Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: Ua7nOJM1ftz/Gvb0vYPFUeTrTBiMKVjxp5AkVWi6WnU=
Subject key identifier: 7E:BA:A0:0F:8A:D3:CC:60:BB:FF:05:E1:92:2A:B7:E0:0B:40:68:8C
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 0199228D2846EE0A10FD3B228343E36170FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 0F48
Signing time: Sun 07 Sep 2025 05:01:40 +0000
Manifest this update: Sun 07 Sep 2025 05:01:40 +0000
Manifest next update: Mon 08 Sep 2025 05:01:40 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: orjI8vO8YV8Z0T5ZI6QYpgcOEm2gIMs9Qtek0FMZbq8=)
2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:28:46:ee:0a:10:fd:3b:22:83:43:e3:61:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Sep 7 05:01:40 2025 GMT
Not After : Sep 8 05:01:40 2025 GMT
Subject: CN=7ebaa00f8ad3cc60bbff05e1922ab7e00b40688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:a7:ce:73:9a:51:5e:f2:d9:da:a2:13:ee:
0e:7b:b0:73:3b:2e:7a:d9:8c:9e:d8:fd:90:c2:6e:
6b:1a:e7:25:de:0b:95:f1:5d:fc:00:0d:2d:00:ce:
e1:2f:ec:5c:be:42:84:3f:67:6c:6f:d5:df:c8:2b:
11:04:6e:69:ae:fe:17:7e:6c:4e:88:5a:11:ad:12:
43:b6:57:b9:8e:87:77:bf:1d:0a:17:87:e2:24:8b:
c1:71:02:84:1e:59:a7:eb:72:de:19:c7:f5:ad:c8:
6d:8b:5e:51:21:36:ef:7e:74:41:d3:6a:0f:bd:ad:
0c:52:4a:f8:1a:c5:46:81:db:83:f4:f2:f1:47:37:
ea:a9:de:0d:39:4d:83:f0:2a:55:57:64:d9:be:9a:
09:6c:fa:a9:05:77:4c:41:51:b7:17:6c:51:a0:98:
c1:19:dc:93:59:83:21:a8:17:e7:f3:6d:59:cd:c3:
b8:5f:3d:89:b1:16:49:61:bc:89:11:06:ed:c8:00:
24:6d:ab:df:e9:83:7a:5d:59:46:22:98:14:99:f9:
3c:51:15:e4:48:77:3f:5d:89:64:1b:d5:24:d2:ba:
21:3d:7f:a0:f9:f7:bc:fd:10:26:22:64:95:53:c4:
51:41:08:be:3b:86:e0:cd:b4:7e:f3:bc:70:50:b6:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:A0:0F:8A:D3:CC:60:BB:FF:05:E1:92:2A:B7:E0:0B:40:68:8C
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:00:83:d0:3b:7f:04:5d:4f:c1:84:27:24:b4:0b:b9:6a:f9:
94:ec:3c:a3:ab:ae:36:bf:cd:06:e4:85:41:23:2c:55:64:a6:
d2:fb:58:e0:69:10:ca:a6:38:91:a5:ab:11:61:56:bc:11:4a:
30:bb:63:cb:38:75:41:ff:4b:0c:67:95:35:46:b2:f4:6f:1b:
f9:9d:93:f4:e5:62:7f:dd:02:bf:3d:9d:48:a0:09:bf:1e:ef:
e7:e8:a4:3b:b6:08:0b:11:5d:76:db:c3:f1:ee:b3:8d:3d:cb:
fd:04:82:47:70:c3:7b:ff:07:74:ce:22:6b:a5:8c:9f:10:fd:
19:17:61:99:2c:d4:6d:7c:e2:3b:78:a1:76:4f:d3:95:60:d6:
8f:c8:5c:ea:51:90:f8:8d:b7:6b:cf:1b:c6:6d:be:7e:53:0e:
e8:a5:99:fc:97:87:7e:0e:1f:32:c6:ad:24:cc:f6:85:5b:f2:
1b:c9:71:d6:3f:03:0a:cd:be:ba:ac:60:e4:73:6b:2f:c5:da:
d2:78:a1:34:fe:38:3d:7e:37:ae:34:01:2c:d6:40:99:47:b7:
cc:8d:72:65:2b:5d:cc:7b:a2:8a:31:18:7a:f1:a0:44:4f:73:
f1:43:b5:ab:4e:c2:4d:be:3c:1e:47:39:f0:54:8d:31:76:66:
58:13:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:58 2025 by rpki-client