Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
File: OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft (raw, json)
Hash identifier: ypjdwr5D6pD9i26O/Pvx7KJ3lfVyQH+Ky9+O+HxLp5w=
Subject key identifier: 8F:22:10:4B:D4:72:E8:CB:F9:03:A4:85:47:6E:F6:32:8A:F5:FC:C8
Authority key identifier: 3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
Certificate issuer: /CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Certificate serial: 01963E0ACFB4242963F4E1A3180A59E400B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
Manifest number: 0DD0
Signing time: Wed 16 Apr 2025 10:00:17 +0000
Manifest this update: Wed 16 Apr 2025 10:00:17 +0000
Manifest next update: Thu 17 Apr 2025 10:00:17 +0000
Files and hashes: 1: OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl (hash: 1uFZziqSuqv5uqq5159IukqzeVL9H/eYSjPw/5nmq0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0a:cf:b4:24:29:63:f4:e1:a3:18:0a:59:e4:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Validity
Not Before: Apr 16 10:00:17 2025 GMT
Not After : Apr 17 10:00:17 2025 GMT
Subject: CN=8f22104bd472e8cbf903a485476ef6328af5fcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:e6:7e:96:14:d4:6b:97:96:2e:7d:ec:0b:
6b:d9:11:3e:3d:a8:66:f6:81:88:d7:2e:81:29:02:
43:a0:09:8b:2a:8d:d5:65:56:64:9c:8c:89:cd:86:
94:00:90:ae:1f:af:4a:70:08:7e:a4:96:30:41:d2:
36:fe:0e:45:49:7d:dd:a6:51:4d:95:35:c6:eb:c9:
2a:23:4e:d2:1b:a8:c5:ae:74:f2:76:44:66:da:64:
42:a1:33:22:bb:40:aa:da:47:7b:43:66:c4:a7:32:
9a:02:30:13:f9:8a:d8:6d:26:b6:40:e6:89:4f:b1:
33:3f:21:d8:79:1e:6c:55:4d:b7:38:3f:69:00:3d:
30:9e:76:2a:2c:b6:34:a8:78:66:24:bc:f3:f3:13:
da:0a:49:4d:c8:eb:fc:b8:76:e3:95:e5:c9:f1:79:
f4:53:4b:2e:23:69:ef:83:1a:ee:d7:dc:3c:80:66:
5a:53:7c:fb:48:90:dc:83:56:a0:fb:01:48:4a:b2:
35:77:24:51:ad:e5:40:58:02:4f:ee:c0:0c:eb:83:
0c:f4:ed:10:d7:25:46:da:33:b3:14:cc:e8:fc:65:
b4:a5:4e:fc:46:bd:6b:b7:c8:d0:55:eb:1b:8b:98:
e1:27:fe:67:c7:36:ca:38:8c:b1:97:43:d2:9c:ac:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:22:10:4B:D4:72:E8:CB:F9:03:A4:85:47:6E:F6:32:8A:F5:FC:C8
X509v3 Authority Key Identifier:
keyid:3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:50:ec:b1:47:06:bf:d4:dd:48:bb:d9:87:cd:7a:98:ca:
3f:b1:0e:1e:b4:de:09:91:30:c5:2c:ab:c9:6c:d6:6c:94:1b:
b2:1e:05:9d:7c:a3:23:6d:73:04:29:f1:0f:2d:99:df:26:3c:
fa:7e:25:d3:fc:82:82:0c:cb:61:12:40:ef:a4:28:f4:fd:e0:
88:c9:4b:ad:91:4c:2f:b2:d8:ba:1f:d2:30:10:75:2d:a1:0c:
7a:59:92:e0:38:20:54:e8:45:8a:e1:0f:47:82:08:e5:1a:0b:
71:8d:c0:11:88:48:d5:a1:2c:a2:7f:f8:55:5a:a5:ee:8d:c8:
51:fe:57:ec:ac:4f:88:f2:ee:7c:f8:38:1a:73:5f:64:99:e0:
52:31:31:74:ee:c6:de:45:d0:ee:32:16:41:de:d9:f8:ec:fb:
23:e1:3c:98:f3:6e:a9:7a:a8:9a:e1:dd:66:85:01:ba:9e:81:
34:cd:7f:1c:4b:5b:5c:84:b5:e2:16:ee:c9:82:1c:75:fa:50:
fc:b1:9a:9b:7c:28:13:8d:23:bd:02:8d:f1:53:22:a5:da:2e:
12:40:e9:7f:53:5b:c8:65:7c:71:fd:41:c4:91:16:d2:f0:92:
2d:9d:f5:a3:9d:07:d5:0a:2d:31:01:b2:d0:c6:0e:0b:cf:81:
40:60:96:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+Cs+0JClj9OGjGApZ5AC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmM2MjQ3ZWUwY2FlYzM2NWE4MDIyZjVmOGM2ZmVjY2Nh
NTcxMGQwHhcNMjUwNDE2MTAwMDE3WhcNMjUwNDE3MTAwMDE3WjAzMTEwLwYDVQQD
Eyg4ZjIyMTA0YmQ0NzJlOGNiZjkwM2E0ODU0NzZlZjYzMjhhZjVmY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuabmfpYU1GuXli597Atr2RE+Pahm
9oGI1y6BKQJDoAmLKo3VZVZknIyJzYaUAJCuH69KcAh+pJYwQdI2/g5FSX3dplFN
lTXG68kqI07SG6jFrnTydkRm2mRCoTMiu0Cq2kd7Q2bEpzKaAjAT+YrYbSa2QOaJ
T7EzPyHYeR5sVU23OD9pAD0wnnYqLLY0qHhmJLzz8xPaCklNyOv8uHbjleXJ8Xn0
U0suI2nvgxru19w8gGZaU3z7SJDcg1ag+wFISrI1dyRRreVAWAJP7sAM64MM9O0Q
1yVG2jOzFMzo/GW0pU78Rr1rt8jQVesbi5jhJ/5nxzbKOIyxl0PSnKyfEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8iEEvUcujL+QOkhUdu9jKK9fzIMB8GA1UdIwQY
MBaAFDq8YkfuDK7DZagCL1+Mb+zMpXENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3J4aVItNE1yc05scUFJdlg0eHY3TXlsY1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MzNhYmItMmMzZC00ZGQzLTgwZWIt
YjhjZjY0OWRlMzJjLzEvT3J4aVItNE1yc05scUFJdlg0eHY3TXlsY1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MzNhYmItMmMzZC00ZGQzLTgwZWItYjhjZjY0OWRlMzJj
LzEvT3J4aVItNE1yc05scUFJdlg0eHY3TXlsY1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYctQ7LFH
Br/U3Ui72YfNepjKP7EOHrTeCZEwxSyryWzWbJQbsh4FnXyjI21zBCnxDy2Z3yY8
+n4l0/yCggzLYRJA76Qo9P3giMlLrZFML7LYuh/SMBB1LaEMelmS4DggVOhFiuEP
R4II5RoLcY3AEYhI1aEson/4VVql7o3IUf5X7KxPiPLufPg4GnNfZJngUjExdO7G
3kXQ7jIWQd7Z+Oz7I+E8mPNuqXqomuHdZoUBup6BNM1/HEtbXIS14hbuyYIcdfpQ
/LGam3woE40jvQKN8VMipdouEkDpf1NbyGV8cf1BxJEW0vCSLZ31o50H1QotMQGy
0MYOC8+BQGCWAw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:23:46 2025 by rpki-client