Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: D5/RD3UTqmtnZ/zNANvvgVfQ1k3/HFFe1apSxprf30I=
Subject key identifier: F1:01:0C:75:8E:F5:A5:C1:BA:C9:01:54:28:27:ED:4C:63:16:1C:35
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 01968058BBE5B5B40D396E345C4C2019C7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 14A6
Signing time: Tue 29 Apr 2025 07:00:20 +0000
Manifest this update: Tue 29 Apr 2025 07:00:20 +0000
Manifest next update: Wed 30 Apr 2025 07:00:20 +0000
Files and hashes: 1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: 7lii8KDLXEnYWdKiWoT9shZvUF6Psk56SCIN1l+LTQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:bb:e5:b5:b4:0d:39:6e:34:5c:4c:20:19:c7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Apr 29 07:00:20 2025 GMT
Not After : Apr 30 07:00:20 2025 GMT
Subject: CN=f1010c758ef5a5c1bac901542827ed4c63161c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:73:0b:86:a4:9c:3c:1e:a0:c1:c5:fe:e2:
5c:7f:9b:b7:ce:44:33:3f:88:34:df:5f:cc:cd:2e:
d2:96:d3:6c:26:45:03:1c:c9:8c:a7:4c:2a:b1:f0:
8b:9b:1b:a2:d7:cd:4c:34:ce:4c:c1:23:05:d1:43:
c1:98:32:a6:18:c2:07:be:c4:87:da:01:dc:d4:1f:
57:bf:3a:2c:b5:02:cd:74:33:cc:18:69:94:b2:67:
0a:44:07:2d:73:5e:48:92:2e:2e:5f:95:22:67:7e:
11:77:13:70:86:41:4f:97:48:d0:8c:4a:a9:8a:99:
b0:af:18:88:28:a0:9c:0d:96:e9:0c:14:1b:a2:4b:
4d:f3:9a:77:5d:b6:50:e4:55:66:9e:71:2b:cc:9c:
20:b3:78:4b:d1:5d:de:ff:49:f4:00:1f:2c:19:0b:
cd:6e:ba:11:30:db:0a:50:86:15:08:e1:33:ca:e5:
5c:7b:cf:36:52:07:8d:de:bf:54:2c:64:3b:2b:12:
b8:ef:d6:92:4a:ea:00:f1:33:e7:1e:8c:96:4b:2c:
8f:18:cc:c1:c7:ee:39:2b:28:b3:90:5e:21:6a:cc:
6d:7e:f3:33:e3:0e:b8:57:c6:69:62:ed:34:93:bd:
5c:a1:1e:25:dd:1e:8c:ad:11:26:41:33:9c:17:9f:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:01:0C:75:8E:F5:A5:C1:BA:C9:01:54:28:27:ED:4C:63:16:1C:35
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:c6:ef:36:fc:fa:33:7e:c9:3c:f7:5a:e8:4e:c7:2a:50:
ef:cc:c2:5b:37:ee:43:24:c0:4e:93:18:94:7d:73:d6:6a:75:
e9:be:9b:aa:21:5d:07:d1:8e:db:18:1a:4d:74:f9:c7:97:66:
70:ac:8b:2e:8a:e7:ca:f8:72:dd:4f:4a:17:ab:4e:ef:ca:78:
83:20:75:8a:48:38:1d:1b:d7:0a:24:d4:7d:12:b8:12:e7:db:
6e:f2:cb:e8:d2:2b:38:06:97:98:d2:a6:0d:bc:6e:a6:3b:91:
9c:51:8e:80:5d:b4:cb:3d:ac:fe:68:ad:62:c0:1d:29:94:43:
e3:ef:bc:c7:7d:ed:47:b1:6c:98:79:8c:65:7c:98:a9:98:4b:
e8:26:57:24:4d:7d:ab:62:13:5d:ff:78:aa:30:19:54:fa:6d:
76:a7:40:bd:72:da:fa:80:5d:49:34:e2:2b:cf:18:ef:1d:ec:
0d:e4:a6:58:f1:9a:cd:0b:48:20:d2:22:96:b9:48:23:a1:e8:
8a:6a:b0:c8:57:0b:55:a2:ac:a6:d7:8a:56:00:fc:43:ce:ff:
de:11:5d:be:d5:8d:53:a6:0d:91:65:4d:30:5a:66:4b:82:35:
d1:6f:58:37:1b:8e:32:ab:42:1b:c0:04:60:ee:b1:82:35:7f:
e9:0f:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:09:10 2025 by rpki-client