Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: XGDFQuC+NujcfIsrwEb+EDNzO5VKHAQpecN+8IBEGu8=
Subject key identifier: 82:63:D4:D3:E2:13:C1:DA:63:33:A4:B8:3D:98:EE:40:08:61:07:03
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 019A72938481ACC54C722C6448F3D60BD0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 0FF6
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: zs/wHhJnY1uXOPbgx4IKpA5OpXRfrcooxN/G7gLHFG4=)
2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:84:81:ac:c5:4c:72:2c:64:48:f3:d6:0b:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=8263d4d3e213c1da6333a4b83d98ee4008610703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:dd:d3:cc:3e:00:6e:a6:bd:05:df:e4:f6:
74:f2:9a:73:d5:09:62:18:2e:b3:b8:bc:f1:97:7a:
6a:46:fa:c0:30:f6:56:48:cc:5f:bb:da:ee:a5:09:
98:34:e0:97:05:48:e6:b8:a6:11:c3:5f:db:b1:1c:
08:56:90:5e:8f:a3:85:41:e4:63:fc:ea:15:0e:fe:
bc:89:5a:db:40:6f:7c:7e:2e:55:7d:86:e4:23:e4:
fa:23:b8:33:66:41:3d:2c:25:02:91:c1:59:fe:b7:
4e:bf:37:b0:99:2c:25:e4:e9:1f:63:26:23:6a:22:
7a:67:d1:9e:e8:6b:4e:6a:16:20:c2:89:fd:4d:a9:
a0:f7:00:7c:2c:5f:7a:b1:82:c4:b7:b6:3e:f4:3b:
39:a7:ec:c8:34:03:31:e2:cb:1a:aa:02:51:3a:9b:
39:96:99:5d:f0:c8:59:24:66:a4:20:f0:cf:e1:c8:
67:0f:92:a0:06:72:b3:41:b2:ba:87:c6:6e:92:9d:
ac:55:66:c1:1e:96:c9:c6:46:cc:c6:44:46:66:4d:
18:49:ed:ec:d4:c1:9a:86:21:8f:cb:5a:c7:99:c3:
53:46:e9:32:a3:b8:7a:40:a0:59:33:95:40:a0:24:
1c:f5:6d:54:e1:2f:c1:74:f1:2a:96:72:12:ab:5a:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:D4:D3:E2:13:C1:DA:63:33:A4:B8:3D:98:EE:40:08:61:07:03
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1d:cd:fc:ce:16:e9:63:db:96:30:b9:69:aa:60:04:b8:69:
c8:03:d9:2a:4d:88:76:96:22:2d:f0:d7:2d:a7:f8:c3:72:22:
d3:c8:50:2d:94:3e:2a:66:0b:1b:6b:41:18:f4:98:8b:02:3d:
59:50:d5:2f:f8:89:05:11:cc:2b:db:3e:b0:62:1e:0a:58:00:
57:d4:b4:2f:c3:76:52:da:89:a0:ba:08:3c:68:7e:08:3f:76:
88:d0:c2:60:ab:98:ea:75:84:1c:3d:46:13:b8:50:78:56:ed:
58:47:bd:19:a5:a6:4f:3f:f5:e8:5b:bf:46:25:1d:37:68:4e:
a2:52:34:77:51:49:bf:03:44:6f:0c:89:da:57:ae:a4:e6:27:
fb:f7:33:3f:12:2d:ce:f0:44:9c:47:ed:48:b5:2e:9c:63:54:
15:71:66:dd:54:6c:f2:5f:a2:6b:c0:30:1f:ce:53:46:5c:67:
31:3b:f2:cd:f5:4e:67:c1:2e:57:5d:21:48:fd:06:29:7d:25:
ad:36:5c:cd:69:b5:0c:04:23:bb:ba:b6:40:70:fd:1e:70:b9:
e4:8e:39:be:69:bb:69:62:09:52:00:c9:be:26:bb:9c:b3:08:
08:12:04:f7:e5:0c:b0:4a:76:b8:b2:a5:3d:ee:a5:78:ef:b9:
91:db:9a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4SBrMVMcixkSPPWC9C2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw
MGNiNjQwHhcNMjUxMTExMTEwMTAxWhcNMjUxMTEyMTEwMTAxWjAzMTEwLwYDVQQD
Eyg4MjYzZDRkM2UyMTNjMWRhNjMzM2E0YjgzZDk4ZWU0MDA4NjEwNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Yvd08w+AG6mvQXf5PZ08ppz1Qli
GC6zuLzxl3pqRvrAMPZWSMxfu9rupQmYNOCXBUjmuKYRw1/bsRwIVpBej6OFQeRj
/OoVDv68iVrbQG98fi5VfYbkI+T6I7gzZkE9LCUCkcFZ/rdOvzewmSwl5OkfYyYj
aiJ6Z9Ge6GtOahYgwon9Tamg9wB8LF96sYLEt7Y+9Ds5p+zINAMx4ssaqgJROps5
lpld8MhZJGakIPDP4chnD5KgBnKzQbK6h8Zukp2sVWbBHpbJxkbMxkRGZk0YSe3s
1MGahiGPy1rHmcNTRukyo7h6QKBZM5VAoCQc9W1U4S/BdPEqlnISq1q7lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJj1NPiE8HaYzOkuD2Y7kAIYQcDMB8GA1UdIwQY
MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt
Y2EzMzUwZTc2MGNiLzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi
LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUx3N/M4W
6WPbljC5aapgBLhpyAPZKk2IdpYiLfDXLaf4w3Ii08hQLZQ+KmYLG2tBGPSYiwI9
WVDVL/iJBRHMK9s+sGIeClgAV9S0L8N2UtqJoLoIPGh+CD92iNDCYKuY6nWEHD1G
E7hQeFbtWEe9GaWmTz/16Fu/RiUdN2hOolI0d1FJvwNEbwyJ2leupOYn+/czPxIt
zvBEnEftSLUunGNUFXFm3VRs8l+ia8AwH85TRlxnMTvyzfVOZ8EuV10hSP0GKX0l
rTZczWm1DAQju7q2QHD9HnC55I45vmm7aWIJUgDJvia7nLMICBIE9+UMsEp2uLKl
Pe6leO+5kduarg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:22 2025 by rpki-client