Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: RXvj3bsRY4HM3V8tLJV6N/A0/NK7VluW7E/tBqV6uMo=
Subject key identifier: 8E:8B:1A:60:92:56:96:89:4E:5A:E9:9A:71:1B:84:9C:E0:EC:FB:28
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 0197462FAE51EF51AA0534A3E52B763C5B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 0663
Signing time: Fri 06 Jun 2025 17:00:19 +0000
Manifest this update: Fri 06 Jun 2025 17:00:19 +0000
Manifest next update: Sat 07 Jun 2025 17:00:19 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: RgFVct1MNWFQoSO6RkKHFUZDXu4thm3eTFkggFYu88U=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:ae:51:ef:51:aa:05:34:a3:e5:2b:76:3c:5b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Jun 6 17:00:19 2025 GMT
Not After : Jun 7 17:00:19 2025 GMT
Subject: CN=8e8b1a60925696894e5ae99a711b849ce0ecfb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:be:a0:46:1a:51:71:91:32:71:08:c9:c0:
5a:d4:2a:8c:3e:8b:1c:de:ee:b0:7c:eb:45:db:7a:
09:1c:2d:a6:43:2c:32:2d:3b:a1:f5:63:f0:37:08:
ed:bf:57:1e:13:e9:57:6d:c9:63:9a:f6:19:0d:2f:
a7:7d:3b:01:7a:b5:32:9b:c2:e4:d7:be:87:fa:9b:
ba:b5:1a:b5:04:35:de:56:41:61:b1:69:81:1f:1d:
fc:12:f4:b3:c7:49:40:da:56:91:51:e5:78:82:83:
66:7d:25:56:dc:2f:5f:03:f5:8f:c3:5d:6d:f8:59:
89:96:29:fb:6f:c6:3c:ec:5f:74:4b:96:b6:d8:ef:
3c:ee:c4:6e:20:f7:3f:f1:76:11:3d:86:aa:10:85:
d4:03:8b:39:e6:6a:13:4f:f7:70:05:32:e8:9b:4a:
bc:eb:26:7b:fb:57:22:05:85:de:2e:51:3d:54:aa:
8e:e2:37:b7:e2:7a:7f:37:7e:a8:dc:57:8a:7e:ae:
34:9c:ae:e6:1d:f6:64:49:09:4d:8f:4c:30:10:a7:
f5:b5:08:fd:3d:d2:a4:ad:f8:75:99:7d:8c:e5:ea:
c4:d6:aa:61:ad:3f:dc:75:08:d0:17:37:d4:ff:c9:
1c:cb:e3:54:e9:5a:fd:d9:1c:18:76:44:90:a6:c9:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8B:1A:60:92:56:96:89:4E:5A:E9:9A:71:1B:84:9C:E0:EC:FB:28
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9b:fc:80:fb:3a:6c:81:e5:58:8b:4d:e8:b0:ad:42:7e:45:
74:5e:64:1c:33:08:87:b9:76:33:7f:0b:7a:7a:e3:01:9c:b7:
20:d4:b9:b4:43:14:ac:7b:d8:5c:80:f2:9f:ea:2f:45:d5:8e:
58:47:4b:df:e2:20:a1:14:9e:8b:25:4a:46:ca:c0:b8:d3:de:
e7:e2:75:fb:0e:05:fd:b9:ce:0d:42:14:69:c0:e0:51:5b:55:
0f:8a:df:14:19:e3:a2:47:53:18:b2:c8:9a:0a:38:c1:89:b3:
5f:7e:01:fa:22:5b:ca:e6:31:73:0c:27:49:71:62:ad:4d:1e:
a9:29:eb:c1:96:f7:33:c8:51:21:02:86:d8:25:de:6e:6c:50:
de:1c:6c:18:93:ea:22:a5:ff:58:98:82:ab:85:09:36:df:33:
c7:a5:41:02:69:93:ed:8d:d0:f2:7a:31:75:f1:ef:1f:16:d5:
c4:91:a4:a9:31:08:3d:df:e9:a9:30:85:46:8c:ce:d3:49:91:
b7:12:2e:26:29:2d:cd:44:54:11:75:91:69:7f:41:80:86:c3:
96:bb:cd:05:42:77:70:8c:57:75:5a:89:55:9a:f5:a5:08:89:
e3:a3:94:34:71:f4:1a:92:15:8c:cf:ec:0d:6c:79:92:19:14:
2a:c3:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:40 2025 by rpki-client