Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: qb210m0XVb9kYYq7qeLggXNOE76RNCqKE7BYc5glDrA=
Subject key identifier: 5B:3D:F5:6E:5B:B4:DC:E5:53:3F:0E:13:4A:D4:A7:8B:07:3D:EF:3E
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 0198745072008DC55664C6900EEA2B9CF1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 1325
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=)
2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: jNVy8m3GCh7ZM9DerWg6Jmgzr9oBpMMTd/934m4mPtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:72:00:8d:c5:56:64:c6:90:0e:ea:2b:9c:f1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=5b3df56e5bb4dce5533f0e134ad4a78b073def3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:0a:0e:ca:68:5e:6b:dd:f6:d2:c0:84:1d:
0a:e1:e8:b8:33:77:b5:45:5e:04:b1:04:3c:7f:36:
31:6c:ac:7a:5a:c0:93:af:c4:2b:a0:37:c6:d6:ca:
17:17:0a:55:2d:ef:f7:90:5d:32:d9:09:7d:e7:17:
2e:f3:9e:2b:24:ff:c0:6b:ea:97:99:a7:bb:ce:9b:
48:df:26:56:bf:9c:17:f3:02:68:8f:37:8d:7a:83:
e4:b6:ac:c4:9b:78:e7:b1:61:35:05:46:f4:c5:4d:
53:bc:5c:0c:d6:57:37:ae:86:7c:f8:6d:3f:2d:e2:
43:af:94:5e:e9:e7:54:0d:67:90:25:cd:9e:60:34:
57:fc:98:3a:bc:d0:dc:9a:f8:49:b5:f3:cc:19:e2:
b3:1c:79:ab:6d:bc:72:2a:55:38:6f:2f:e7:f2:cc:
d1:b0:39:21:4a:58:9f:bb:c3:71:49:48:60:7a:f1:
02:33:bb:0f:55:fd:6e:4f:4c:98:37:e8:5b:39:3e:
82:b2:31:4f:5b:2c:c2:66:13:09:bf:26:fb:2c:c3:
64:ff:c1:f6:18:19:8f:c9:e9:50:3f:9e:21:e7:42:
93:07:5c:37:53:54:c7:6b:88:77:f6:de:8d:43:60:
46:02:89:ec:e4:9f:d1:65:bc:52:b0:63:38:9c:b7:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:F5:6E:5B:B4:DC:E5:53:3F:0E:13:4A:D4:A7:8B:07:3D:EF:3E
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7f:a0:21:be:e3:23:14:f0:10:f5:13:ff:98:e2:cd:0b:4b:
05:73:d4:81:b9:c5:9b:5b:bb:f0:8c:36:7a:35:8b:d3:93:a5:
ce:0d:27:15:0f:73:e0:e0:04:4b:3f:c8:fb:f9:da:e3:00:a1:
c5:79:af:5a:75:80:5d:d3:22:f6:04:da:df:2f:ab:a0:67:6e:
57:02:e5:1f:00:5e:2b:d9:fa:f0:c2:02:71:a5:56:75:95:aa:
ed:ce:6e:48:7c:77:32:7b:84:c0:c2:26:2e:b0:95:7e:d2:07:
aa:bd:aa:d7:7b:ca:0d:c6:09:a7:b9:74:9f:bf:2f:34:51:95:
48:e1:da:ce:77:08:48:32:50:4a:30:38:e6:6f:e4:84:70:e7:
35:a4:a3:0c:59:d1:a8:db:63:83:a3:34:8c:69:d8:60:d8:a5:
00:a1:82:3c:ee:30:d0:f4:17:8a:8e:d8:ce:da:5f:4d:32:01:
29:5c:9b:68:61:6a:db:f4:59:21:b4:5d:d8:45:36:83:23:69:
8c:8b:d5:f7:dc:bd:be:9d:2d:87:d9:eb:82:2c:09:8f:b3:04:
4b:e1:3c:47:da:17:25:93:66:39:63:57:c7:f3:33:e1:6f:d4:
9d:4b:5d:1b:83:53:61:8c:b5:2a:2f:e1:e2:99:7d:0b:aa:ab:
23:57:96:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHIAjcVWZMaQDuornPHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk
NjQ3MDIwHhcNMjUwODA0MDkwMTI1WhcNMjUwODA1MDkwMTI1WjAzMTEwLwYDVQQD
Eyg1YjNkZjU2ZTViYjRkY2U1NTMzZjBlMTM0YWQ0YTc4YjA3M2RlZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQwKDspoXmvd9tLAhB0K4ei4M3e1
RV4EsQQ8fzYxbKx6WsCTr8QroDfG1soXFwpVLe/3kF0y2Ql95xcu854rJP/Aa+qX
mae7zptI3yZWv5wX8wJojzeNeoPktqzEm3jnsWE1BUb0xU1TvFwM1lc3roZ8+G0/
LeJDr5Re6edUDWeQJc2eYDRX/Jg6vNDcmvhJtfPMGeKzHHmrbbxyKlU4by/n8szR
sDkhSlifu8NxSUhgevECM7sPVf1uT0yYN+hbOT6CsjFPWyzCZhMJvyb7LMNk/8H2
GBmPyelQP54h50KTB1w3U1THa4h39t6NQ2BGAons5J/RZbxSsGM4nLeljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFs99W5btNzlUz8OE0rUp4sHPe8+MB8GA1UdIwQY
MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt
YWFiODYyODYxYTA5LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5
LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATH+gIb7j
IxTwEPUT/5jizQtLBXPUgbnFm1u78Iw2ejWL05Olzg0nFQ9z4OAESz/I+/na4wCh
xXmvWnWAXdMi9gTa3y+roGduVwLlHwBeK9n68MICcaVWdZWq7c5uSHx3MnuEwMIm
LrCVftIHqr2q13vKDcYJp7l0n78vNFGVSOHazncISDJQSjA45m/khHDnNaSjDFnR
qNtjg6M0jGnYYNilAKGCPO4w0PQXio7YztpfTTIBKVybaGFq2/RZIbRd2EU2gyNp
jIvV99y9vp0th9nrgiwJj7MES+E8R9oXJZNmOWNXx/Mz4W/UnUtdG4NTYYy1Ki/h
4pl9C6qrI1eWSA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:54 2025 by rpki-client