Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: +eVgaD9Hw/1UoXGnMBOROQ7+FFh7M5sTLwcASdUab5Y=
Subject key identifier: 7C:AC:AC:0F:FA:51:7F:40:FE:F5:2A:86:D3:A0:76:9D:CD:48:86:6C
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 0198820C4BBF012D19568884932079FE7CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 15B0
Signing time: Thu 07 Aug 2025 01:01:40 +0000
Manifest this update: Thu 07 Aug 2025 01:01:40 +0000
Manifest next update: Fri 08 Aug 2025 01:01:40 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: GFP4pf+Ta3oq6/j9ZPMgNcOsh9UVvcvZy/8TnZmQqHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:4b:bf:01:2d:19:56:88:84:93:20:79:fe:7c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Aug 7 01:01:40 2025 GMT
Not After : Aug 8 01:01:40 2025 GMT
Subject: CN=7cacac0ffa517f40fef52a86d3a0769dcd48866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:f3:ee:25:02:19:7a:b7:1b:36:8b:32:a2:
75:f5:5e:16:c4:bf:ec:44:e1:74:17:a2:75:1c:f6:
93:0d:6f:b4:73:8f:26:91:d7:f0:9b:fd:62:27:f2:
9d:e7:65:43:b8:8c:23:db:21:35:99:0e:6f:01:fe:
cb:d0:bc:b6:8d:eb:85:fd:78:89:65:31:72:4f:66:
8a:73:16:60:f6:50:89:82:eb:ae:38:60:85:d5:2b:
cc:10:a5:7a:2b:f6:74:40:47:df:46:e8:98:e2:7b:
f7:dc:18:37:78:1d:01:f2:73:ed:ad:4f:0f:29:c3:
50:7b:75:c7:b0:a7:5c:7b:f3:e6:35:c8:da:ce:87:
b3:ea:6a:5e:e2:71:e6:bf:78:fa:66:21:2d:28:53:
5c:7b:1d:48:64:d1:b9:06:3f:72:6f:02:9f:41:b2:
a4:8a:75:ee:4b:29:cb:6a:82:0a:5a:80:37:fd:d5:
40:25:7d:f3:0f:2e:45:ae:6c:65:ba:70:3d:f3:f4:
bf:bb:a5:26:8a:43:47:c9:0a:c7:7e:89:b8:5f:90:
33:d9:8a:64:ad:30:92:5e:e4:c3:3a:78:d9:72:da:
9d:ac:05:98:1a:ce:23:ea:e5:7c:3c:c0:75:81:d9:
42:40:a3:1f:46:89:62:7c:62:88:20:5a:2d:8a:56:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:AC:0F:FA:51:7F:40:FE:F5:2A:86:D3:A0:76:9D:CD:48:86:6C
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:94:81:b0:4e:48:b9:7c:7d:0c:4f:fc:3f:e2:1b:b7:6c:b0:
e0:ba:f0:2a:73:31:d7:a9:31:61:76:44:be:26:9c:b5:60:12:
1d:34:c2:00:80:a6:87:d4:16:c5:e7:ac:13:6a:99:7e:40:df:
d3:43:22:b9:3b:cf:58:cd:0c:ad:b9:33:9f:62:d7:9b:96:70:
e4:d4:94:bd:0b:74:7b:ae:15:6c:2c:5b:2d:be:d2:54:ba:2b:
2b:7c:4a:ce:33:45:ee:6a:b9:81:6d:68:b4:d5:7c:09:d6:57:
67:9e:aa:51:37:55:d4:68:6c:e0:c4:fa:3d:f2:36:e1:c6:c8:
c2:9d:25:8c:57:c0:07:6d:12:9e:ee:a2:7b:56:78:15:69:6c:
9d:2b:67:54:f6:bd:34:6e:99:61:96:a6:cb:34:32:16:df:42:
3c:d8:45:53:7f:ca:c7:3c:fb:c6:53:f4:a9:31:ce:70:73:2e:
a5:40:80:f0:6a:c1:20:4d:64:fd:0b:a6:56:e8:22:78:66:67:
89:86:2f:df:33:f5:28:ca:29:06:0b:41:8c:34:4c:4d:b2:83:
40:46:e2:a5:0d:e9:51:46:dd:bd:f7:77:24:91:8f:76:6c:f0:
d6:76:1a:af:c1:f7:87:5c:c0:3a:d5:a5:0f:77:18:f8:e5:94:
f5:4a:c6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCDEu/AS0ZVoiEkyB5/nytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm
ZDc0NDEwHhcNMjUwODA3MDEwMTQwWhcNMjUwODA4MDEwMTQwWjAzMTEwLwYDVQQD
Eyg3Y2FjYWMwZmZhNTE3ZjQwZmVmNTJhODZkM2EwNzY5ZGNkNDg4NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr/z7iUCGXq3GzaLMqJ19V4WxL/s
ROF0F6J1HPaTDW+0c48mkdfwm/1iJ/Kd52VDuIwj2yE1mQ5vAf7L0Ly2jeuF/XiJ
ZTFyT2aKcxZg9lCJguuuOGCF1SvMEKV6K/Z0QEffRuiY4nv33Bg3eB0B8nPtrU8P
KcNQe3XHsKdce/PmNcjazoez6mpe4nHmv3j6ZiEtKFNcex1IZNG5Bj9ybwKfQbKk
inXuSynLaoIKWoA3/dVAJX3zDy5FrmxlunA98/S/u6UmikNHyQrHfom4X5Az2Ypk
rTCSXuTDOnjZctqdrAWYGs4j6uV8PMB1gdlCQKMfRolifGKIIFotilYz4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHysrA/6UX9A/vUqhtOgdp3NSIZsMB8GA1UdIwQY
MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt
ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh
LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJSBsE5I
uXx9DE/8P+Ibt2yw4LrwKnMx16kxYXZEviactWASHTTCAICmh9QWxeesE2qZfkDf
00MiuTvPWM0Mrbkzn2LXm5Zw5NSUvQt0e64VbCxbLb7SVLorK3xKzjNF7mq5gW1o
tNV8CdZXZ56qUTdV1Ghs4MT6PfI24cbIwp0ljFfAB20Snu6ie1Z4FWlsnStnVPa9
NG6ZYZamyzQyFt9CPNhFU3/Kxzz7xlP0qTHOcHMupUCA8GrBIE1k/QumVugieGZn
iYYv3zP1KMopBgtBjDRMTbKDQEbipQ3pUUbdvfd3JJGPdmzw1nYar8H3h1zAOtWl
D3cY+OWU9UrGFw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:26:55 2025 by rpki-client