Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: C44NJGq5FpoV4263YCpwtz6xFW4QNoZ9B5TjVJbOhP0=
Subject key identifier: A9:74:CE:16:E3:AD:4C:15:5B:AF:73:29:E3:85:60:73:5A:03:D5:42
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 019A4F62717E66F4D970A8D48A677A88A82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 141B
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=)
2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: 9JkDqQXv5l1kDaq4YUo8lXTb1ZTycrKm3b0l6FpPzCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:71:7e:66:f4:d9:70:a8:d4:8a:67:7a:88:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=a974ce16e3ad4c155baf7329e38560735a03d542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:9b:a7:d2:09:94:56:86:41:69:38:30:ab:
6c:f8:46:d1:ea:7d:2d:10:d2:7b:f2:e0:dc:49:ec:
ea:bd:16:65:9b:ff:7a:e1:10:22:a2:c5:e8:2c:5e:
51:17:61:dd:a3:6e:b5:4c:75:1b:52:26:62:3d:5e:
96:d6:8a:d0:3f:7e:37:10:54:9d:2f:7c:c8:0d:b0:
97:0a:15:8f:8f:69:fb:cb:1f:8e:5b:6b:86:ff:a3:
ab:23:3b:29:69:71:89:04:eb:88:96:4a:ef:c8:9d:
6c:81:b0:b3:9b:fb:75:2f:c0:fc:a0:da:9a:2e:b3:
db:7f:d2:90:f2:02:d9:0f:a3:f7:c9:19:c5:87:ab:
6a:eb:f8:64:3c:4d:88:61:b7:71:8b:4f:61:bc:47:
0b:25:51:cd:14:c0:43:d8:d0:1e:8c:a6:89:ae:4a:
9d:ce:b1:fa:c0:47:87:61:5e:13:fd:35:c8:43:e4:
0c:07:8a:b1:22:1a:6b:6e:d2:7f:60:3d:1c:de:e2:
e8:3e:ef:fb:46:49:f5:2e:63:0f:87:82:f5:51:1d:
17:8a:ae:69:2c:85:a7:90:cb:62:2e:e3:0b:4d:14:
07:c6:1e:b3:69:5c:45:a1:89:ff:52:09:04:e5:9a:
47:04:90:37:73:0e:2b:7a:cb:13:c8:d3:60:93:65:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:74:CE:16:E3:AD:4C:15:5B:AF:73:29:E3:85:60:73:5A:03:D5:42
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fe:44:ab:ea:29:87:b5:94:11:e4:d1:9b:35:a0:25:ad:ca:
17:22:59:05:50:66:27:d6:64:ae:e0:c6:f5:3d:51:bb:e9:ca:
30:53:50:73:30:08:a7:3b:05:df:49:f0:79:75:88:3f:ab:8c:
6c:87:c6:0e:cb:f2:0b:0c:e4:e8:ba:a5:9d:ff:6b:68:4b:10:
fb:70:cd:1a:70:73:06:6d:77:c2:e7:31:ec:c0:df:8d:ce:1a:
80:e2:e3:61:4b:71:68:0c:dc:dd:b1:c5:5e:5c:8d:8d:76:d5:
f0:64:de:3d:ba:d2:42:d3:36:b3:98:3d:85:6d:b3:48:1c:7f:
af:9c:83:83:74:3d:93:25:19:88:a1:84:4b:fa:82:dd:32:da:
3f:de:4f:26:90:ea:9b:a5:09:e0:cc:94:95:39:25:bc:02:97:
89:6e:7d:88:fc:99:bf:2c:a4:ff:11:33:7a:08:e6:16:41:4d:
1d:0c:72:32:3f:97:fa:0b:62:ca:45:7f:2f:86:f5:48:14:2e:
3b:52:b5:50:5f:14:5c:cc:0f:4f:0c:57:05:5a:ac:3d:92:be:
43:82:f0:78:d3:37:5b:59:23:66:85:9d:65:65:a2:e1:5b:32:
db:44:58:6f:e7:ef:6b:52:15:e8:b8:09:43:11:d9:47:78:40:
cd:4f:4a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYnF+ZvTZcKjUimd6iKgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk
NjQ3MDIwHhcNMjUxMTA0MTUwMDQyWhcNMjUxMTA1MTUwMDQyWjAzMTEwLwYDVQQD
EyhhOTc0Y2UxNmUzYWQ0YzE1NWJhZjczMjllMzg1NjA3MzVhMDNkNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudWbp9IJlFaGQWk4MKts+EbR6n0t
ENJ78uDcSezqvRZlm/964RAiosXoLF5RF2Hdo261THUbUiZiPV6W1orQP343EFSd
L3zIDbCXChWPj2n7yx+OW2uG/6OrIzspaXGJBOuIlkrvyJ1sgbCzm/t1L8D8oNqa
LrPbf9KQ8gLZD6P3yRnFh6tq6/hkPE2IYbdxi09hvEcLJVHNFMBD2NAejKaJrkqd
zrH6wEeHYV4T/TXIQ+QMB4qxIhprbtJ/YD0c3uLoPu/7Rkn1LmMPh4L1UR0Xiq5p
LIWnkMtiLuMLTRQHxh6zaVxFoYn/UgkE5ZpHBJA3cw4ressTyNNgk2XJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl0zhbjrUwVW69zKeOFYHNaA9VCMB8GA1UdIwQY
MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt
YWFiODYyODYxYTA5LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5
LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/5Eq+op
h7WUEeTRmzWgJa3KFyJZBVBmJ9ZkruDG9T1Ru+nKMFNQczAIpzsF30nweXWIP6uM
bIfGDsvyCwzk6Lqlnf9raEsQ+3DNGnBzBm13wucx7MDfjc4agOLjYUtxaAzc3bHF
XlyNjXbV8GTePbrSQtM2s5g9hW2zSBx/r5yDg3Q9kyUZiKGES/qC3TLaP95PJpDq
m6UJ4MyUlTklvAKXiW59iPyZvyyk/xEzegjmFkFNHQxyMj+X+gtiykV/L4b1SBQu
O1K1UF8UXMwPTwxXBVqsPZK+Q4LweNM3W1kjZoWdZWWi4Vsy20RYb+fva1IV6LgJ
QxHZR3hAzU9KTA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:35 2025 by rpki-client