Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: hamYv4BGVkdesaVeOvMmpoORnCgC+aTN21h0/S6NXS0=
Subject key identifier: 70:C0:7B:3A:15:B4:5D:45:C2:58:15:7E:E1:B2:5D:F7:E4:46:B3:29
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019A7149FA97D554F7B678B97090CB3FEB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 0807
Signing time: Tue 11 Nov 2025 05:01:04 +0000
Manifest this update: Tue 11 Nov 2025 05:01:04 +0000
Manifest next update: Wed 12 Nov 2025 05:01:04 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: r4yKORUa7iB+L1TNj6vC41wYQLatY9jV0FkmADGyiZo=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fa:97:d5:54:f7:b6:78:b9:70:90:cb:3f:eb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Nov 11 05:01:04 2025 GMT
Not After : Nov 12 05:01:04 2025 GMT
Subject: CN=70c07b3a15b45d45c258157ee1b25df7e446b329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:04:ec:ef:91:22:41:73:48:ef:e9:26:21:
fd:55:65:7b:ba:48:c0:5b:0e:7f:fa:8e:5e:9e:a8:
7d:f5:33:e1:82:3c:a0:55:dc:de:d5:9b:af:21:b1:
a0:2a:bd:61:a4:cf:3f:61:18:a0:04:cb:d9:a4:71:
e9:b2:15:07:2a:9b:34:97:67:66:0b:bc:b7:0e:c4:
ef:58:d7:30:d9:d5:44:99:0a:3f:76:4d:bb:bd:9a:
4b:da:1c:84:63:b4:a4:09:6c:10:3a:1f:4b:13:bb:
51:e4:17:3d:d7:53:0c:7c:c4:d0:42:78:c6:28:54:
11:38:3c:4f:31:ff:a3:19:f1:f4:5c:1e:96:71:c4:
ac:a1:7e:af:ef:f8:06:af:93:e1:e1:73:26:56:0b:
c6:8c:59:be:26:bc:ec:40:59:1c:81:36:89:3c:4a:
f9:04:fb:fa:d5:13:e0:f1:35:02:95:70:2b:d8:90:
6e:73:47:7d:56:6e:51:fb:13:bb:1c:f4:9e:2c:e3:
40:2e:50:3d:98:6e:42:71:cc:8e:c9:dd:77:bf:06:
7d:f4:44:17:cd:ac:2e:97:cf:2d:f4:49:1d:25:83:
c9:d3:b1:07:0d:f8:68:e4:8d:a8:cb:23:f1:a1:ad:
42:c8:45:8d:34:16:e3:6c:30:a4:13:66:f3:40:35:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:7B:3A:15:B4:5D:45:C2:58:15:7E:E1:B2:5D:F7:E4:46:B3:29
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:2e:69:31:66:f1:d4:40:6b:19:c8:37:13:56:a6:10:58:
d4:af:68:04:7b:b6:e9:9f:46:3f:74:17:d0:58:68:b8:26:c2:
cd:d2:b7:c7:07:c8:7d:e0:8b:69:02:81:44:17:7c:6b:b9:b0:
02:ce:18:cd:ba:69:36:45:81:ff:65:46:75:3b:4b:c3:da:27:
cf:7b:4f:27:6b:29:1f:d8:b3:59:64:d5:63:49:8f:b7:6c:6f:
d5:2f:40:0b:b2:7e:75:a6:04:52:99:ab:34:bd:2a:e2:5a:51:
15:2c:b2:5d:e2:66:0a:51:4c:1e:80:ee:9d:29:4c:88:63:8e:
0f:23:11:9a:3e:b2:22:1f:82:aa:f7:c1:be:c5:24:4b:85:21:
34:af:65:05:4b:56:ec:2f:b2:16:e4:08:b2:3d:cd:ee:d5:41:
cb:c5:65:a8:cf:63:d4:d6:cf:02:4c:fa:30:2a:18:da:39:c0:
ad:5f:1c:18:c7:b0:45:c9:97:a2:67:08:ae:5f:81:6e:23:55:
e9:77:82:15:46:ad:99:22:e3:e2:d0:b9:6e:8d:27:61:21:99:
a4:90:50:2a:28:36:96:3f:1c:ef:ec:b6:cf:0a:ce:9f:44:f0:
9e:a9:c6:c3:5f:16:e4:92:67:dc:94:44:de:3d:7c:28:95:f2:
e3:e2:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:04 2025 by rpki-client