Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: J++TpODWodbw7pFGsI9EK4j1PSayb6lcrflXBxUm2L4=
Subject key identifier: 78:9E:6A:9F:C2:F0:B3:B9:A3:2B:44:A4:55:38:82:47:15:E0:2A:B7
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 01988C8F66A1A9F4FA972F935EA742C8C729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 02:01:04 +0000
Manifest this update: Sat 09 Aug 2025 02:01:04 +0000
Manifest next update: Sun 10 Aug 2025 02:01:04 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: Dg4MWvK5mu/NKE2WYfvuKJ44SmfcY+qUisUisCD976I=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:66:a1:a9:f4:fa:97:2f:93:5e:a7:42:c8:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Aug 9 02:01:04 2025 GMT
Not After : Aug 10 02:01:04 2025 GMT
Subject: CN=789e6a9fc2f0b3b9a32b44a45538824715e02ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ac:52:dd:08:d5:2f:3f:98:6f:06:3a:4b:
cd:8b:3e:85:b9:f8:74:26:b6:27:5a:75:00:7c:a0:
93:42:ba:16:84:45:14:a5:69:90:51:fe:a9:12:c2:
5e:15:55:e5:99:5c:75:7f:3a:5d:53:f0:af:c2:36:
a6:ce:85:37:e2:9f:ab:b4:47:ba:c7:31:16:dc:ef:
71:8e:7b:7c:36:82:81:8a:d7:b3:6a:15:78:0c:7d:
05:9d:24:38:b8:4f:df:df:fd:c9:19:57:92:7c:10:
37:20:2c:19:19:b7:c7:33:7d:7d:2f:f4:b3:a5:08:
0c:2f:b7:01:19:fb:b9:8a:8a:3d:01:d7:5c:90:c2:
93:26:2c:71:d9:b1:36:2c:5a:86:88:b6:30:72:06:
42:de:7e:54:e1:e4:de:d7:61:44:f7:f6:28:95:c2:
32:7b:3b:46:c8:26:5a:eb:68:49:6f:96:37:f5:7b:
01:a2:e1:78:8e:6a:8f:4b:1f:ce:aa:dd:42:da:a3:
29:54:f6:c1:d6:bd:d5:96:f6:62:0d:30:af:6b:14:
f8:92:5f:67:52:23:81:e6:b1:90:4d:a9:24:21:86:
ad:2a:57:cd:03:e0:57:4e:9d:6c:2c:18:1a:9c:44:
68:67:13:7a:e7:18:80:26:b8:75:1c:da:4e:9d:44:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:6A:9F:C2:F0:B3:B9:A3:2B:44:A4:55:38:82:47:15:E0:2A:B7
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b6:5d:f9:8e:9c:3a:fe:ff:ea:0d:69:be:c6:7e:77:a1:30:
d1:13:cf:98:bd:af:af:1f:b4:a9:46:f6:02:ab:02:fb:4f:b9:
06:35:11:71:99:21:a1:90:83:65:37:d5:b8:86:da:c8:dc:75:
c9:30:5a:6a:b3:42:de:ce:f4:fb:ec:11:7f:56:93:e4:14:16:
76:d1:81:0e:0b:0d:02:23:75:bd:1c:c8:3c:a0:97:d3:12:c8:
4d:e4:30:ba:fa:b4:c2:38:b7:4b:9a:65:94:19:d5:0a:c5:80:
46:8a:ed:b9:75:ec:67:0e:28:fb:90:4b:c1:1b:e8:23:d7:db:
cf:a1:ee:a6:61:43:82:bc:4d:ab:1a:73:4d:a9:9e:51:da:ca:
44:bc:23:b6:5d:41:5e:c4:0a:ae:7d:d2:61:bf:0c:00:4f:1d:
ed:b2:bd:7b:2c:23:78:2d:8e:fa:6e:c9:28:40:8b:bb:f3:68:
94:a2:af:7b:58:11:2e:05:8d:cc:b1:d0:06:ac:f7:52:62:b9:
66:13:bb:77:7e:d7:e2:92:80:e3:11:5f:43:98:bd:08:bf:38:
ad:b2:ac:15:93:ea:be:80:0f:dc:dd:ed:59:60:03:64:3a:96:
4e:48:38:da:ae:03:7d:65:17:cc:a6:91:ae:1e:2d:c3:70:e7:
f0:cf:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:28 2025 by rpki-client