Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: Ar8EfCqsSCNK6nQZpUCdd4+fQH7zxILOy8kRxNMpLWg=
Subject key identifier: AB:5F:66:0D:58:29:29:34:FF:18:1F:83:C6:C8:6F:3D:CF:47:7A:B0
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019A5074A5964F2547E6CD0C334800D839D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 07F6
Signing time: Tue 04 Nov 2025 20:00:13 +0000
Manifest this update: Tue 04 Nov 2025 20:00:13 +0000
Manifest next update: Wed 05 Nov 2025 20:00:13 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: PueRcC/wH4rXLlspcxmOriZMFftjphecYxsNzCRKr8I=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a5:96:4f:25:47:e6:cd:0c:33:48:00:d8:39:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Nov 4 20:00:13 2025 GMT
Not After : Nov 5 20:00:13 2025 GMT
Subject: CN=ab5f660d58292934ff181f83c6c86f3dcf477ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:56:9f:c0:df:02:9f:d7:24:ce:c7:1e:cf:
95:a2:28:1f:65:a9:8f:eb:8c:8e:ce:12:7c:7a:39:
33:1b:02:5f:81:77:5c:c5:92:34:96:65:de:0b:24:
ec:ca:ca:5e:cf:41:c3:2d:5c:b0:1f:03:d4:2c:db:
76:4d:33:b0:04:4c:ba:0a:26:33:28:b6:9e:cc:20:
78:2a:1e:bc:da:12:e2:91:89:f7:01:79:23:3e:f9:
f3:20:1a:ea:05:63:91:45:9c:70:63:f4:cc:91:80:
1f:34:4a:21:d9:a2:31:61:8c:ef:05:e9:8f:88:f9:
8f:60:74:36:e9:31:8d:7a:ff:d7:2d:c8:c4:0f:0a:
f2:ca:93:63:79:1c:65:46:8a:a6:6f:cb:3f:39:6c:
d9:df:84:6d:1a:76:7f:62:36:c1:95:76:69:07:4a:
7d:e5:3d:ff:ba:0f:15:1b:c0:4a:c6:cf:e8:93:57:
47:55:56:52:b0:b4:4d:5b:b7:ce:28:76:44:36:09:
40:0d:3f:52:3d:31:4b:22:b5:c7:32:f7:9a:9a:3d:
a3:d8:c7:f0:19:c6:80:58:a9:f9:31:25:62:0c:09:
f4:1f:5e:d9:1d:dc:e1:ed:a4:6e:09:7e:6d:61:c2:
9b:b7:ca:1e:7b:59:f9:e1:5a:83:fb:6a:1f:dc:71:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:66:0D:58:29:29:34:FF:18:1F:83:C6:C8:6F:3D:CF:47:7A:B0
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:46:78:57:9f:61:00:71:3d:4e:e5:28:a3:f0:1a:67:48:fe:
f7:06:4b:ed:ea:e8:48:4a:df:96:5e:37:c4:bd:df:1c:6f:3c:
a6:d9:6c:ac:3b:50:99:da:fe:97:a1:e2:2c:9f:f9:28:ca:1d:
86:ca:9c:82:68:44:89:15:eb:25:f2:ac:ec:35:be:fd:0c:79:
57:fa:05:38:11:48:47:0f:59:6b:8b:e5:35:4f:a3:fc:a8:1f:
1e:e8:25:92:bc:3c:47:76:c6:63:69:11:92:3a:8f:3f:10:08:
05:93:89:53:6a:21:88:d6:bd:51:57:f0:b0:b4:83:85:3d:69:
5d:06:1a:a1:eb:1d:66:8c:57:ef:f2:b6:29:87:92:b5:44:e3:
e0:21:6c:fb:10:e1:34:19:36:d7:7e:3e:c2:91:e9:24:ab:83:
56:d1:26:24:7a:9d:e7:b9:de:c8:da:e9:11:a8:03:17:bc:f8:
fa:44:20:2e:67:e4:82:63:75:6f:b1:00:fd:74:e4:47:96:bf:
b6:1f:15:a8:97:77:c9:9f:23:dc:74:e1:2b:f9:eb:31:89:8e:
c9:e8:89:11:f2:14:ff:4d:a2:01:a7:ec:27:58:40:37:c4:7c:
82:8d:93:05:c1:9c:be:60:f7:65:2b:08:91:59:c1:c8:6e:53:
98:99:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:56 2025 by rpki-client