Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: I/6zErMoDPqqmreHha1wCTnn6Y056LRRUbQIjOwp+yQ=
Subject key identifier: BA:6B:EA:B8:1F:C3:A3:A9:34:37:CA:51:5D:E0:60:22:BE:82:36:0B
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 0196447B4DC866C3BC5ED84BB17555F88146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1487
Signing time: Thu 17 Apr 2025 16:00:53 +0000
Manifest this update: Thu 17 Apr 2025 16:00:53 +0000
Manifest next update: Fri 18 Apr 2025 16:00:53 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: Gzrmncd+1tuldAuETH5Amo+iTvnY2ROSEdpmOqpASuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:4d:c8:66:c3:bc:5e:d8:4b:b1:75:55:f8:81:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Apr 17 16:00:53 2025 GMT
Not After : Apr 18 16:00:53 2025 GMT
Subject: CN=ba6beab81fc3a3a93437ca515de06022be82360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:38:bf:1a:76:5a:aa:7c:90:4b:c2:aa:d9:
3a:d5:f6:8e:96:2a:e6:40:ad:c0:c1:69:6e:27:22:
18:f7:19:31:fb:16:25:b5:90:6d:ee:0a:3c:e0:7f:
75:59:4c:9d:7a:60:00:2b:3a:48:8f:9f:65:d7:86:
cd:88:cb:db:b1:b1:52:9c:0e:09:b0:4e:d0:9d:1f:
a8:61:96:3c:96:9e:2f:e5:b2:e8:7e:c9:cc:59:0d:
c8:c0:6d:37:fc:bd:1d:25:b6:b3:72:10:07:b6:b8:
a7:01:41:ee:83:ee:86:83:d2:3e:4c:49:31:c1:a8:
21:03:65:b0:ca:0f:1e:b1:3d:be:3a:72:8c:59:bf:
04:01:9c:4c:58:11:e4:a8:1e:fe:25:3a:e8:af:1b:
0d:7d:36:b4:e5:74:f5:4b:46:67:2e:25:e5:79:f9:
c8:06:a9:2b:aa:98:1f:0f:88:ea:02:68:3b:07:c8:
c2:63:d2:6c:c2:40:6d:ba:b8:d2:cb:0f:e3:98:31:
a0:1c:da:39:24:84:26:f4:96:fb:cb:fd:27:29:8b:
02:fe:6d:7e:55:37:2d:c8:f5:8c:0a:80:9a:cc:75:
76:94:e3:8a:03:bd:26:e1:b3:8e:33:c5:3a:37:85:
28:83:18:9e:e1:db:3d:79:30:cf:a6:6e:6e:c6:df:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:EA:B8:1F:C3:A3:A9:34:37:CA:51:5D:E0:60:22:BE:82:36:0B
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:16:7d:9c:6d:2f:f7:48:db:74:f3:33:b1:76:2b:b2:52:5e:
2a:9c:86:76:46:82:98:14:a4:85:c9:7f:2e:0f:93:0e:bc:78:
5c:a5:f0:ce:23:ad:ba:ef:22:21:a6:10:3b:66:c5:37:59:dd:
2e:76:af:6e:a7:5e:d8:2f:2a:04:97:70:19:a7:d8:a4:66:a4:
28:99:ec:06:38:f2:50:1d:05:b4:db:84:18:28:22:4f:00:60:
f4:b1:dc:04:6e:11:0b:9e:e9:67:82:2d:8c:c4:c9:77:bf:44:
46:51:75:e9:f8:a1:d6:15:be:6a:03:f6:0e:42:d3:9f:ec:68:
b9:35:b5:11:16:f0:02:5f:30:9d:71:15:37:5b:2a:a5:93:2f:
f7:fb:71:43:08:ad:86:08:fc:12:c3:6d:2e:b0:cc:2c:a9:28:
ba:2c:d5:cc:41:6e:c9:37:9b:ed:06:d5:c1:80:e9:97:9a:32:
c7:92:cc:12:0d:59:79:6b:67:d0:69:8a:66:be:31:60:b4:b2:
b8:27:85:11:64:f8:bb:01:80:dd:49:a6:c0:8d:42:18:d2:fd:
46:cd:94:bd:d0:d2:03:cb:71:44:65:b6:a9:c3:ff:66:c8:96:
c9:f2:40:b6:65:52:4e:76:ed:82:ff:09:ee:62:46:2a:32:4d:
cd:11:10:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEe03IZsO8XthLsXVV+IFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm
ZDc0NDEwHhcNMjUwNDE3MTYwMDUzWhcNMjUwNDE4MTYwMDUzWjAzMTEwLwYDVQQD
EyhiYTZiZWFiODFmYzNhM2E5MzQzN2NhNTE1ZGUwNjAyMmJlODIzNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cM4vxp2Wqp8kEvCqtk61faOlirm
QK3AwWluJyIY9xkx+xYltZBt7go84H91WUydemAAKzpIj59l14bNiMvbsbFSnA4J
sE7QnR+oYZY8lp4v5bLofsnMWQ3IwG03/L0dJbazchAHtrinAUHug+6Gg9I+TEkx
waghA2Wwyg8esT2+OnKMWb8EAZxMWBHkqB7+JTrorxsNfTa05XT1S0ZnLiXlefnI
BqkrqpgfD4jqAmg7B8jCY9JswkBturjSyw/jmDGgHNo5JIQm9Jb7y/0nKYsC/m1+
VTctyPWMCoCazHV2lOOKA70m4bOOM8U6N4Uogxie4ds9eTDPpm5uxt822wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpr6rgfw6OpNDfKUV3gYCK+gjYLMB8GA1UdIwQY
MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt
ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh
LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRZ9nG0v
90jbdPMzsXYrslJeKpyGdkaCmBSkhcl/Lg+TDrx4XKXwziOtuu8iIaYQO2bFN1nd
Lnavbqde2C8qBJdwGafYpGakKJnsBjjyUB0FtNuEGCgiTwBg9LHcBG4RC57pZ4It
jMTJd79ERlF16fih1hW+agP2DkLTn+xouTW1ERbwAl8wnXEVN1sqpZMv9/txQwit
hgj8EsNtLrDMLKkouizVzEFuyTeb7QbVwYDpl5oyx5LMEg1ZeWtn0GmKZr4xYLSy
uCeFEWT4uwGA3UmmwI1CGNL9Rs2UvdDSA8txRGW2qcP/ZsiWyfJAtmVSTnbtgv8J
7mJGKjJNzREQag==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:28 2025 by rpki-client