Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: 7ZBkEpuAlrtVm7rpxwzT7ofUq4Pe7vjAk+DgyjOdZAw=
Subject key identifier: 61:56:3D:7C:62:40:AE:4D:E3:9E:6C:6A:5C:D3:30:46:CC:01:7C:7F
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 0196808FED94D7D17BB29FBB562810B446A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 08:00:38 +0000
Manifest this update: Tue 29 Apr 2025 08:00:38 +0000
Manifest next update: Wed 30 Apr 2025 08:00:38 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: QEvp3rnssC/gFbLrZZQRWzXl4CN2Xgwb0khS8jFbbys=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:ed:94:d7:d1:7b:b2:9f:bb:56:28:10:b4:46:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Apr 29 08:00:38 2025 GMT
Not After : Apr 30 08:00:38 2025 GMT
Subject: CN=61563d7c6240ae4de39e6c6a5cd33046cc017c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:56:4c:26:5d:0d:57:02:7b:d3:01:b9:ab:
16:c2:55:f3:40:76:4e:8c:8d:2e:13:12:f0:54:ed:
57:45:7d:81:88:02:cd:2e:75:50:a9:d7:54:3f:45:
fb:de:97:86:8f:98:29:58:ac:48:48:6e:da:77:b5:
a7:de:bd:e7:10:ca:0a:92:b0:e8:85:8c:e9:7a:75:
90:db:c4:12:87:68:7f:70:e5:8b:9d:58:5e:ad:58:
c1:86:a5:34:61:ca:b8:b3:cd:63:4f:68:71:4a:1b:
6d:8a:4b:a9:50:5d:fc:49:c4:c2:14:3c:27:19:44:
a1:71:e5:65:95:d0:5d:07:5c:64:c2:4b:be:39:9a:
ee:9d:e0:0b:1e:04:61:79:73:49:6b:e3:25:f4:94:
8c:ff:57:f8:a9:0d:23:59:3e:ac:1c:70:13:db:3d:
e8:4f:f7:a8:ff:03:06:63:12:dc:55:6a:30:8b:8d:
0c:de:d3:b0:43:4f:f3:b0:88:14:55:c9:39:d8:f5:
b2:92:b8:d5:5c:c4:01:d8:07:75:fb:d7:c6:ff:69:
31:2a:71:16:23:da:b9:54:4b:21:0f:60:53:61:d7:
5a:ca:e3:77:14:ee:b6:80:ed:58:d4:10:cf:85:86:
83:4d:25:22:e0:b8:90:3a:c0:5b:47:5e:02:db:25:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:3D:7C:62:40:AE:4D:E3:9E:6C:6A:5C:D3:30:46:CC:01:7C:7F
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dd:d0:49:d4:ed:25:0c:31:40:5b:2d:87:37:56:08:03:8d:
d7:f9:84:77:14:93:99:de:07:95:44:eb:1c:87:69:08:2c:94:
5e:57:5d:68:49:3d:78:6c:d6:ed:1a:fc:22:74:31:1a:6a:14:
6d:d7:a3:37:7c:8c:99:0a:fd:d0:ea:4d:d4:95:39:14:53:3a:
95:b8:4c:6e:3b:88:bc:cd:7c:04:9e:b2:31:6b:5b:6f:c5:e5:
3f:1f:71:4e:38:e8:04:f5:b1:9b:6d:34:23:fa:2e:71:6e:e9:
4b:bd:61:7e:df:1c:91:c5:90:5e:cb:17:dd:61:bd:d8:77:a5:
74:89:d3:d9:bc:ea:ff:f8:26:c6:4d:3c:05:65:dc:68:7f:60:
ed:fc:9b:36:29:26:98:8f:8a:04:d2:1b:53:f3:0b:95:e3:88:
e7:6b:37:aa:ef:26:82:d4:ad:49:ad:09:19:1c:2d:82:63:22:
fd:55:30:65:eb:0d:a2:01:e2:8a:90:48:38:82:5f:e4:a2:41:
92:e2:77:b1:1a:a1:6c:d9:59:de:e5:d0:ba:41:4a:61:23:39:
16:73:8d:03:b6:a0:31:12:1b:da:b0:9c:19:79:44:e0:c6:8e:
bd:ee:16:04:ac:31:82:76:17:e3:d1:61:a6:35:4f:2f:96:da:
6a:fb:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:11:17 2025 by rpki-client