Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: Ep9zqI1TYXnMI2Qh36n/Y3fCNMB8dVDDClEJUe6Dg7E=
Subject key identifier: F5:AB:4A:6F:49:2F:2A:AA:1E:5B:CA:47:1F:72:82:68:4B:51:7A:C7
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 0197481E92A0B9590C915635C067C1FD5869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0297
Signing time: Sat 07 Jun 2025 02:00:52 +0000
Manifest this update: Sat 07 Jun 2025 02:00:52 +0000
Manifest next update: Sun 08 Jun 2025 02:00:52 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: PCN+pyDid91rHn2mx3GLiHqcfLtzVUhPF7+pyKcbKdM=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:92:a0:b9:59:0c:91:56:35:c0:67:c1:fd:58:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jun 7 02:00:52 2025 GMT
Not After : Jun 8 02:00:52 2025 GMT
Subject: CN=f5ab4a6f492f2aaa1e5bca471f7282684b517ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:0f:1a:6a:2f:cf:a1:7b:35:73:b4:d1:6a:
b0:c5:02:e6:0e:35:12:95:8a:da:f7:e7:63:08:04:
5f:f4:32:dd:b6:5b:a7:d2:c1:3d:e6:9c:aa:c9:28:
c2:07:b7:c8:73:9b:70:30:b4:15:8a:44:05:95:28:
e5:d2:83:44:83:dc:a6:51:37:03:ce:9f:17:45:ba:
b1:78:c4:c4:c0:42:9e:0f:79:21:e8:05:2e:9a:2d:
24:0c:f0:d6:88:93:f0:98:1f:8d:c8:a7:06:e2:24:
dc:70:76:e4:cd:a4:cf:1d:d4:88:06:b0:c5:0d:82:
73:1b:cf:82:6c:06:2b:1b:77:71:bb:54:47:ea:4a:
c8:73:7f:85:b0:fc:3b:63:50:d8:fb:b2:94:16:90:
8f:f7:d5:b8:23:b4:1d:ea:f4:80:d9:12:4c:e9:00:
13:bd:1e:ac:bb:d8:5a:f1:54:8c:6c:0e:9f:01:ae:
7c:5c:34:2c:49:b0:a8:f5:f6:6f:c4:81:00:5d:31:
a5:b1:42:e3:51:14:6f:4a:95:43:81:55:28:11:47:
11:62:cd:af:d9:fc:2a:6b:15:d3:d1:d0:ca:81:bb:
81:25:83:cc:32:f4:3e:67:b3:de:6a:5e:fe:2f:b6:
1c:98:65:5b:de:14:79:33:98:cd:09:00:a8:ee:34:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:4A:6F:49:2F:2A:AA:1E:5B:CA:47:1F:72:82:68:4B:51:7A:C7
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:74:b9:e8:09:51:4f:65:0a:21:e8:08:c4:46:65:b8:7d:
5c:f6:5c:ef:e7:5f:23:9e:c1:73:c5:f1:bc:64:1d:17:4d:7e:
59:d2:d3:df:34:4a:b4:08:1e:f6:45:7b:4e:1a:a4:fb:06:4d:
89:ae:68:cd:93:20:fc:e4:f1:c9:98:ae:24:d5:5a:dc:b3:3b:
fd:cd:c1:6e:d5:b3:aa:fb:4d:69:86:0e:e5:f5:fc:16:22:e7:
87:79:33:d3:bc:64:09:54:df:a1:d9:2b:8a:4b:27:85:f4:96:
74:44:04:b1:66:bc:63:4e:4c:89:75:9b:48:9c:a3:7a:99:48:
45:07:c4:41:5e:3e:d4:fc:84:db:1b:c8:20:82:e6:6f:36:7b:
4e:22:bf:19:39:12:79:50:cc:98:f1:6f:60:0a:da:04:3a:c5:
33:0b:26:04:74:a2:66:f4:28:25:31:25:0c:7d:62:e0:06:42:
cc:4c:63:c9:a3:e6:82:c7:20:db:d5:2c:3b:0d:23:92:76:49:
5b:bf:2f:25:00:55:a1:52:23:23:81:9e:08:76:57:fe:49:11:
3c:21:9e:c1:aa:a2:f9:82:1a:b1:c3:c2:69:2d:65:d1:7c:2a:
07:a2:50:5d:a1:a6:a1:9f:c2:0c:e8:db:21:c3:b2:4f:cd:f9:
c8:ad:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:12:00 2025 by rpki-client