Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: O2rmv8TAjpzSkjse1rgxZUPGNtLyNitT4Ew7072nhnw=
Subject key identifier: DB:84:19:38:73:17:BB:4D:E5:E9:DE:89:91:94:EC:C1:23:C8:0F:84
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019783FC47C385F4C57CBF1E90CE75F266C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 159D
Signing time: Wed 18 Jun 2025 17:00:38 +0000
Manifest this update: Wed 18 Jun 2025 17:00:38 +0000
Manifest next update: Thu 19 Jun 2025 17:00:38 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: xfr6yqsgsnHyWo+AqrwF57nZgwzLDQJGe/BZmzVzX7U=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:fc:47:c3:85:f4:c5:7c:bf:1e:90:ce:75:f2:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jun 18 17:00:38 2025 GMT
Not After : Jun 19 17:00:38 2025 GMT
Subject: CN=db8419387317bb4de5e9de899194ecc123c80f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:8c:9f:5e:19:04:ca:3a:9a:ec:7e:a0:5b:
2d:f7:20:8c:52:35:69:f4:ef:65:70:e2:5d:01:31:
af:7c:07:af:10:f6:0b:86:37:da:f0:30:5a:af:a8:
e4:3b:f9:e8:a6:d3:8a:e0:6e:53:06:a6:98:26:c4:
89:4d:32:48:df:ff:ca:48:88:97:28:f4:a9:3d:1a:
5a:6f:82:c5:bd:8e:e7:12:57:10:36:f0:d4:23:06:
56:0f:f6:4f:d2:6c:54:30:7b:90:9f:f7:af:7c:5c:
43:0e:b7:f1:30:c6:ee:43:73:a5:2f:b5:e7:9b:80:
5b:4b:7f:4f:10:bf:c1:3d:ab:0f:a9:d9:14:2c:0a:
c1:5c:fb:27:1b:59:06:34:c6:60:db:ce:db:e5:c2:
a9:a2:e0:8b:e7:67:94:36:51:50:68:fe:2c:5f:cd:
09:de:c0:4b:f7:e9:f9:4b:4b:c0:69:8b:ad:5b:2c:
1f:8b:4e:c6:4e:7a:e3:7d:36:31:8b:a8:ee:3d:9b:
d0:18:b4:f4:bf:bb:15:8d:9f:92:cd:31:92:e6:77:
f2:b7:d7:49:60:c7:c4:b1:02:20:cd:1b:19:cf:0b:
3a:6b:a3:3a:b3:dd:d4:c4:23:23:6f:5e:d7:cb:98:
d8:5e:f5:f7:35:01:c7:e1:59:cc:4a:f5:86:47:39:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:84:19:38:73:17:BB:4D:E5:E9:DE:89:91:94:EC:C1:23:C8:0F:84
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d4:e4:5d:f6:18:7a:4d:76:26:1a:5e:79:06:82:88:42:2e:
7b:33:22:62:18:33:0a:ab:9b:b6:3c:55:22:f3:41:52:42:3c:
ee:e7:0f:50:c4:97:ff:0d:89:6a:e2:c0:18:0a:46:04:7f:20:
6c:3e:f1:01:c4:a2:e6:df:fe:0f:13:eb:6f:71:2c:c6:ea:bb:
74:c5:5f:a9:1c:0d:c9:73:7a:19:4f:3f:a8:19:a1:39:99:99:
13:78:bc:58:86:f7:b0:86:b7:1d:ff:36:5a:3c:b3:01:d6:e5:
a5:7c:d7:58:c0:63:bc:ab:2e:24:02:06:ee:89:32:90:3f:89:
77:cd:d4:23:63:b4:8a:bb:d5:e6:4a:32:97:91:a1:b0:6a:45:
76:a3:68:7f:b4:48:72:d1:d8:86:ac:1d:55:c6:57:57:83:c0:
d7:01:55:9c:93:8e:33:78:52:db:93:5c:5b:19:75:93:8a:9d:
87:cd:59:25:3f:7b:1c:f4:cb:12:9e:d0:cf:3f:ac:3a:97:51:
c7:8c:af:06:32:6a:bf:da:44:84:4a:01:79:e3:cd:5d:98:cb:
aa:c7:25:1f:a5:94:62:35:37:8e:99:2e:51:5f:cd:c2:af:38:
e6:c3:69:3c:82:ce:50:57:a0:96:19:54:9f:5a:12:ae:5d:55:
8e:69:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:54:41 2025 by rpki-client