Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: Cz3hqEMfuI1aj//cqg2TvAKtXXWnbm9dY9YVnKlHUYo=
Subject key identifier: E1:47:C1:9C:4A:2D:03:AD:29:16:51:AC:93:BB:CD:5C:D4:43:AA:DD
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 01976EBDD3174FDAE74C73BC8305C0240653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 02AB
Signing time: Sat 14 Jun 2025 14:00:23 +0000
Manifest this update: Sat 14 Jun 2025 14:00:23 +0000
Manifest next update: Sun 15 Jun 2025 14:00:23 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: eLIgH44QhvN0N2xOj/gwcuhmCiYviJs60WmFnxL1NfU=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d3:17:4f:da:e7:4c:73:bc:83:05:c0:24:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jun 14 14:00:23 2025 GMT
Not After : Jun 15 14:00:23 2025 GMT
Subject: CN=e147c19c4a2d03ad291651ac93bbcd5cd443aadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:c4:ba:d0:03:04:ad:e9:a0:5a:01:89:aa:
e3:bc:28:a1:d6:c0:8e:12:1a:7f:1b:e9:4d:1d:0b:
10:72:64:4c:de:0d:c3:1e:a6:21:cc:20:4a:b3:54:
34:49:d6:10:7a:d5:5a:0c:0b:e3:fd:f1:29:28:15:
cf:ff:88:8e:a8:ee:c6:0b:5f:30:cc:91:cc:15:16:
74:8a:12:8a:e7:e5:e8:3d:a3:d3:16:2d:a4:c0:54:
c5:c0:86:52:b7:9c:5e:f5:e1:6e:74:e7:7c:0a:4d:
ec:d6:d4:c4:38:09:ff:49:19:85:f4:3e:f4:9e:ba:
ad:e0:ce:9b:03:14:9c:54:ba:90:93:a2:d8:cd:41:
68:1c:4e:bb:17:12:04:0e:94:d0:ff:da:18:f8:2e:
c0:25:93:9d:5e:b8:fa:e2:fc:ee:18:77:4c:2c:32:
f4:69:13:2e:9f:bc:45:78:f6:54:dd:16:f2:77:db:
ff:d4:41:67:0b:35:98:8a:71:a8:36:62:4e:2a:d3:
97:65:61:9e:19:43:1e:f8:ef:d3:6a:82:78:d4:32:
ab:5b:47:2b:a8:5b:63:be:78:25:e4:58:c1:16:ae:
9c:d4:8a:a3:de:71:2f:5c:06:e6:fa:dd:8f:6a:00:
fe:a6:b8:68:09:44:fc:d0:67:0e:84:49:35:90:f0:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:C1:9C:4A:2D:03:AD:29:16:51:AC:93:BB:CD:5C:D4:43:AA:DD
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:ec:9c:e7:d7:9b:6e:58:77:d3:90:0d:d7:49:18:97:b2:
d1:75:4c:28:89:dc:d2:db:3e:f8:1f:4c:90:3d:49:38:5d:65:
9a:30:7e:50:fd:59:27:c2:af:ce:23:7a:88:66:8e:1c:95:90:
2e:3f:8f:aa:9e:ca:11:ca:24:bf:a2:59:0f:0c:08:35:87:01:
98:5a:e8:f2:e5:54:27:58:ab:c2:84:b2:ab:e4:70:0e:41:67:
3c:77:f2:3b:70:72:42:90:c1:e2:5f:e3:0c:22:85:e1:fd:d6:
26:db:3c:d8:40:f7:67:f5:f6:ac:2c:09:13:c9:88:6a:59:7d:
97:50:f6:2f:3a:7b:d1:68:27:da:29:66:68:79:12:31:da:39:
30:1b:6c:9f:84:b4:93:29:e6:47:b2:a8:13:57:9d:b1:1c:60:
bd:e1:41:b2:d8:a4:16:1e:26:d4:0c:ab:67:c3:de:1d:64:ca:
25:d2:73:11:a3:03:b7:83:8d:42:29:c4:cd:cf:0f:c2:43:7e:
ed:76:a5:57:9a:9e:41:5b:a0:63:48:22:06:00:39:9e:a9:19:
e1:99:bc:a8:67:19:84:2e:94:3d:19:bb:f8:55:95:aa:f0:b5:
3c:a6:76:18:f2:a9:c1:0e:fa:7d:0a:98:5f:86:19:e7:4f:42:
de:b8:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:34:04 2025 by rpki-client