Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: c6+oDIToKk83K9rlOuIBhjNrMjzcncwgW6wkx4pAP3o=
Subject key identifier: 13:47:9D:7A:B5:4F:30:18:CC:75:BE:59:B4:F9:75:30:30:A5:78:21
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 0198D4E08FFC9889DE155B356A6C5B168BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: fMM1DK8aFAoiiDpsvLbsS3CHSOxYzqAA8GbC53ri7hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8f:fc:98:89:de:15:5b:35:6a:6c:5b:16:8b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=13479d7ab54f3018cc75be59b4f9753030a57821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:24:fd:ab:09:87:46:38:b6:78:c6:39:36:01:
00:71:9b:6b:ea:7a:e8:63:0e:43:4f:9e:0d:4d:77:
6e:9d:18:fd:db:bd:0f:85:69:44:75:a8:a4:b2:9f:
03:2a:b4:c3:f1:6a:cf:d3:18:cb:59:ab:4b:0f:19:
b3:8f:7d:1a:42:68:05:36:01:b1:d5:d5:16:0e:18:
9b:60:0f:77:8a:c3:a4:3c:6d:ff:4f:ce:9a:6b:93:
ed:e3:af:6c:27:0a:e5:6b:e3:a3:20:ea:d0:c5:bb:
04:cb:87:37:b3:db:e2:8a:65:c2:83:fe:c2:f4:c8:
e7:b3:6d:79:90:24:88:28:66:5c:06:a6:c7:12:bf:
1f:99:5d:12:80:9a:a7:ba:ed:24:2d:3b:ed:fe:b4:
62:2c:c5:9f:4d:59:6a:d2:bf:11:06:e3:2b:67:59:
a4:92:2c:67:bc:85:0c:cb:3f:dc:4d:fb:30:30:04:
1e:b6:17:48:69:c9:fc:72:c0:fc:a5:97:70:5b:3d:
34:40:ba:d9:02:91:24:d2:fd:b5:b9:56:cd:50:88:
50:74:b4:49:0c:b4:d2:be:d5:0d:24:70:ce:07:23:
dc:6d:19:40:d1:35:50:87:42:90:2e:6b:e0:59:12:
67:0f:15:b5:df:db:47:c6:50:b8:2e:bb:c2:ea:f6:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:47:9D:7A:B5:4F:30:18:CC:75:BE:59:B4:F9:75:30:30:A5:78:21
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6b:7a:5f:32:e7:9b:b1:99:6b:45:88:0f:b9:f7:97:99:6d:
1b:68:44:62:46:fd:63:4f:f2:14:b0:e8:3e:2b:fd:db:62:63:
58:41:6e:36:78:4c:8d:5a:bb:40:e2:66:16:67:24:ed:5b:c0:
e9:9a:52:b4:34:7c:8e:b9:19:8f:a8:3b:7d:6d:49:b0:61:60:
b5:f4:67:f8:b9:e8:d9:a2:01:8d:1f:25:b8:7d:78:5d:14:98:
db:3b:47:a1:b6:7d:c8:87:44:dd:63:74:b4:78:c7:7d:50:50:
90:32:96:fb:59:d5:46:ee:df:95:42:7a:d6:87:49:02:d3:52:
0e:a7:46:b6:58:f3:a1:1b:68:d9:52:62:79:5d:49:b5:96:a3:
3b:83:6d:71:06:a4:9b:9a:b9:37:1a:3e:c0:7a:a0:a3:ea:92:
9e:75:11:75:72:c9:f9:53:9e:c6:fd:96:e1:2e:a8:68:89:03:
2d:c9:d1:84:31:b5:1e:55:e5:81:a9:74:1d:df:6d:e5:d6:84:
96:9e:53:b0:1c:bc:95:f3:78:e2:5c:a3:53:98:37:22:e2:0f:
50:be:9d:ab:14:0c:f6:d6:d7:e9:2e:6f:74:2f:9e:85:d7:d4:
7d:bd:ff:26:11:ce:74:10:cf:a1:ab:a7:2c:72:af:90:c9:f2:
2a:eb:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:30 2025 by rpki-client