
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: BhjbmdTVLfc6vv+YLJI1YMROwHzJr2pdWhX1GhK4lV4=
Subject key identifier: C3:D6:74:C3:2B:9E:93:C6:CC:B2:96:10:7A:4F:4D:5B:2E:2C:97:58
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 01964FDA17A11A112781B166FF6C9BB03404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 1209
Signing time: Sat 19 Apr 2025 21:00:15 +0000
Manifest this update: Sat 19 Apr 2025 21:00:15 +0000
Manifest next update: Sun 20 Apr 2025 21:00:15 +0000
Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=)
2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: M8XXFSwUV28oCzLoE4+eLdJzmjGswktlJ8n48jaYruI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:17:a1:1a:11:27:81:b1:66:ff:6c:9b:b0:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Apr 19 21:00:15 2025 GMT
Not After : Apr 20 21:00:15 2025 GMT
Subject: CN=c3d674c32b9e93c6ccb296107a4f4d5b2e2c9758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:95:3e:79:2a:b9:a2:18:62:2f:0b:88:04:
45:f5:bf:bc:e2:7b:47:e6:b0:0d:f2:2a:5f:71:5f:
b7:b4:56:cc:38:1f:88:53:4a:95:8c:23:26:2c:0a:
a8:84:1d:03:48:32:11:e7:96:2c:a9:4e:53:da:51:
64:c1:66:b6:a7:d4:a4:10:9d:8a:51:41:87:32:4d:
20:13:08:c8:fe:63:c1:72:ee:38:02:4d:03:01:11:
f4:d4:c2:2e:ce:2b:6a:9e:82:ba:80:6f:6a:d1:87:
7e:d8:a3:dc:63:5d:cd:f9:16:ce:bf:89:ee:09:16:
00:09:de:0b:04:5d:50:4e:41:62:4d:0f:13:29:e7:
02:fe:a2:74:86:19:4a:1a:5c:5b:1c:a8:3c:ed:06:
fe:07:24:82:65:ee:f2:10:39:30:58:6b:ce:fe:ee:
32:52:3a:46:99:2a:f2:d9:de:28:06:fd:bf:9d:18:
ca:2d:04:48:13:37:76:9e:11:27:ff:78:6a:2b:77:
6d:94:5d:09:4b:db:17:4a:fc:82:d5:65:f5:ca:c7:
72:1d:c7:03:3e:5d:9b:9b:79:8b:ac:bc:0b:43:35:
eb:81:b1:a3:b0:ae:ba:3f:54:8f:a9:1e:42:83:e5:
f0:b1:12:1b:17:4c:c6:ca:f6:a5:aa:fd:39:b6:e7:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:74:C3:2B:9E:93:C6:CC:B2:96:10:7A:4F:4D:5B:2E:2C:97:58
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:66:dd:4f:0e:95:c5:dc:6e:56:72:38:0d:5a:50:23:fb:
3e:9f:66:94:17:5d:0c:1c:7a:44:e7:d3:82:0e:a9:9b:f7:60:
bd:ae:f1:29:ab:da:de:bd:df:34:08:a8:2c:ad:76:1a:1b:f1:
79:b3:99:59:b1:e6:bf:6b:26:7e:02:29:ce:ff:3e:66:6b:59:
bd:0e:0a:0a:c0:34:1d:df:e7:e6:95:41:70:fd:b3:4c:74:a8:
2c:43:20:d7:9c:c0:24:e6:f1:11:71:db:d9:37:36:0b:8f:fc:
7a:f7:2a:a7:2f:6e:f9:89:83:22:37:b5:de:70:1b:bf:d1:b7:
1c:98:9c:26:ca:db:67:40:9c:47:35:b8:6c:22:68:8e:1e:b2:
4b:72:8d:2d:f6:cc:b4:e9:e9:51:ed:d7:da:1f:c8:f0:98:77:
a5:01:3a:0e:19:9b:c0:0c:47:f5:59:60:c7:22:a2:ed:5f:fc:
10:b5:a7:70:c4:dd:ec:b5:a8:5b:e9:66:56:87:ca:4e:99:c5:
8f:8e:66:3b:2e:d5:74:b3:ef:1f:17:e7:8b:82:50:0c:8c:d8:
81:f5:43:7c:e7:73:e5:86:03:aa:f2:5e:c0:b2:3d:57:7f:9c:
e0:26:46:55:c4:be:4c:d9:0f:7b:de:b1:05:b6:e1:3d:73:ac:
ae:58:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:24 2025 by rpki-client