Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: B/e8WfPwjlY+ovb+ynvP/WcgAHkJ4EYj1U3ChhO+X6U=
Subject key identifier: E0:14:AC:7B:D5:E1:5B:09:8F:A3:20:EA:98:60:C4:06:BA:1F:83:8F
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019A7149E1DC6E30175BA384075181A237DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 043A
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: Y9iLsj5uuXqdJIbJ2ISUTroG6Wxf09wrsGHcUC/YqwI=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e1:dc:6e:30:17:5b:a3:84:07:51:81:a2:37:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=e014ac7bd5e15b098fa320ea9860c406ba1f838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:b5:66:a2:fd:08:98:2b:9a:dd:d0:fe:fd:
24:1f:8b:97:d9:f6:87:f9:12:6b:15:2b:8e:23:53:
25:20:ba:bb:ec:fc:68:38:70:06:6a:ec:59:4b:b6:
e1:94:f9:ce:bc:54:3a:c5:0d:7c:42:43:43:b8:7b:
ec:6d:d3:88:3c:75:52:69:26:ea:db:e6:9e:d1:40:
75:08:0e:97:19:68:ab:a2:f0:41:24:cb:6a:fb:00:
27:34:56:71:b6:32:07:6d:98:53:98:84:5e:3a:0a:
98:62:90:b9:3b:a5:34:c5:70:37:ca:cf:50:ac:e5:
dc:42:04:f0:00:b3:e6:d4:03:b6:8f:6a:0a:8b:d7:
20:23:7f:0b:47:80:6c:76:9e:85:05:ae:03:4b:22:
cf:6f:49:d4:ac:54:c0:2d:d1:69:88:1d:ca:1b:79:
47:a2:32:76:7e:01:5d:a2:61:9e:4d:fb:c8:13:5f:
ae:df:ef:77:75:29:c0:ad:b3:e0:74:a8:19:37:97:
4d:ee:bb:1a:e7:8f:2a:f2:02:0c:87:6c:6d:b9:7f:
6f:ce:ac:de:3f:a2:0f:5f:81:62:9d:be:7c:6c:e7:
94:50:17:35:35:9b:1e:ba:60:1f:1c:d3:5b:1e:9f:
aa:00:69:bc:57:e1:3d:66:c5:cd:91:31:a3:f8:f8:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:AC:7B:D5:E1:5B:09:8F:A3:20:EA:98:60:C4:06:BA:1F:83:8F
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7f:08:5d:71:9e:ff:b4:40:c6:0b:ce:c6:17:98:aa:f8:f0:
a3:c4:74:0d:0d:34:bc:34:81:dc:c5:e7:9d:2a:71:9b:72:12:
bf:41:2e:12:d5:d8:82:e7:d3:56:5d:b6:27:42:e0:2c:c2:cb:
d3:45:60:9a:59:e9:6e:a6:bc:a0:e6:ee:b5:f0:19:23:5e:52:
9d:f7:74:30:c9:f4:9e:a2:93:13:7d:02:4a:b1:7b:8b:21:00:
b1:45:b0:89:8e:e8:f5:21:82:26:a5:62:92:42:66:0e:9b:6f:
78:b9:c8:04:f6:c4:a0:6a:8b:c3:6d:2e:b7:2f:c6:7f:c8:c5:
27:74:0b:6c:4e:0f:db:ab:23:01:2b:c6:d5:c1:ff:77:ce:6e:
4f:8b:0a:20:b2:cd:fa:b8:44:2a:8b:4b:17:ec:1b:e3:1e:5c:
8a:67:80:83:3d:af:8e:b3:5e:83:4d:86:3a:9d:bb:d2:bd:ad:
dc:67:22:2c:10:83:c1:37:bf:1f:5c:95:8d:89:8f:43:a6:fa:
a0:60:27:68:bf:9b:27:d2:12:c5:4e:a6:6f:05:48:e5:e6:a2:
74:13:1f:7f:46:be:aa:0c:ff:66:c8:a4:c4:39:c1:5c:59:d8:
8f:30:6c:db:03:9b:49:83:bd:20:85:0d:77:a7:8d:1e:91:eb:
e3:40:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:22 2025 by rpki-client