Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: 2g6PJJ94wYTEWGPpbk1ndamH6UAejm4qWjbJ9NmxJw4=
Subject key identifier: A6:BB:9D:06:5B:DE:E2:45:C0:B5:2F:A3:01:14:DF:9B:BF:00:55:83
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019A52D14F2DF5CBA153EAB185DF1121BE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 78
Signing time: Wed 05 Nov 2025 07:00:40 +0000
Manifest this update: Wed 05 Nov 2025 07:00:40 +0000
Manifest next update: Thu 06 Nov 2025 07:00:40 +0000
Files and hashes: 1: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: Pi1uoO4cUV2TMK5fLG61J531XVbfy0ARc4rjufQGkWU=)
2: saWdrzat9gNhwDjToVtk8WsFYgw.roa (hash: gICbNWmSBInV+7Bf/50oOLEAVR12IrqsEIFbrP0sB00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:4f:2d:f5:cb:a1:53:ea:b1:85:df:11:21:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Nov 5 07:00:40 2025 GMT
Not After : Nov 6 07:00:40 2025 GMT
Subject: CN=a6bb9d065bdee245c0b52fa30114df9bbf005583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:1b:11:5a:64:c1:c7:11:ad:63:b1:88:37:
98:11:c0:e0:ec:36:c4:e0:33:87:b8:c3:02:20:53:
c3:f2:37:a9:fd:3f:e7:ff:79:27:a9:27:34:93:10:
5b:40:8c:db:ce:45:3c:71:d8:27:1a:b3:ab:12:ce:
b3:3b:df:54:d9:00:71:dd:c7:9f:5f:f5:a3:a6:de:
b7:31:09:0f:f6:5a:71:ba:a3:57:de:7b:8a:f0:89:
39:d9:41:c5:85:84:eb:9f:0e:44:67:c3:8f:2f:f3:
6f:da:c3:2f:8a:22:71:35:0e:39:2e:95:75:7e:ce:
b9:63:7b:5e:ef:f7:38:db:38:50:43:95:80:52:3e:
ae:9a:f1:fd:4b:c0:04:c2:15:f9:89:52:ec:41:17:
2c:13:3c:1e:ad:5f:11:a9:6a:98:fe:8f:8b:75:62:
75:f7:34:b9:03:4e:0b:fa:4f:bd:bb:8a:aa:66:d9:
63:45:0f:54:2f:84:32:46:22:5b:6e:d1:fc:ee:0f:
43:6b:e6:95:86:e1:c2:c8:85:53:d8:51:a8:c1:ce:
69:57:05:96:d8:ec:28:64:9d:f9:df:52:76:d7:af:
28:ec:10:6f:d6:61:e7:93:e2:22:5e:fa:53:73:ca:
f6:da:94:4b:c6:53:32:57:63:d9:eb:f1:fe:d9:25:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BB:9D:06:5B:DE:E2:45:C0:B5:2F:A3:01:14:DF:9B:BF:00:55:83
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d3:eb:a9:6e:3e:8b:db:73:5f:cb:9c:f9:97:ef:c2:99:59:
41:48:b2:75:e7:26:ec:f5:8f:d5:0a:f3:11:58:33:e2:e5:41:
cb:38:d5:5f:f3:a1:95:43:53:b7:0d:92:55:6b:03:58:27:6e:
1c:51:8f:ed:ca:ec:f1:ee:61:71:c8:8e:44:02:34:f8:4e:a0:
f1:ab:4d:b0:77:f8:1e:42:79:38:31:29:9a:02:6c:07:f6:75:
9d:25:d9:ef:a4:b5:8f:c8:b0:0f:dd:b9:3e:e8:fa:31:5f:ef:
31:26:ef:79:3f:03:62:cf:f7:f3:7b:3e:1d:a0:f2:f1:4d:ca:
3e:e0:57:12:d0:ac:7a:53:51:ca:a6:68:03:e1:f5:5e:d2:70:
31:c1:59:84:f0:e9:33:7a:10:d3:98:4e:27:3d:31:f7:2a:7e:
f9:58:35:a9:6f:c8:cd:d3:fc:77:0a:84:02:31:3f:9e:96:86:
77:2c:3f:67:d9:ee:2f:ac:71:70:26:ff:d4:2c:57:24:92:cc:
a8:49:d6:69:51:de:d9:7d:2e:72:fa:9c:f5:8e:25:4f:5f:92:
94:91:ff:4d:68:1e:7d:56:bf:d6:c9:6e:ff:0b:ac:b1:5f:28:
2a:45:2c:0c:37:b7:49:ea:66:7e:d5:50:8e:36:96:dd:52:63:
95:15:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:07 2025 by rpki-client