Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: G3nVoxFnJB1fa53BHLie6tL+SDpYUxZUfZ3Ag2yGwZA=
Subject key identifier: 8C:58:50:EB:9E:53:13:C8:F1:04:64:B8:73:24:74:FE:5B:D3:C9:76
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019A4F98EC4D4B74C0823552C730CF7A8D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: NsQ4OLPk1vlOinqYLezZHHhVlFO1VKRBEFAaVvD0dzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ec:4d:4b:74:c0:82:35:52:c7:30:cf:7a:8d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=8c5850eb9e5313c8f10464b8732474fe5bd3c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:73:c4:7f:47:c9:74:f3:db:98:8e:27:bf:
f7:21:f6:a7:d1:2a:73:2c:76:81:80:64:68:69:8c:
4c:d4:63:7c:b8:00:ba:24:48:20:45:5b:e6:d1:77:
fe:88:c3:00:58:48:a6:29:b7:ae:61:d5:e5:d0:bf:
2c:ea:a0:6c:57:39:a5:67:72:0f:c8:8b:8c:8c:4a:
53:22:2f:05:7b:7f:fa:f4:8f:22:fd:70:28:b2:5c:
93:92:f2:72:6a:f8:63:a1:49:4a:f8:c7:cb:6c:27:
fe:2a:21:1e:d0:56:ea:eb:86:7e:b0:23:db:eb:0b:
37:35:f3:ea:d8:e2:39:8c:f5:30:2f:c4:d4:03:e3:
d5:67:7d:86:60:45:02:b1:15:36:dc:93:29:33:26:
55:67:9d:ea:e0:ad:30:c1:e4:58:5b:0b:b0:b4:47:
67:b9:d1:1a:43:fa:45:3d:33:92:9a:21:11:1b:e3:
ba:c4:f4:3b:f5:cc:af:00:fa:a2:73:1c:95:75:6f:
2c:e2:a5:79:8b:2f:60:6e:e2:95:04:45:d6:c7:75:
94:67:e6:1b:83:6d:9a:30:fb:d5:5f:3c:ff:c9:44:
85:c2:b6:45:4a:dd:29:59:cc:61:29:b2:47:8a:43:
0a:ea:d1:9b:55:a6:89:b7:66:84:e2:17:d1:cb:a0:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:50:EB:9E:53:13:C8:F1:04:64:B8:73:24:74:FE:5B:D3:C9:76
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:36:59:8a:0d:d2:ac:8c:e1:3c:92:a9:65:17:b9:82:6b:c0:
74:64:09:bc:01:0e:24:b6:0d:d0:05:bc:78:51:17:c8:53:bb:
24:3d:70:a0:2a:45:b6:39:d6:64:78:ba:f6:c1:8f:7e:46:29:
43:28:74:18:6a:ed:34:ce:5f:6f:82:f7:66:07:be:78:62:b0:
be:b0:98:78:70:54:d7:a2:d4:24:39:81:82:f9:98:af:46:e2:
56:9c:ae:82:f5:49:cc:f3:2a:88:95:5d:76:cf:f8:98:74:a4:
03:d3:b8:d4:fb:6c:49:89:71:10:e6:53:a3:ef:fb:d8:b6:e3:
26:53:56:5e:4d:70:4a:08:f1:67:bb:1e:69:7c:97:30:3e:80:
03:da:9f:26:95:e3:fa:7c:2d:08:aa:1b:e5:18:ff:4e:dd:08:
b0:c0:35:94:b0:b3:b8:8e:d8:13:7e:bc:e8:29:2e:51:21:47:
b2:d7:70:41:39:34:e0:e5:1b:82:67:6a:27:d1:57:94:d9:0c:
31:02:52:08:db:91:36:ac:73:fa:fa:df:4c:9d:ce:7e:7a:22:
99:fd:f3:ab:f5:3e:58:a6:37:1f:43:9f:3f:0a:be:17:d1:18:
ce:af:26:d2:98:01:a5:ec:49:ff:3c:71:89:83:67:52:c1:08:
87:60:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:25 2025 by rpki-client