Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: z7yplPLl23sZNQI2FIdOkB8l5pX46e6ewM0lOXSyq8Q=
Subject key identifier: 00:D1:B0:F2:5A:57:EC:FC:3E:E5:F7:81:8C:B9:95:9F:F5:CD:61:7F
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 01975121CE49E7EF2ADF0A9F95720FF51C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 20:00:59 +0000
Manifest this update: Sun 08 Jun 2025 20:00:59 +0000
Manifest next update: Mon 09 Jun 2025 20:00:59 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: Uxjlvgx/MU0a+27kSYcgsunvV8MvzltlZ9xF8x25yEk=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:ce:49:e7:ef:2a:df:0a:9f:95:72:0f:f5:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Jun 8 20:00:59 2025 GMT
Not After : Jun 9 20:00:59 2025 GMT
Subject: CN=00d1b0f25a57ecfc3ee5f7818cb9959ff5cd617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:03:f7:42:47:9e:68:88:0d:16:e3:99:53:
95:f2:15:5d:ce:17:9b:b7:cb:2a:c0:6a:38:b0:dc:
cb:1c:6a:f4:1c:c2:8d:94:9a:ed:35:bd:bf:e0:c9:
d0:6f:71:63:d8:1a:d9:3c:fc:a5:93:1a:8c:4e:0e:
5a:62:d2:eb:66:35:aa:9e:9f:65:48:b7:7a:cd:ac:
86:82:da:70:e0:55:6e:0d:93:38:a0:23:f7:23:e2:
0a:4f:7b:25:bf:50:4d:00:ec:03:b1:1b:07:14:58:
ee:63:2a:27:9b:d6:7f:bd:f9:6a:17:88:5e:34:3b:
78:08:ea:13:b5:70:8e:eb:d4:aa:76:38:41:32:0b:
c3:af:c2:c4:4b:7f:94:8b:1d:84:ec:75:93:a2:54:
7a:4c:80:eb:28:ba:6e:bb:2a:d4:18:b7:73:c6:7b:
a1:66:e1:be:9c:e4:6f:96:08:63:41:9e:d0:c1:09:
9e:78:de:b7:95:68:d6:f2:1f:11:c8:7e:de:46:bc:
09:6e:e8:fc:fe:42:91:1b:1d:7d:41:b2:29:c4:0b:
63:48:90:86:25:83:67:de:74:95:4b:66:d4:59:54:
0e:ca:b7:84:c5:c4:6c:75:95:e6:bd:bc:76:04:40:
9c:dd:ba:b4:21:d0:2b:cd:c8:0c:cb:ca:bc:01:2b:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:B0:F2:5A:57:EC:FC:3E:E5:F7:81:8C:B9:95:9F:F5:CD:61:7F
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:da:5b:99:9a:46:70:93:a0:4f:12:62:85:69:91:f1:ee:24:
75:9b:2b:d4:1e:ca:ac:bc:87:72:11:5c:23:7a:05:55:f4:c6:
01:f9:eb:52:9c:8c:ad:ba:9d:e1:6c:2b:51:10:d2:dc:1d:aa:
00:ea:73:19:4a:ea:d2:e0:2c:76:37:08:67:4d:42:3f:f1:9f:
40:d1:25:95:15:2d:ad:61:c3:3a:63:f4:50:c7:2a:a4:a6:4e:
e9:4f:5c:1e:08:25:a0:1c:c6:ee:d8:fb:94:96:00:a4:ef:5d:
97:e7:90:5d:d7:36:68:56:4c:f9:4a:a8:d6:b6:0d:e1:6e:53:
29:21:8d:4a:09:04:18:a4:93:d8:26:60:df:01:3a:ec:50:45:
ee:d0:3f:aa:ba:30:fa:aa:59:8d:72:f7:8a:75:20:36:54:40:
e8:f1:9d:88:43:7a:aa:57:6a:17:99:74:10:59:99:38:1c:aa:
41:07:e4:78:08:4e:5e:d4:6a:84:d8:94:01:28:ad:d3:80:99:
65:1c:1d:91:17:2c:49:3c:de:75:8c:f2:a6:99:ef:8a:12:71:
e6:1a:28:a3:d0:83:9b:42:72:47:fa:9e:72:fa:fb:d6:0f:24:
70:7d:16:50:c3:e2:fe:8f:f0:73:6f:b7:dc:27:77:b7:1e:70:
e4:e3:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:29:28 2025 by rpki-client