Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: 6yMiXCQI9AJFzN7xhm13y8cpYhzYMfvUbV5OvWWf7xU=
Subject key identifier: 3F:A9:3A:76:59:F7:37:F5:AF:8F:01:AA:EB:10:90:3C:BE:91:88:C2
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0198D4048251872B99F7BB532D8799156501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 164B
Signing time: Fri 22 Aug 2025 23:02:01 +0000
Manifest this update: Fri 22 Aug 2025 23:02:01 +0000
Manifest next update: Sat 23 Aug 2025 23:02:01 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: EkwFiGxBITJRYMHS8h5HJlZufnYkVF1/cfQEy7Qz3pU=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:82:51:87:2b:99:f7:bb:53:2d:87:99:15:65:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Aug 22 23:02:01 2025 GMT
Not After : Aug 23 23:02:01 2025 GMT
Subject: CN=3fa93a7659f737f5af8f01aaeb10903cbe9188c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:b3:ed:d1:aa:e5:40:f4:b9:b9:b8:95:86:
42:62:4c:9e:c0:28:b1:34:00:7a:d7:a5:06:c8:cc:
90:38:ec:56:e3:d3:3f:ca:c0:e1:07:77:6d:92:6a:
4a:09:14:33:71:54:89:0f:5e:a5:15:6a:7c:c7:42:
7b:ac:51:a9:25:07:e9:32:4a:ab:44:45:35:81:9f:
2b:58:ea:19:e8:86:1f:ac:36:5f:a3:8f:d4:9f:8a:
b0:f8:20:39:4d:c4:43:da:cf:7b:17:b7:36:fb:46:
15:ff:35:0f:42:3d:e8:38:cd:c0:46:b4:02:28:4b:
9b:6b:4a:b2:43:1c:fe:be:02:3b:2b:fd:2a:aa:2e:
9c:78:de:e1:3b:7d:b0:2c:5d:c7:37:26:13:e8:3d:
ec:ad:05:db:df:f1:67:56:52:87:4b:28:b2:16:12:
98:26:a8:6a:82:99:98:71:30:3d:0f:91:74:bd:2f:
5b:f0:9c:2c:e4:73:9c:f8:07:3c:e9:47:67:a0:b8:
b2:5f:6d:b9:2c:4b:28:c8:aa:92:51:6b:3b:56:05:
d9:69:f6:45:56:3e:e2:4c:b9:b9:8c:55:ac:8f:b9:
c8:c7:5b:e4:37:d1:02:88:a2:37:ef:5e:e2:31:d2:
c4:b2:37:fa:88:63:d3:c6:bb:7f:15:18:87:ab:2d:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:3A:76:59:F7:37:F5:AF:8F:01:AA:EB:10:90:3C:BE:91:88:C2
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:4a:b6:91:45:03:bd:be:60:c2:7b:23:9b:ac:2a:72:b0:61:
fe:89:78:0d:78:c2:3a:4e:5d:1a:e7:4c:c2:1f:b8:60:8e:f6:
25:39:63:40:b5:36:cf:b9:2d:8b:66:d4:27:fb:31:95:9b:13:
db:2c:49:42:d4:a8:e4:7d:a7:f0:09:e4:8c:81:19:3c:20:e7:
45:ae:f8:67:ae:cb:15:8f:b0:a4:7a:17:3c:d6:a7:1c:15:ea:
73:cd:1d:8b:f2:16:00:dd:fb:45:52:2e:ac:38:c5:f7:91:07:
e0:c2:c0:ff:ee:2e:ea:03:ec:8c:5a:3d:0c:5a:e2:a4:7e:83:
92:01:a9:ee:22:f9:f2:23:8d:4e:bd:68:35:03:81:e7:35:2e:
7c:6e:b0:fe:3c:22:fe:ee:91:30:0c:b7:23:36:62:50:76:a7:
5a:79:58:85:51:74:4c:e3:cd:ee:3d:66:44:31:17:55:ce:c9:
18:6c:6e:d5:fb:b4:9f:1e:12:a4:6a:66:4b:ca:9b:16:f9:d1:
80:3f:82:cf:97:3c:ad:e6:38:20:d7:cb:02:f6:17:18:a4:57:
a9:24:a6:dc:ce:bd:de:fa:19:02:38:3b:b5:68:b7:6e:fa:be:
42:8f:48:c9:7b:2d:4d:c4:09:24:5e:10:24:c7:c4:1b:a9:4b:
ef:6f:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:06 2025 by rpki-client