Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: wA25tqWPZcxFfMdiTR5MiPJWWmb1ifgrwXq/u/IJ2cE=
Subject key identifier: 95:0A:24:BC:33:3D:67:89:2B:C4:87:3E:18:D0:50:2B:92:56:8F:ED
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019882428548A70C5B6034F28CE49B5883A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 02:00:54 +0000
Manifest this update: Thu 07 Aug 2025 02:00:54 +0000
Manifest next update: Fri 08 Aug 2025 02:00:54 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: bdsWTo1mA/EBUBszHgVBeubTi2ffbemZ87a5LpBjJ8Q=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:85:48:a7:0c:5b:60:34:f2:8c:e4:9b:58:83:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Aug 7 02:00:54 2025 GMT
Not After : Aug 8 02:00:54 2025 GMT
Subject: CN=950a24bc333d67892bc4873e18d0502b92568fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:47:c7:f7:dc:3b:94:ac:5b:11:a6:c6:6b:
ba:77:84:e0:2f:47:c6:4e:d3:47:ae:63:2b:17:7a:
7e:16:02:2a:fc:d2:19:cf:81:99:bc:7f:4c:18:c3:
4e:db:40:c0:fb:4b:55:60:75:b3:d2:98:e9:4a:b8:
e0:d6:54:69:bd:b5:94:c3:05:78:3d:ad:ee:30:e4:
55:d6:56:99:ec:92:0c:db:86:a5:8d:83:61:b4:c3:
b7:59:82:e4:9b:f6:12:5a:52:3e:f1:c9:45:e9:fe:
a6:0d:5e:70:31:e6:3f:a3:07:15:a4:ee:a5:1d:41:
e6:36:a7:a6:06:84:47:1b:e9:73:d6:ce:a9:3d:72:
5f:58:2e:a1:97:d5:f4:6d:b1:83:d9:a4:81:da:49:
3e:c3:47:e2:c1:6e:14:ae:ea:93:3b:99:ba:8a:48:
69:f7:c7:d7:6b:b6:c2:81:b3:ac:b9:07:7f:9e:3f:
47:1e:53:0a:92:50:d1:ad:b5:6a:f6:67:03:0b:10:
86:ff:b8:f6:c7:a9:06:14:44:01:67:fb:06:21:ee:
38:7c:81:92:f9:07:49:41:13:d9:63:e9:54:3c:b3:
cb:af:a2:b0:10:b2:90:fe:06:39:d0:c9:fb:e0:79:
0a:b0:d7:79:fe:0b:89:e8:cf:ea:39:45:41:d6:04:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:24:BC:33:3D:67:89:2B:C4:87:3E:18:D0:50:2B:92:56:8F:ED
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:27:4e:e8:81:45:e5:39:14:a4:3c:5f:07:93:98:3b:44:27:
0b:dd:48:61:6a:e5:c7:30:1d:2f:62:6c:05:f2:e9:f2:f8:e6:
cc:e5:01:03:0f:45:a9:ff:f6:e3:86:64:48:bd:69:26:4a:ac:
b9:c5:96:f7:df:0e:34:56:03:cf:5e:5a:59:7c:63:d2:15:dd:
91:93:ca:68:56:fa:34:3c:b8:5b:cf:2b:6f:f5:83:a9:27:c2:
13:1f:a6:e7:64:70:23:d8:4e:66:bd:de:cb:fd:c9:12:20:a1:
d2:25:55:90:e7:2a:7e:17:89:e0:ca:6e:4e:62:f8:cb:28:7d:
ba:cc:7a:82:46:a7:70:06:37:a3:a4:d4:e5:f1:09:a8:5d:bb:
3c:90:c9:30:f3:55:f9:86:fe:07:78:12:85:99:89:ee:93:0a:
fa:09:83:7a:00:71:27:69:d9:e7:36:39:d9:4e:b7:f2:72:81:
ba:3c:57:01:9f:e6:68:9d:84:42:89:f5:49:83:c0:83:e9:06:
d1:6a:1c:b3:38:4a:bc:f8:c2:7f:c9:08:c8:59:30:c5:fb:a6:
36:15:b7:6f:3f:58:ca:37:ad:fc:8a:28:52:3a:e7:34:8c:f2:
4d:eb:37:31:26:8b:b9:2a:b4:20:98:06:bb:17:31:80:72:3f:
2f:8e:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:14 2025 by rpki-client