Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: 1gK31CQMBCviK5NUYAe6D64SXd+O5Q+cEtfims3tKEA=
Subject key identifier: D3:FA:AF:78:E4:A9:50:13:DD:9E:F9:52:1A:F6:BD:6B:2E:36:A7:77
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 0197684E7A250762CA7D1A929A5B0D8E0458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 0E63
Signing time: Fri 13 Jun 2025 08:01:02 +0000
Manifest this update: Fri 13 Jun 2025 08:01:02 +0000
Manifest next update: Sat 14 Jun 2025 08:01:02 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: 2/9iM1sgBmct3YeONfzYmKqae8dXiFnqvhVNj8NimUQ=)
2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:7a:25:07:62:ca:7d:1a:92:9a:5b:0d:8e:04:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Jun 13 08:01:02 2025 GMT
Not After : Jun 14 08:01:02 2025 GMT
Subject: CN=d3faaf78e4a95013dd9ef9521af6bd6b2e36a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:44:85:13:c2:28:1e:c2:42:d6:99:21:f0:
fc:d9:b4:32:45:2d:7e:bc:37:54:00:72:8a:e2:8a:
7c:fa:2a:e2:4e:fd:d1:43:1b:db:92:54:a9:68:42:
ff:39:7f:e6:da:e1:24:3d:60:94:4d:51:5a:27:83:
35:46:41:6a:af:1f:62:f1:5d:fa:ef:6a:4d:83:7a:
0e:37:eb:cd:63:ab:4f:44:33:01:34:48:32:96:75:
cb:4a:32:15:55:de:b6:d2:7e:59:5f:50:57:bd:1d:
65:ca:7e:ea:9a:ba:39:a9:94:7f:57:0f:e5:9d:3f:
4e:39:d4:10:66:8c:fd:0e:14:2a:2e:5f:95:37:8c:
e2:bb:ff:79:bc:36:28:fc:9e:a8:a5:a4:66:13:6e:
b4:7e:9e:d0:ec:43:5a:a0:aa:b0:da:d6:92:53:61:
fd:48:d8:ab:8d:22:ca:93:66:5a:9f:b3:36:61:39:
8a:00:c0:61:02:04:5e:41:d7:74:1c:ff:fe:49:4c:
92:e7:83:a9:3f:71:89:7b:83:fa:84:3f:bc:8c:48:
41:c5:53:95:41:77:59:94:17:7f:bc:05:18:42:6b:
90:db:28:37:8b:b8:73:65:13:f2:ea:83:4d:bb:2e:
ca:6f:51:bf:78:63:47:8c:bb:e2:17:f2:2c:69:8e:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:AF:78:E4:A9:50:13:DD:9E:F9:52:1A:F6:BD:6B:2E:36:A7:77
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f8:dc:bb:e0:4a:15:82:79:fd:32:6c:02:c3:48:13:65:42:
51:d3:e4:08:64:ed:65:aa:7e:73:47:af:05:25:19:c7:58:05:
6e:f9:cf:61:35:0a:74:e7:6f:b3:00:75:53:6e:28:74:b4:d1:
d5:55:d2:d4:9e:b7:67:31:cc:57:1a:0b:a2:c3:d1:15:de:b0:
07:fc:25:cb:76:42:60:b2:0c:5a:08:f2:9d:d5:d5:da:bb:69:
06:81:bc:f2:50:03:7f:d5:09:60:c1:e9:02:63:77:e2:b3:7f:
29:a7:98:4b:87:7f:51:d4:97:e5:8d:9d:3d:ba:33:bc:da:fc:
c0:51:ea:37:fd:41:4d:ea:3e:c5:0f:89:29:59:db:cf:d1:e6:
a4:73:9f:e3:e2:8a:88:9f:0c:22:5b:56:69:4a:01:74:71:43:
09:3d:66:c0:51:a2:af:69:44:74:4b:90:52:3f:d6:ae:1f:b5:
6f:67:ea:3c:db:5e:7e:cf:c0:dc:b8:93:28:13:d5:70:c8:2a:
1f:57:0c:84:d0:15:ad:9b:11:0f:49:c2:ac:25:0d:f1:e2:d5:
0e:66:4a:04:f7:9d:10:cf:46:71:dc:5c:76:3a:50:c1:ff:c3:
be:fe:37:25:ee:83:fe:a5:56:77:a5:fd:2a:37:66:ab:42:9c:
b5:df:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:03:19 2025 by rpki-client