
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: TrlMH7qNSQigAWpt2fiPVPBs6es+ZaVK0s14cx64Ddc=
Subject key identifier: FE:4D:DB:7D:02:33:50:71:3B:06:69:92:BD:CE:35:6B:B5:68:35:E5
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 01974CA0192AAB928786580DC9F5B6C038DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 09
Signing time: Sat 07 Jun 2025 23:00:49 +0000
Manifest this update: Sat 07 Jun 2025 23:00:49 +0000
Manifest next update: Sun 08 Jun 2025 23:00:49 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: 7JRlowKjwM1ypea4/e9UBouqEwtStGyV0nf7P9eclmU=)
2: qz5SiI2sXR-WRnnucFhvQnfELA8.roa (hash: 09Gy5OXgCKUY990X5d6V3JFErPSBHGwRclvnCE7zIxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:19:2a:ab:92:87:86:58:0d:c9:f5:b6:c0:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Jun 7 23:00:49 2025 GMT
Not After : Jun 8 23:00:49 2025 GMT
Subject: CN=fe4ddb7d023350713b066992bdce356bb56835e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:7c:38:9e:4f:0e:ca:56:a3:98:a6:9d:f5:
1c:81:68:ca:9f:e2:de:51:3a:6f:6f:de:7f:1b:16:
da:6e:45:81:e8:7d:25:b8:43:e4:f7:c5:93:0a:3d:
b1:62:7c:36:3f:68:76:5d:ce:b4:5e:6c:83:4b:24:
f3:f9:7d:d6:cd:a0:66:1d:55:ec:18:0f:35:79:11:
14:b4:45:20:cc:ae:ae:ee:56:1b:ba:e4:0f:79:fe:
dd:7c:f0:78:fd:df:92:04:42:f6:bf:5d:aa:aa:9d:
76:18:36:6b:3b:20:92:63:31:f0:2b:20:4a:09:4a:
ba:08:8c:94:3e:d8:04:d5:fb:fe:ff:88:87:19:9c:
38:d7:08:7d:a8:d2:f2:b1:fe:53:24:91:35:82:5c:
9d:4f:f1:71:63:31:aa:cf:15:35:1d:5e:24:c9:67:
a0:0b:73:71:48:20:15:db:ce:2d:3c:0c:d7:c1:45:
45:5f:71:63:ae:c1:9c:f4:c2:37:8c:a9:8e:9a:08:
aa:3f:c0:85:b6:60:df:04:76:89:2f:3f:f5:ec:a9:
6b:d3:34:56:62:9c:37:51:ed:7f:70:df:0a:cb:bb:
8d:0b:ee:d7:0f:22:4f:98:51:12:81:3b:e8:5e:cb:
34:a9:5f:25:24:23:50:3b:75:37:4a:61:33:12:a5:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:DB:7D:02:33:50:71:3B:06:69:92:BD:CE:35:6B:B5:68:35:E5
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:34:08:ca:7e:4e:de:46:f8:33:a2:2b:38:61:35:8f:96:7a:
38:2f:21:b4:c6:39:d1:cd:40:dd:65:fe:24:3b:76:b4:21:56:
93:77:01:da:17:b0:9d:ac:ea:95:de:78:f4:f0:53:f5:6c:c1:
a4:f6:d4:64:65:bf:0c:92:f0:e0:90:03:b1:0c:52:c0:81:bf:
70:7d:92:e3:77:13:54:de:29:f6:86:f9:04:3c:cc:45:34:e4:
6b:0d:a4:22:24:65:57:9a:de:b5:ee:cd:9b:f4:65:2d:23:74:
02:cc:07:0c:5c:0b:76:9c:32:aa:a5:a1:ca:d0:05:32:ec:52:
3e:f1:4e:8c:34:59:80:38:3e:4c:2a:51:91:52:fb:9e:f5:15:
9c:76:e5:6e:8f:9d:20:49:04:45:5a:d5:9b:45:15:05:19:b2:
cc:65:11:fe:87:db:58:84:88:11:1a:0c:02:a8:da:53:12:c0:
9d:0c:c2:f9:56:2e:b1:9e:ce:f7:37:e5:70:16:02:dc:f2:9b:
8a:ed:80:51:6c:64:b8:f2:ff:d5:b0:4f:ba:bd:a6:eb:eb:56:
4e:46:6c:58:d3:f5:80:bf:ad:3a:77:7f:37:13:e6:65:21:25:
55:81:6d:da:9c:6b:26:11:5f:f6:d7:37:10:05:10:21:96:c0:
2f:0b:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:32:43 2025 by rpki-client