Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: 9UjX0A/gsb0S0mndXhxj5r65x/6l0hW9Zja48Ae4N9o=
Subject key identifier: E5:A0:6F:FE:42:02:41:E4:FF:C7:FF:EA:66:E7:0B:A6:1E:1C:E7:9D
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019936812A5707042E301A4CCCE532B63045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0397
Signing time: Thu 11 Sep 2025 02:00:58 +0000
Manifest this update: Thu 11 Sep 2025 02:00:58 +0000
Manifest next update: Fri 12 Sep 2025 02:00:58 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: hsP1PUaDJU9fGp1jKMbc6JCIny3cpcDvcI+xHHGdhqA=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:2a:57:07:04:2e:30:1a:4c:cc:e5:32:b6:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Sep 11 02:00:58 2025 GMT
Not After : Sep 12 02:00:58 2025 GMT
Subject: CN=e5a06ffe420241e4ffc7ffea66e70ba61e1ce79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:6f:82:2a:7f:6e:f5:01:87:52:6f:53:52:
09:20:7d:c3:d5:96:d1:e8:a2:28:9e:d4:e2:30:41:
29:83:18:d9:94:64:d8:3b:1f:1a:2e:57:2f:21:d2:
80:13:bd:9a:81:a2:2b:21:5d:ad:8f:db:0d:3d:02:
19:b8:76:4b:00:99:81:f4:32:db:e7:f3:1f:c1:b3:
f9:7c:8e:d5:8a:a2:32:0b:58:27:9a:65:bc:f8:34:
42:79:6f:4c:5e:3a:85:1e:71:41:c0:ae:f2:b9:37:
63:fa:4f:1b:4a:82:f9:9e:cd:19:7a:70:eb:64:40:
35:29:88:e5:4a:76:d1:24:a2:5c:e6:a7:b7:c9:d7:
e7:36:49:41:1f:a0:13:ca:07:fd:5a:73:fb:93:12:
6c:e5:02:a6:0c:e5:34:e6:6e:3d:01:58:f5:86:47:
fc:bd:b0:44:d2:7e:45:4b:b9:3e:03:80:a0:53:f0:
46:1c:05:a7:9b:f7:74:af:da:e1:50:f4:a8:b9:fa:
7a:0a:78:60:3d:ae:5f:3f:c1:65:01:54:68:8a:a5:
54:11:da:69:2c:de:f2:5c:1c:d2:bc:c5:35:5e:56:
eb:3a:44:ac:67:db:eb:07:f1:4c:08:74:26:2f:56:
7e:e0:8b:d5:56:de:d5:38:06:73:33:0c:2b:c3:94:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:6F:FE:42:02:41:E4:FF:C7:FF:EA:66:E7:0B:A6:1E:1C:E7:9D
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:0b:98:80:cb:37:da:34:03:f1:ca:9d:95:e7:89:ec:5b:
27:49:09:c2:57:4b:87:28:a4:d8:da:79:2a:16:06:b8:d9:fd:
f3:fc:bf:ca:d6:cd:8c:1e:e5:5a:df:78:b4:d1:78:76:86:da:
ea:83:3e:a9:b9:f1:ec:35:4f:13:a6:a3:5a:8d:63:09:20:60:
5f:1c:72:d7:9b:0a:1c:2c:eb:2b:8d:65:cc:50:47:de:c0:6a:
e6:1b:32:b7:95:e7:8b:ea:12:b1:38:61:55:ce:c1:41:3f:4e:
b9:34:c6:99:62:81:2f:99:4b:c3:bc:f7:af:c3:de:ec:c3:38:
cb:0d:f1:18:62:a8:45:86:b7:57:a4:c4:35:a1:b2:37:02:f5:
df:91:ab:b3:ae:2a:f4:e9:18:71:45:08:46:7b:ee:ba:74:c0:
fa:d9:5e:38:d7:9c:9d:aa:2c:2e:00:15:81:22:71:bd:29:e3:
31:2d:5f:e1:fe:17:ba:a8:10:31:bc:80:c5:6b:5f:05:e1:31:
d2:f5:fd:df:77:df:4c:6d:27:cb:92:c7:71:fd:b5:82:02:81:
b7:76:3f:96:a1:ba:9c:52:70:ad:cc:c3:26:c8:bf:33:db:1a:
d2:6c:08:99:f8:bd:d6:9e:6d:50:98:d8:57:8a:0d:04:98:a0:
4f:a1:c7:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2gSpXBwQuMBpMzOUytjBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjUwOTExMDIwMDU4WhcNMjUwOTEyMDIwMDU4WjAzMTEwLwYDVQQD
EyhlNWEwNmZmZTQyMDI0MWU0ZmZjN2ZmZWE2NmU3MGJhNjFlMWNlNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4chvgip/bvUBh1JvU1IJIH3D1ZbR
6KIontTiMEEpgxjZlGTYOx8aLlcvIdKAE72agaIrIV2tj9sNPQIZuHZLAJmB9DLb
5/MfwbP5fI7ViqIyC1gnmmW8+DRCeW9MXjqFHnFBwK7yuTdj+k8bSoL5ns0ZenDr
ZEA1KYjlSnbRJKJc5qe3ydfnNklBH6ATygf9WnP7kxJs5QKmDOU05m49AVj1hkf8
vbBE0n5FS7k+A4CgU/BGHAWnm/d0r9rhUPSoufp6CnhgPa5fP8FlAVRoiqVUEdpp
LN7yXBzSvMU1XlbrOkSsZ9vrB/FMCHQmL1Z+4IvVVt7VOAZzMwwrw5TypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWgb/5CAkHk/8f/6mbnC6YeHOedMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJsLmIDL
N9o0A/HKnZXniexbJ0kJwldLhyik2Np5KhYGuNn98/y/ytbNjB7lWt94tNF4doba
6oM+qbnx7DVPE6ajWo1jCSBgXxxy15sKHCzrK41lzFBH3sBq5hsyt5Xni+oSsThh
Vc7BQT9OuTTGmWKBL5lLw7z3r8Pe7MM4yw3xGGKoRYa3V6TENaGyNwL135Grs64q
9OkYcUUIRnvuunTA+tleONecnaosLgAVgSJxvSnjMS1f4f4XuqgQMbyAxWtfBeEx
0vX933ffTG0ny5LHcf21ggKBt3Y/lqG6nFJwrczDJsi/M9sa0mwImfi91p5tUJjY
V4oNBJigT6HHEg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 09:03:54 2025 by rpki-client