Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: aP9exscR6lODyrYZqx2Urn4CU6HZGQu7E14rDXwOyO8=
Subject key identifier: 8D:87:99:29:43:13:E9:02:3B:AA:70:A1:97:79:6E:CC:19:AE:5D:55
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019671C1AEBBBA5674E13334C9BCFE3AF321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 11:00:40 +0000
Manifest this update: Sat 26 Apr 2025 11:00:40 +0000
Manifest next update: Sun 27 Apr 2025 11:00:40 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: A/SP2k7nz5rpFkk1HsWJjx67d8S8MIcKCRW9tsfc4rQ=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:ae:bb:ba:56:74:e1:33:34:c9:bc:fe:3a:f3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Apr 26 11:00:40 2025 GMT
Not After : Apr 27 11:00:40 2025 GMT
Subject: CN=8d8799294313e9023baa70a197796ecc19ae5d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:a3:05:79:de:78:7e:e1:4c:6e:b1:b6:ea:
1a:b9:9c:c3:45:fb:22:ba:ed:e9:b5:2b:08:59:26:
a7:97:40:c1:1b:38:6a:2b:5a:b0:4b:ab:1e:39:e4:
9a:0f:f3:6d:d7:ba:df:fa:54:2f:74:be:cd:a2:36:
2a:20:af:31:e0:ab:b3:65:29:82:21:4b:19:1e:02:
36:65:b5:d9:fe:2b:9b:71:0b:5a:b5:cd:d9:4d:2e:
ed:3b:6c:0e:7c:8f:a6:83:f1:bb:59:bd:2b:96:e2:
76:8e:7b:f3:93:40:8c:88:a0:9d:96:ed:d7:71:23:
1a:e0:47:ea:2a:7a:1f:6a:4c:00:fa:8f:fa:e7:1f:
96:31:8b:37:9b:53:46:4e:ed:31:6c:0c:80:3f:46:
ac:0e:41:ee:dc:5c:a5:cc:27:8b:d5:c8:0c:a2:8e:
17:9c:85:fd:db:57:6a:0b:6c:6f:43:33:8f:45:a3:
62:c8:31:d7:d1:b9:88:05:98:40:04:0a:bc:64:1d:
23:86:db:3f:65:57:fd:5b:11:57:3e:1e:2f:4a:0e:
c7:84:a4:25:cd:1a:8d:46:b5:7d:24:2d:8d:e9:38:
94:3a:cd:3d:54:36:6c:06:7a:d1:a7:d5:4d:8f:0e:
5c:56:13:55:dd:fe:73:63:37:40:28:e6:8b:de:d9:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:99:29:43:13:E9:02:3B:AA:70:A1:97:79:6E:CC:19:AE:5D:55
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8c:c8:d2:ca:bb:08:9b:d4:9b:71:e7:82:bf:2f:bb:8a:ba:
cf:2c:75:94:63:2e:7d:05:21:52:c9:e0:79:68:b8:a7:cd:01:
a7:74:8a:45:ec:07:2a:ac:52:1c:e5:04:df:8c:7e:77:fc:2d:
58:00:92:3b:94:81:2d:14:f9:66:27:43:50:8d:28:1e:3d:ef:
c0:b0:88:91:c9:c3:60:a2:54:3b:f2:18:cf:48:31:99:26:82:
4a:50:2c:c3:a3:eb:b4:b0:fb:25:95:a9:08:ec:aa:c2:c4:45:
1b:b5:e2:22:57:b8:c1:09:f1:28:53:45:d2:bd:d2:4c:82:6d:
94:ba:a7:e5:d1:e6:aa:2a:01:2e:0d:dd:43:bf:1b:6d:3c:50:
ba:ff:3a:8e:e0:11:b3:f7:61:36:fd:7f:64:9d:69:76:b2:35:
41:1d:5d:43:1e:35:cf:f7:54:b6:07:f9:ec:52:02:1f:42:ff:
e2:0d:8b:3d:fe:22:4d:dc:4c:9d:d4:7a:23:b0:0e:6a:fe:18:
cc:c4:91:21:9d:16:b3:cb:1b:f0:f6:8f:c7:ba:4d:9d:1a:83:
f2:6e:c6:58:a0:c7:7c:6b:a2:e8:bc:7c:65:db:74:92:97:65:
2d:1a:eb:bc:8f:f0:1f:92:94:a5:5a:f0:77:de:ef:ff:1b:33:
9c:3e:39:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwa67ulZ04TM0ybz+OvMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh
MGFmZjIwHhcNMjUwNDI2MTEwMDQwWhcNMjUwNDI3MTEwMDQwWjAzMTEwLwYDVQQD
Eyg4ZDg3OTkyOTQzMTNlOTAyM2JhYTcwYTE5Nzc5NmVjYzE5YWU1ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ujBXneeH7hTG6xtuoauZzDRfsi
uu3ptSsIWSanl0DBGzhqK1qwS6seOeSaD/Nt17rf+lQvdL7NojYqIK8x4KuzZSmC
IUsZHgI2ZbXZ/iubcQtatc3ZTS7tO2wOfI+mg/G7Wb0rluJ2jnvzk0CMiKCdlu3X
cSMa4EfqKnofakwA+o/65x+WMYs3m1NGTu0xbAyAP0asDkHu3FylzCeL1cgMoo4X
nIX921dqC2xvQzOPRaNiyDHX0bmIBZhABAq8ZB0jhts/ZVf9WxFXPh4vSg7HhKQl
zRqNRrV9JC2N6TiUOs09VDZsBnrRp9VNjw5cVhNV3f5zYzdAKOaL3tn3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2HmSlDE+kCO6pwoZd5bswZrl1VMB8GA1UdIwQY
MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt
NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz
LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4zI0sq7
CJvUm3Hngr8vu4q6zyx1lGMufQUhUsngeWi4p80Bp3SKRewHKqxSHOUE34x+d/wt
WACSO5SBLRT5ZidDUI0oHj3vwLCIkcnDYKJUO/IYz0gxmSaCSlAsw6PrtLD7JZWp
COyqwsRFG7XiIle4wQnxKFNF0r3STIJtlLqn5dHmqioBLg3dQ78bbTxQuv86juAR
s/dhNv1/ZJ1pdrI1QR1dQx41z/dUtgf57FICH0L/4g2LPf4iTdxMndR6I7AOav4Y
zMSRIZ0Ws8sb8PaPx7pNnRqD8m7GWKDHfGui6Lx8Zdt0kpdlLRrrvI/wH5KUpVrw
d97v/xsznD456g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:58 2025 by rpki-client