Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: LiRGyaNBmrdM30V9SVOvFfTecTp+XkEH+/O1oncQ+Ik=
Subject key identifier: A1:35:65:19:7C:9C:5C:CA:7B:54:BE:CF:76:28:79:F6:DD:AC:B2:80
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019A1CBF0A67741150407429D4AD01B3835D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 5C
Signing time: Sat 25 Oct 2025 19:01:13 +0000
Manifest this update: Sat 25 Oct 2025 19:01:13 +0000
Manifest next update: Sun 26 Oct 2025 19:01:13 +0000
Files and hashes: 1: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: hx3YYxWawvaCh3+ZxyDjcspTYeO8TDbduleVsv0lNY0=)
2: saWdrzat9gNhwDjToVtk8WsFYgw.roa (hash: gICbNWmSBInV+7Bf/50oOLEAVR12IrqsEIFbrP0sB00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:0a:67:74:11:50:40:74:29:d4:ad:01:b3:83:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Oct 25 19:01:13 2025 GMT
Not After : Oct 26 19:01:13 2025 GMT
Subject: CN=a13565197c9c5cca7b54becf762879f6ddacb280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:2f:e7:5a:80:a9:65:4c:d8:6a:a9:f2:66:
4a:d7:e3:81:7f:9c:0c:6f:9b:20:0b:67:e4:18:de:
53:f2:02:ed:92:a8:02:aa:a6:60:e6:3e:22:53:6d:
45:67:1e:f4:06:d6:71:55:68:1f:a0:4b:77:3d:f9:
d4:b9:c0:82:e7:db:c9:5e:c0:74:9e:4e:bf:19:d0:
75:6b:bf:a3:80:53:19:52:88:03:10:be:49:62:84:
fa:b5:12:7f:55:5c:bf:2b:71:15:1f:6f:2d:98:05:
73:7c:22:1f:76:34:7d:3a:f2:db:44:b7:a3:7d:d5:
c1:33:e3:33:cd:c5:8e:dd:25:5d:ff:5d:c7:dd:15:
ab:a3:d3:e7:c9:6c:d5:21:09:6e:26:bc:fe:69:07:
fd:71:35:db:9f:57:9a:57:0e:42:f0:71:c1:c1:7a:
11:41:30:52:db:3a:e5:33:1d:78:93:6a:ad:6f:a1:
ac:ae:aa:6d:5b:64:45:9c:ad:81:70:a1:84:0a:73:
e4:55:1e:63:27:9f:7a:2a:3a:59:01:95:20:14:f5:
74:3e:93:5d:a7:f0:cf:ba:fc:da:e6:74:2a:93:1d:
39:84:80:72:29:35:e1:d0:35:5d:0c:a6:9d:24:8c:
29:b8:99:fe:ec:42:76:33:f2:7a:ad:0e:82:ab:38:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:65:19:7C:9C:5C:CA:7B:54:BE:CF:76:28:79:F6:DD:AC:B2:80
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2b:90:b9:85:b8:64:f7:04:7e:8e:cb:00:8c:38:cc:3e:9f:
51:1d:48:c7:c1:76:e0:b3:1e:85:da:8e:4c:7c:51:55:07:3d:
ff:8e:67:c5:2c:54:af:10:45:ac:9b:fc:6e:dc:7c:be:4e:24:
94:5c:34:9f:1c:ae:5d:8f:d4:28:d6:f3:57:76:d9:59:dc:cc:
e5:4a:38:61:f8:0a:a0:1d:62:0b:6f:06:6a:f4:43:4c:11:38:
54:79:25:de:61:c9:6e:8a:23:1f:69:1d:1a:ac:0b:63:4c:cd:
aa:03:26:86:5b:cd:d8:69:60:fb:59:e7:d3:3d:ad:c5:91:f1:
c8:47:3d:78:b9:2d:e5:15:2a:cc:ca:6c:ad:d3:53:25:95:6b:
dc:30:34:8b:55:5b:f7:b0:e7:b8:25:76:20:e0:70:5d:e1:6c:
c3:0c:d7:15:3e:79:9c:18:b5:5d:9d:2b:05:cd:7e:cd:aa:aa:
b8:6a:1a:fc:a4:5a:bf:e0:5e:e5:b8:bb:cf:55:16:63:bd:95:
8c:49:c4:f1:c9:db:0b:8c:c8:4c:9a:ac:ea:d5:09:c1:0d:88:
e1:19:de:49:56:cc:b2:6e:8a:60:52:43:d2:f5:5d:d3:bd:97:
74:8e:d1:3e:d1:84:c2:e0:fe:94:c5:74:e6:72:f5:61:7b:bc:
78:c4:90:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvwpndBFQQHQp1K0Bs4NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk
MWU1MDgwHhcNMjUxMDI1MTkwMTEzWhcNMjUxMDI2MTkwMTEzWjAzMTEwLwYDVQQD
EyhhMTM1NjUxOTdjOWM1Y2NhN2I1NGJlY2Y3NjI4NzlmNmRkYWNiMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslAv51qAqWVM2Gqp8mZK1+OBf5wM
b5sgC2fkGN5T8gLtkqgCqqZg5j4iU21FZx70BtZxVWgfoEt3PfnUucCC59vJXsB0
nk6/GdB1a7+jgFMZUogDEL5JYoT6tRJ/VVy/K3EVH28tmAVzfCIfdjR9OvLbRLej
fdXBM+MzzcWO3SVd/13H3RWro9PnyWzVIQluJrz+aQf9cTXbn1eaVw5C8HHBwXoR
QTBS2zrlMx14k2qtb6GsrqptW2RFnK2BcKGECnPkVR5jJ596KjpZAZUgFPV0PpNd
p/DPuvza5nQqkx05hIByKTXh0DVdDKadJIwpuJn+7EJ2M/J6rQ6Cqzg5VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE1ZRl8nFzKe1S+z3YoefbdrLKAMB8GA1UdIwQY
MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt
NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh
LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCuQuYW4
ZPcEfo7LAIw4zD6fUR1Ix8F24LMehdqOTHxRVQc9/45nxSxUrxBFrJv8btx8vk4k
lFw0nxyuXY/UKNbzV3bZWdzM5Uo4YfgKoB1iC28GavRDTBE4VHkl3mHJboojH2kd
GqwLY0zNqgMmhlvN2Glg+1nn0z2txZHxyEc9eLkt5RUqzMpsrdNTJZVr3DA0i1Vb
97DnuCV2IOBwXeFswwzXFT55nBi1XZ0rBc1+zaqquGoa/KRav+Be5bi7z1UWY72V
jEnE8cnbC4zITJqs6tUJwQ2I4RneSVbMsm6KYFJD0vVd072XdI7RPtGEwuD+lMV0
5nL1YXu8eMSQiQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:38:30 2025 by rpki-client