Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
File: OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft (raw, json)
Hash identifier: r720mwCyhMs3kbMaCjypKuo+ztEvPMO6pyX+fddIR7k=
Subject key identifier: 56:23:5E:67:EC:3E:DD:93:C1:09:B2:6F:DD:16:98:B8:05:4D:6C:68
Authority key identifier: 3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
Certificate issuer: /CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Certificate serial: 019A73A6F0E2C75E1BA3FFA67A4E4490B8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
Manifest number: 0FFE
Signing time: Tue 11 Nov 2025 16:01:51 +0000
Manifest this update: Tue 11 Nov 2025 16:01:51 +0000
Manifest next update: Wed 12 Nov 2025 16:01:51 +0000
Files and hashes: 1: OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl (hash: XUdFEBv47hwYjtnW/hocB3c7AypI4YJH/S/5/lKh6gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:f0:e2:c7:5e:1b:a3:ff:a6:7a:4e:44:90:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Validity
Not Before: Nov 11 16:01:51 2025 GMT
Not After : Nov 12 16:01:51 2025 GMT
Subject: CN=56235e67ec3edd93c109b26fdd1698b8054d6c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:b4:c7:b1:cd:a8:6f:fd:68:5c:6a:64:fd:
c2:5d:67:26:6e:12:72:51:f2:5a:12:99:6d:20:07:
d1:61:7c:a4:d6:81:4d:e8:57:66:a3:f0:dc:15:ad:
64:06:44:50:6a:5d:ea:fa:b0:e7:b4:11:34:2c:41:
a9:73:3b:e1:d7:95:ef:3f:a0:ed:d9:7a:d4:8e:2d:
57:01:9d:8e:b8:07:26:54:47:a7:1e:cf:72:23:7c:
71:f8:62:c8:ee:47:9b:8a:0e:66:3d:ad:b8:af:b6:
5d:5e:c0:63:ec:3c:91:07:cc:82:6d:36:34:e6:49:
29:3d:1d:7e:e1:6c:a5:9b:91:a6:35:14:54:0a:6a:
1c:67:4f:f9:cf:77:05:74:4f:2e:eb:70:44:2c:f5:
30:a2:45:04:1c:51:1a:98:16:8c:c4:c5:5c:19:1d:
2f:c3:59:0f:fa:c8:02:14:fa:7c:09:12:53:73:77:
cd:86:99:06:fd:45:95:e4:9e:aa:bc:99:13:56:74:
28:76:cc:7f:30:f1:b0:54:80:52:4f:49:83:8a:7d:
8f:cf:8e:cc:cf:04:28:60:e2:0c:ac:19:1b:b3:80:
ff:10:d7:07:e2:27:a8:73:5d:36:f6:7f:e5:1f:e9:
e1:87:7b:8f:53:39:9c:f9:e3:60:52:f5:e0:58:04:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:5E:67:EC:3E:DD:93:C1:09:B2:6F:DD:16:98:B8:05:4D:6C:68
X509v3 Authority Key Identifier:
keyid:3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ee:d7:9b:1f:46:0b:46:5d:00:f8:e3:64:d1:b9:ce:74:1f:
37:d0:43:08:8e:be:af:1e:79:66:61:34:47:89:31:98:79:97:
6b:d8:88:38:60:51:4f:5f:2f:6c:b8:d3:3a:bc:c8:fd:25:c3:
8f:a5:d1:cb:83:d8:1e:41:82:61:1e:30:fb:2b:29:9e:eb:ce:
04:1c:60:19:39:f4:c0:d9:b7:19:69:dd:81:c9:2c:b6:96:d7:
28:a7:46:db:84:be:c9:6c:10:b5:bd:26:7d:ed:c0:85:54:31:
0d:6e:bf:dc:7d:b2:b4:87:43:fc:4b:a2:fc:f4:85:36:bc:15:
3e:e3:3e:3a:c8:21:c7:74:1a:66:27:c5:87:67:21:97:ae:69:
81:c1:55:5d:13:60:33:71:ea:b9:d7:d2:b1:b9:76:a6:6d:02:
ff:af:f6:78:db:c3:f2:b8:3a:92:ca:d0:67:e8:de:95:02:91:
6b:66:f2:4a:fd:38:f9:0f:42:e0:e3:e6:6f:29:50:ef:72:8a:
8a:14:11:da:ea:c8:8d:2e:bd:c2:73:3e:04:bd:3b:cb:37:b4:
4c:63:6a:ed:c8:e8:ba:94:0c:80:77:03:19:b8:b2:35:46:6f:
c4:34:cf:49:58:3f:fd:08:94:57:a0:a0:ed:d5:36:36:2e:d9:
73:fb:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:43 2025 by rpki-client