Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: TB7RnYiknfOfNIlqhAZTsceF+j2U4N80n72G/Vmuvh4=
Subject key identifier: 1E:C4:21:9A:60:F7:00:9A:D5:77:74:EA:9F:8A:C8:77:94:50:F8:42
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 019A70DBFE0651D33D6B17AB7277CDA4C60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 01AA
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: FPMNps8oHef0bgg16IM45PctRA5ABgI1cmVHlG4OV4A=)
2: T6FOCyz_je-bCYNA14loRkLn-go.roa (hash: RTnOVvTVNPz5Tb8FJf3ztpbxOQkBZj4f/NkLYwSkf+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fe:06:51:d3:3d:6b:17:ab:72:77:cd:a4:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=1ec4219a60f7009ad57774ea9f8ac8779450f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:23:4c:0f:25:7e:75:d2:9c:74:32:93:ac:
59:d0:23:f3:7e:8e:5b:c4:9e:08:1c:3b:13:1f:be:
e1:e6:74:01:9a:ad:f7:0d:c0:12:ba:89:d1:74:8e:
60:60:d9:e4:80:67:4f:32:4c:52:21:58:74:88:66:
dc:43:86:f3:9b:69:dc:af:e6:bf:9e:b1:49:bb:c1:
ca:67:1a:36:9b:7d:1b:26:eb:c2:4f:4e:40:16:f6:
3c:5e:e0:5f:21:e7:c5:d9:76:70:26:15:a5:b6:72:
c6:14:25:4b:71:09:2c:9f:84:0a:1f:4d:28:dc:36:
7f:f9:20:45:98:bf:79:b0:98:ed:28:da:f6:41:96:
e5:c2:6c:6f:95:9d:5a:6b:dd:ed:de:72:88:e4:31:
21:5e:83:19:ac:be:ca:b2:7d:39:9a:1d:1e:0d:4a:
e7:33:ef:2d:43:33:ac:65:bd:7b:62:49:2f:0f:9d:
99:83:67:8f:4a:9e:83:cb:ba:9a:01:69:2c:19:4a:
84:da:e5:1a:b6:0f:9e:6a:ba:a7:cf:23:f9:ba:1e:
8d:b2:35:5c:f5:26:b4:4a:1d:50:6d:42:22:aa:1a:
1f:d4:df:a4:9c:ce:6d:6d:1c:cc:01:78:21:d6:48:
cf:5c:19:42:76:28:0f:bb:ce:4c:c5:ac:d3:2b:36:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:21:9A:60:F7:00:9A:D5:77:74:EA:9F:8A:C8:77:94:50:F8:42
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:64:b1:1c:68:28:09:c3:87:c0:57:79:6b:5f:b7:f4:0b:
12:f7:69:e7:9e:f4:ab:6d:d2:77:57:db:66:35:f1:d7:da:49:
da:07:7a:25:2a:51:9a:42:3b:bd:df:f5:86:30:47:cc:ca:c4:
e6:4c:63:f9:bd:d1:61:89:e5:1c:6d:9a:d4:c9:43:2e:d5:db:
ee:d4:f0:15:30:88:87:d5:61:56:78:70:34:b0:43:fc:36:ec:
37:e8:93:f0:80:de:5d:25:7d:1b:40:db:6e:8b:17:8e:0a:06:
68:27:e0:25:e9:fb:93:e9:a5:ce:9d:f6:f6:3e:06:b0:47:b0:
8e:73:1d:73:a0:25:be:91:85:2b:97:06:fe:78:90:d7:e6:69:
47:b4:27:eb:80:be:0d:af:a8:90:1e:6f:f6:78:e0:ea:8f:8a:
98:a3:26:cc:1a:0d:46:ce:fb:4e:81:e8:f6:e3:3e:92:c3:cb:
6f:3c:00:70:90:cf:e4:8f:5e:b7:2a:1e:75:18:9e:b1:8d:f7:
3e:30:c8:8c:9d:88:13:da:a2:1f:04:fb:fe:cc:62:b3:6d:9f:
d1:18:6e:0d:7e:cc:4a:b4:3d:35:b9:20:90:f9:28:57:22:3c:
7b:b4:7f:8d:4e:bd:86:dd:7f:72:d0:f4:e8:94:f5:7d:c1:b0:
8f:84:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:42 2025 by rpki-client