Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: wraxdD+oEvEPglhRH9Y+ujJB1YrpT1GJfqBov3fz3vs=
Subject key identifier: E5:3C:02:E3:F3:50:3C:01:57:91:96:C8:FE:71:CA:0B:FB:5B:58:21
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 01991763D2BC714E0C726DEFBD66AEE0BB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 0DE7
Signing time: Fri 05 Sep 2025 01:00:41 +0000
Manifest this update: Fri 05 Sep 2025 01:00:41 +0000
Manifest next update: Sat 06 Sep 2025 01:00:41 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: N9X+QPdCYMj+V8YQfmx1PJyRrl1Y1xX9CW7U0RF+0eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:d2:bc:71:4e:0c:72:6d:ef:bd:66:ae:e0:bb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Sep 5 01:00:41 2025 GMT
Not After : Sep 6 01:00:41 2025 GMT
Subject: CN=e53c02e3f3503c01579196c8fe71ca0bfb5b5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:0c:31:b7:4f:4f:18:57:f4:c4:0d:69:4c:
1c:b1:8f:84:4a:26:66:57:cc:f8:a3:2f:e2:25:a0:
4d:e5:af:d9:82:c3:ef:87:6e:70:bf:65:54:23:f0:
f6:06:d1:31:a7:eb:b2:39:04:05:0b:e8:d9:c7:c2:
eb:c3:e4:ca:6c:c6:85:12:69:50:3c:9b:86:20:b6:
96:71:64:71:6b:ed:bb:c4:44:cc:94:59:99:7b:c5:
ff:d3:0b:ed:16:58:0d:cf:e7:19:49:74:ef:91:2d:
71:25:2b:2b:93:e4:29:b5:5b:3c:23:45:51:e4:1a:
3e:30:e8:e1:75:39:c4:ee:70:5e:29:dc:1c:4b:90:
6b:6f:ac:67:00:9e:15:55:5b:36:79:52:3f:7c:c7:
d4:93:5a:87:9d:1e:6d:fa:e7:e9:12:22:f0:06:04:
84:06:74:ff:29:e6:d2:79:67:c1:2c:8f:7b:67:8d:
5f:1b:88:88:8b:be:63:45:da:44:a0:dc:1d:1f:25:
60:04:75:18:08:65:fe:1f:7d:b7:6c:d1:a0:c8:24:
3e:dd:4e:4e:5c:95:c8:0a:3d:d8:19:e1:0a:0e:e0:
a6:98:c8:7f:0d:d9:9a:f1:1a:f7:df:da:14:4e:e8:
22:5f:90:ad:87:ab:b4:76:a1:f3:d5:00:8f:0a:9f:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:02:E3:F3:50:3C:01:57:91:96:C8:FE:71:CA:0B:FB:5B:58:21
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:37:81:f5:c8:d1:7e:7f:df:75:66:a7:e9:87:65:79:7d:7c:
0a:30:22:bc:d0:7b:67:3c:c5:72:ba:20:38:04:4e:45:dc:64:
1f:f6:59:9f:dd:c5:ad:52:63:6b:61:98:f2:68:d2:ff:8b:85:
2b:92:e0:f6:6f:54:5b:6f:1b:37:dd:68:e4:b3:a3:21:bb:02:
11:6c:07:1f:89:e0:d4:6b:35:23:bf:b6:bb:94:9a:54:23:f9:
f9:bd:d7:4e:7e:ab:a1:16:92:af:93:60:50:8b:60:26:31:d6:
3d:53:24:62:82:28:0a:36:3e:b9:3a:85:60:a5:ba:ea:f5:d5:
a7:0e:fa:c1:dd:aa:3a:6b:3c:3f:97:38:48:78:13:91:70:39:
19:17:06:0b:9f:c9:8d:86:09:71:59:ba:d2:dd:9f:10:97:32:
4e:cc:b2:bc:d4:75:b7:e5:1f:ba:26:7d:2f:47:c3:87:e9:a1:
02:9d:ab:56:4e:9c:5f:22:0e:f9:ee:e7:b4:5f:fc:b7:9e:c3:
f9:6e:24:af:b3:3c:89:45:5d:6c:96:a3:86:84:a3:ab:a2:2d:
00:bf:ec:58:be:6b:a0:18:ca:1c:7a:e7:3b:9c:b2:b2:95:42:
b9:40:77:93:ce:cd:d8:6a:75:f3:33:ef:a5:04:05:78:1a:ab:
c8:22:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:28 2025 by rpki-client