a:7c:b4:03:b8:7f:ec:81:ea:a1:
45:f3:0d:e8:e8:b1:e8:6f:21:13:de:16:79:34:ac:
1c:e0:e0:7e:37:a8:48:dc:34:51:95:b3:6e:4f:67:
d4:d4:52:fc:bb:e4:f6:a2:69:19:b6:c8:87:60:48:
2e:91:41:37:41:e5:c1:0e:e4:4e:ab:72:75:a0:e6:
55:ff:d2:80:46:64:e7:ed:1f:98:63:80:d8:82:cd:
32:a5:49:75:a1:1e:3b:e2:0c:e0:df:43:87:50:4a:
bc:b3:f8:37:e3:8d:9f:a0:d0:f7:9a:68:14:fe:35:
47:46:61:09:8f:49:35:56:3a:e9:ff:37:b1:50:24:
e4:83:91:a2:b9:22:71:97:f1:29:95:ae:a4:95:f2:
d5:9f:b1:7b:a1:6e:b5:dc:41:26:e7:fd:a8:01:f3:
99:eb:54:1a:81:a7:f7:ba:af:3e:c6:75:00:7b:52:
f5:56:d3:98:1e:de:79:0a:e0:80:49:c2:6a:93:55:
ae:85:c9:4d:67:9e:d2:fb:c1:8a:9f:f0:7a:42:03:
59:8f:33:ee:27:f7:3b:1d:0f:af:3d:72:31:f0:96:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:12:B6:A6:3F:82:7B:54:4A:1F:40:1D:B5:36:DC:81:6E:6B:5E
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2b:32:c8:8d:98:d1:14:71:2a:f4:26:b4:66:2e:cd:74:88:
33:9f:97:45:14:a2:e4:ea:1d:d2:94:a9:37:51:27:1f:6e:5c:
21:10:65:b2:08:78:96:05:a0:dd:51:44:60:f7:ef:18:27:db:
03:a9:3a:18:13:c1:6a:1c:58:f1:eb:38:fc:3d:3d:35:27:c6:
c7:cd:e8:be:b7:22:fd:82:a5:7c:89:db:41:f8:84:28:c9:9c:
49:fa:4b:21:8f:2a:c7:a5:cc:f0:5e:ab:f5:9c:68:bc:c9:6d:
ea:be:dd:aa:58:9a:59:30:bb:73:6d:d1:c6:45:43:ec:ac:6f:
8a:95:1a:f0:f2:72:f6:be:c1:b7:3c:a1:84:db:26:92:2a:71:
52:7e:55:74:4a:05:13:ab:52:a7:84:3b:c2:66:b0:e3:42:6a:
54:bd:31:87:0d:ad:78:9f:04:c3:ff:73:8d:e3:10:bc:62:06:
50:b7:90:42:a1:9d:43:26:b3:25:20:9a:06:79:6c:9f:65:1f:
6a:94:41:f7:13:5f:27:6b:ff:42:27:a9:a4:66:b3:78:7f:c0:
39:70:4f:6d:67:fd:36:65:e7:93:1f:30:46:88:bf:a8:85:e9:
76:0b:e8:e9:65:45:6e:32:0d:7e:75:20:bf:57:10:24:35:cd:
7e:aa:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:46:22 2025 by rpki-client