Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: Dt5CXuhM5tLklzViJI0u+hN2MaIhG9P6CXiCFGe9RKU=
Subject key identifier: 0B:CD:2D:04:98:21:BC:AF:13:0D:54:CC:EE:A0:A5:67:FA:4C:57:0C
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 01976C2B38F1C0E389F2BC92BB75065D01CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 0E65
Signing time: Sat 14 Jun 2025 02:01:01 +0000
Manifest this update: Sat 14 Jun 2025 02:01:01 +0000
Manifest next update: Sun 15 Jun 2025 02:01:01 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: Q6kgGHzidBu0ClmMHlaDSu1ipf+MPRFPK8h0vTVENec=)
2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:38:f1:c0:e3:89:f2:bc:92:bb:75:06:5d:01:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Jun 14 02:01:01 2025 GMT
Not After : Jun 15 02:01:01 2025 GMT
Subject: CN=0bcd2d049821bcaf130d54cceea0a567fa4c570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:14:46:4f:99:92:e6:54:e7:8b:c6:fc:ba:
69:5d:60:a0:92:93:ac:0b:f2:82:57:82:40:b1:d3:
44:22:36:77:74:61:07:9c:18:f7:17:4b:bd:0d:8c:
5f:a6:6a:b4:0d:f2:e1:6f:05:6d:87:00:53:5c:2d:
49:1f:4a:32:50:95:45:a4:e4:9e:5c:ea:14:ce:78:
34:9e:1b:79:d2:2c:5a:85:99:15:95:41:75:19:3c:
86:ee:e9:87:d0:25:71:5f:02:72:ab:07:88:84:0b:
3a:10:da:9d:29:90:4a:2f:9c:c4:b9:5f:e2:43:3c:
ed:a5:cb:02:05:c7:32:7b:51:bd:18:a4:e2:60:8a:
84:0b:23:8d:fa:eb:c6:f9:7e:2c:b9:e4:a7:56:46:
55:59:aa:1a:e9:1b:06:a0:29:8e:8e:be:18:c3:a6:
c9:7e:d3:34:6a:6d:63:a1:24:6c:83:5d:03:6d:c9:
55:38:ad:f7:bf:33:ef:74:a9:26:00:21:2c:ce:0d:
5e:c3:1d:e6:09:67:aa:ff:9e:31:27:dd:28:ca:c2:
9a:90:03:99:93:7e:76:87:a5:06:c0:87:e6:53:34:
38:4b:c0:1b:c7:69:a3:13:84:5e:83:9b:70:97:f4:
e2:16:e2:0d:9c:d0:bb:72:89:37:08:ee:c5:45:9c:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:2D:04:98:21:BC:AF:13:0D:54:CC:EE:A0:A5:67:FA:4C:57:0C
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:90:49:81:14:1b:3c:50:af:1a:12:d2:e4:11:b1:14:67:
4a:c1:4d:41:52:38:88:1b:33:44:80:d8:7f:2f:8b:9e:76:bb:
97:ae:98:51:67:d3:f2:b1:73:21:1b:3c:10:66:e9:89:14:24:
61:6a:96:5b:6a:4e:10:10:26:ef:41:73:52:77:04:ab:67:44:
76:2f:e9:69:0b:56:52:8d:3c:e5:94:96:f2:5b:84:1f:8a:ad:
f6:72:10:ad:8a:9a:82:5e:c2:36:15:5f:71:96:fc:e2:54:41:
5a:d4:29:c7:a6:95:5a:5b:fa:4d:66:65:66:dc:c0:ad:6c:24:
14:3d:06:d6:5e:54:46:8c:a4:3b:c9:49:8d:27:84:2e:a3:8e:
46:0f:3f:f8:93:ea:01:37:d8:c5:98:1f:eb:2d:61:3d:45:71:
01:26:23:71:28:17:77:b6:f4:5f:c6:3a:bb:d2:dc:7d:89:95:
03:01:86:56:49:77:50:97:b2:27:59:7b:e2:c2:82:ae:a0:09:
7d:a0:d1:a7:c5:db:45:a3:91:5a:56:9c:5d:d9:19:ce:eb:d6:
3a:f4:68:fb:da:cc:a4:ad:5a:76:7d:f5:02:c4:ef:5a:50:f0:
44:f1:fb:c7:59:74:04:33:74:c7:8c:ea:62:71:65:7b:02:25:
74:3e:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:50:05 2025 by rpki-client