Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File: orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier: J8JGngWLaUWtkafvyz+u3j4Xs7B0ZJJovz8CFi5huuI=
Subject key identifier: D3:91:FB:D8:C8:E5:E0:1B:67:70:58:13:6F:3C:6C:97:4C:F6:32:BF
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer: /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial: 01987F7A3078BEB7E6631B306647162B5318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number: 03BD
Signing time: Wed 06 Aug 2025 13:02:50 +0000
Manifest this update: Wed 06 Aug 2025 13:02:50 +0000
Manifest next update: Thu 07 Aug 2025 13:02:50 +0000
Files and hashes: 1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: W1Egn27CmoyNddc23qa1kJnKfCeXA3DonfaKlbx2cLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:30:78:be:b7:e6:63:1b:30:66:47:16:2b:53:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Validity
Not Before: Aug 6 13:02:50 2025 GMT
Not After : Aug 7 13:02:50 2025 GMT
Subject: CN=d391fbd8c8e5e01b677058136f3c6c974cf632bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:19:4f:9f:cd:79:f3:99:33:19:0c:fa:71:
a2:47:00:a2:27:3f:af:c4:ad:78:87:e9:f4:b2:1e:
0d:25:62:cf:9a:1a:6a:07:2d:d7:50:36:d2:86:21:
4c:00:22:2b:8b:cc:14:0b:44:11:a7:73:80:0f:3e:
06:dd:b9:55:ba:9c:f4:c9:be:a2:04:04:37:1f:30:
a4:99:e0:b5:d5:1b:f0:b4:0a:f7:85:b3:bb:07:76:
d9:9e:b5:19:6f:5c:89:0b:fa:b5:04:01:94:08:bc:
1a:c2:b5:6d:fb:45:89:4f:ff:97:11:58:bb:2e:25:
2c:86:78:73:e9:4c:7b:3d:9d:fe:cc:ab:82:db:a0:
d6:d0:99:77:72:0c:6e:cc:07:35:bf:f7:d9:04:7a:
48:5d:71:63:57:da:f0:f3:90:9a:a6:96:28:c9:6f:
fb:c3:6b:bb:ed:ec:bc:23:8f:79:94:32:82:d4:33:
39:fc:01:b4:a4:84:91:e5:53:21:26:d3:22:71:6b:
0e:d4:ed:60:83:69:59:60:df:96:a8:40:2b:2c:6b:
74:6f:31:f5:ba:b1:d8:71:ca:92:46:82:71:64:b6:
a5:d3:91:f7:d7:71:9f:ed:5e:d7:36:92:bf:45:15:
a2:fb:38:1b:dd:f8:0f:b6:4a:eb:af:83:a8:3f:e7:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:FB:D8:C8:E5:E0:1B:67:70:58:13:6F:3C:6C:97:4C:F6:32:BF
X509v3 Authority Key Identifier:
keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8f:d8:92:8f:aa:bd:bd:7c:08:84:a3:ac:d5:aa:72:d0:2a:
2b:eb:3a:be:d2:dd:c8:28:9a:66:7c:7f:55:27:ef:16:a8:75:
2d:0d:11:3a:0b:28:a0:83:44:5a:58:f9:8f:d1:bb:5f:06:86:
44:d7:89:de:2d:90:af:4f:03:a6:85:2f:65:fd:9f:d5:31:e6:
78:6d:db:52:b9:3f:f7:5c:07:cf:de:e6:50:22:42:cb:3d:2d:
8a:f5:14:65:3e:06:ea:db:4c:df:bc:34:3c:6f:c4:7a:d5:6d:
cd:20:d6:b6:af:6d:53:00:16:55:82:3f:cd:80:21:31:fc:bb:
f8:c4:3b:03:39:e5:e7:c3:4d:3d:49:6c:80:42:95:9b:47:2a:
e3:0f:a3:5e:ce:cf:79:ee:f3:17:6b:c3:a4:65:73:c7:c6:b9:
db:dd:7b:1a:ec:5a:6a:0b:63:98:17:12:e2:6f:1b:60:f0:cd:
ed:ae:0f:b6:11:84:b8:15:5a:b7:31:2d:41:39:89:2b:ac:7d:
e7:50:e9:3c:f2:cf:18:98:72:5e:23:b7:28:7a:4a:f2:7b:b3:
b0:3e:f4:d6:e9:08:f2:ac:e3:52:1c:a8:80:59:f5:8e:b2:c0:
a9:7b:3a:e3:e8:84:df:fe:36:e0:2c:86:be:0d:b9:ff:e5:2a:
a4:20:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:26 2025 by rpki-client