Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: fVDx2adqy+qB06mg7WZ93mYRw6j2HAVYP1vrm5eKTNg=
Subject key identifier: 90:B6:D3:62:EE:F3:EB:30:69:E5:63:6C:28:43:EC:E8:2D:27:8E:78
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 01958BBB396F45D4C3FFC4A084A9FEB7BF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 0C11
Signing time: Wed 12 Mar 2025 19:00:57 +0000
Manifest this update: Wed 12 Mar 2025 19:00:57 +0000
Manifest next update: Thu 13 Mar 2025 19:00:57 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: 0s/nkjZRE+eoqU8K0q3lH5bm5QPrX6EqvScr7pidPhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:39:6f:45:d4:c3:ff:c4:a0:84:a9:fe:b7:bf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Mar 12 19:00:57 2025 GMT
Not After : Mar 13 19:00:57 2025 GMT
Subject: CN=90b6d362eef3eb3069e5636c2843ece82d278e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:8e:31:9e:eb:cc:39:71:73:26:a6:ed:a4:
a4:4c:8e:10:9c:06:a6:f3:b6:c7:4c:87:1b:0c:ce:
1d:83:65:4d:19:ff:32:12:86:50:95:2a:4e:7a:0d:
a8:42:76:1f:46:37:f5:03:b8:25:fb:3f:93:4b:7e:
ae:36:5b:ea:14:64:75:b3:bb:5d:bd:1d:9a:7e:c0:
4e:9b:62:61:59:d5:a0:bb:3c:f7:bf:88:ac:cc:cf:
56:2b:44:cf:5e:2e:01:f0:dc:74:d2:ec:89:75:9c:
52:d1:70:5a:53:01:d3:c3:49:e6:16:cb:d5:76:a5:
6b:b8:2b:8b:ef:74:e0:cc:de:7b:6a:6a:5a:e4:02:
82:fc:17:34:d7:bf:18:ce:d0:6b:f6:86:0d:b0:97:
31:08:4e:a8:50:94:da:da:38:60:75:c7:92:06:de:
73:ce:08:49:90:51:8f:4a:d7:0b:11:6f:95:3c:a1:
f1:19:66:7f:15:12:45:c0:22:cf:fe:0f:ac:13:60:
34:2a:5a:30:eb:b3:52:78:11:f6:af:56:a9:5c:1b:
47:c0:d8:82:ca:86:6d:d6:4f:d7:4e:a4:1d:13:37:
d2:ab:86:fa:9d:3d:67:fd:62:dd:a5:62:1e:16:bf:
c0:c5:6f:b3:9d:f7:11:f2:e3:d4:09:a8:1a:59:2b:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:D3:62:EE:F3:EB:30:69:E5:63:6C:28:43:EC:E8:2D:27:8E:78
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:73:68:d0:db:82:1b:3e:fc:81:0b:5e:f7:0d:b5:ec:5d:9b:
c2:96:da:4d:0a:4f:3d:6f:1c:4a:6f:dd:05:a0:86:58:95:b1:
94:22:ab:d6:8e:eb:58:97:ba:0e:29:73:60:c4:e6:fc:5c:19:
45:00:d4:ae:0c:c5:14:70:b0:99:98:98:04:25:86:98:bb:67:
6b:2f:07:44:9f:64:28:fd:7c:93:c3:5d:00:77:27:11:08:d8:
c6:c7:96:23:9e:aa:e5:8c:cf:d1:b6:3a:95:a4:c7:ab:65:f3:
26:59:d3:a3:13:61:8a:bd:e4:e5:c5:cd:12:da:f2:56:22:d6:
45:93:e9:5a:96:d0:97:c6:2e:55:fb:fe:ec:35:54:65:4f:cc:
73:77:30:62:73:78:38:12:80:34:cb:c2:75:3f:32:2d:99:46:
bb:06:31:45:79:22:39:bc:fe:95:f0:c4:92:ea:39:59:1e:f1:
6c:ee:cb:e5:5c:91:e7:a3:eb:c6:c7:13:38:8c:9a:0c:6a:fb:
86:70:23:44:01:64:63:a6:8e:67:6c:e0:46:74:35:d2:94:12:
d0:51:39:46:7e:da:7c:96:4b:d6:7c:57:f9:41:12:f6:ee:7a:
92:a3:72:02:14:ee:7c:37:8e:8e:d4:cf:30:15:b2:0e:3a:0b:
93:d8:44:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLuzlvRdTD/8SghKn+t78ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWJlNmQ0Mjg4ZmJlZGViZjg2NDJhNmExZTM5NzdhZWE1
ZjFmMzUwHhcNMjUwMzEyMTkwMDU3WhcNMjUwMzEzMTkwMDU3WjAzMTEwLwYDVQQD
Eyg5MGI2ZDM2MmVlZjNlYjMwNjllNTYzNmMyODQzZWNlODJkMjc4ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVKOMZ7rzDlxcyam7aSkTI4QnAam
87bHTIcbDM4dg2VNGf8yEoZQlSpOeg2oQnYfRjf1A7gl+z+TS36uNlvqFGR1s7td
vR2afsBOm2JhWdWguzz3v4iszM9WK0TPXi4B8Nx00uyJdZxS0XBaUwHTw0nmFsvV
dqVruCuL73TgzN57ampa5AKC/Bc0178YztBr9oYNsJcxCE6oUJTa2jhgdceSBt5z
zghJkFGPStcLEW+VPKHxGWZ/FRJFwCLP/g+sE2A0Klow67NSeBH2r1apXBtHwNiC
yoZt1k/XTqQdEzfSq4b6nT1n/WLdpWIeFr/AxW+znfcR8uPUCagaWSuTzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC202Lu8+swaeVjbChD7OgtJ454MB8GA1UdIwQY
MBaAFDkb5tQoj77ev4ZCpqHjl3rqXx81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYt
ZTVmYjRhYzExMGRiLzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYtZTVmYjRhYzExMGRi
LzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnNo0NuC
Gz78gQte9w217F2bwpbaTQpPPW8cSm/dBaCGWJWxlCKr1o7rWJe6DilzYMTm/FwZ
RQDUrgzFFHCwmZiYBCWGmLtnay8HRJ9kKP18k8NdAHcnEQjYxseWI56q5YzP0bY6
laTHq2XzJlnToxNhir3k5cXNEtryViLWRZPpWpbQl8YuVfv+7DVUZU/Mc3cwYnN4
OBKANMvCdT8yLZlGuwYxRXkiObz+lfDEkuo5WR7xbO7L5VyR56PrxscTOIyaDGr7
hnAjRAFkY6aOZ2zgRnQ10pQS0FE5Rn7afJZL1nxX+UES9u56kqNyAhTufDeOjtTP
MBWyDjoLk9hEMg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:20 2025 by rpki-client