Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: XoWgVT5j5W9sBwsDXH8jJ0gP/GJ8auKrEjkhLcH2E6o=
Subject key identifier: 73:FE:78:51:DE:CF:79:34:E1:42:C6:C8:8B:19:24:5D:55:72:3F:2D
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0197B632FAD7FB3818B414E9D5C1AAEA8FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 11:01:23 +0000
Manifest this update: Sat 28 Jun 2025 11:01:23 +0000
Manifest next update: Sun 29 Jun 2025 11:01:23 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: 8IlERJXVuPR5iPoCfRXuUaqsIGgOdGwrdDecWwffDHc=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:fa:d7:fb:38:18:b4:14:e9:d5:c1:aa:ea:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jun 28 11:01:23 2025 GMT
Not After : Jun 29 11:01:23 2025 GMT
Subject: CN=73fe7851decf7934e142c6c88b19245d55723f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:72:25:26:59:86:83:14:d1:ab:91:4a:28:
6c:a8:5e:3e:02:e4:3e:3f:9e:e5:07:90:a3:42:97:
01:c9:03:75:7f:0c:37:ed:7c:16:f7:d6:2e:d9:72:
a7:07:1a:77:49:ff:7e:2d:07:c6:a5:3a:b6:3f:64:
27:fa:5b:fb:55:4f:5e:67:d0:ff:6b:ba:3a:ed:7c:
3e:18:09:0b:26:27:dc:d2:79:0e:59:c4:f4:cb:e9:
ce:0b:a7:92:f8:8a:7b:09:6e:eb:b4:f6:6f:ad:f4:
6b:c6:c8:4e:e2:83:fd:b6:35:d6:13:20:e2:f7:2c:
55:fb:f9:87:19:bc:4f:07:b0:90:f9:18:8a:26:58:
cb:ae:f8:75:f2:9d:a4:ef:01:72:73:d8:c9:2e:e2:
d5:0c:47:72:4f:fe:75:9f:14:d2:be:7c:f6:9b:11:
08:c1:20:3f:cb:ed:81:43:61:2f:6c:e2:ef:c5:cb:
f1:5c:e6:d2:c2:53:84:7a:67:c8:ac:4f:08:cf:94:
02:b8:92:0c:97:f7:09:0d:a2:d1:66:09:ed:49:a2:
31:1e:73:16:81:2b:be:be:4a:5a:79:d6:b9:fa:3e:
19:4b:a6:f0:ed:67:48:d6:b6:1c:7f:80:b7:a7:d3:
b0:99:32:31:5a:3c:7f:2a:0c:e4:4b:9d:bc:87:22:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:78:51:DE:CF:79:34:E1:42:C6:C8:8B:19:24:5D:55:72:3F:2D
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b3:48:6f:2f:69:fa:b8:29:f2:5f:a3:04:0c:99:ad:31:9d:
2e:d7:12:43:9f:d4:93:84:4b:3d:db:7a:34:9b:a6:ad:b2:07:
de:76:5e:63:94:af:a6:e5:3e:1e:ee:6d:d8:be:e7:f1:8b:d9:
c7:bd:91:43:d7:0f:39:9e:b2:23:b3:e2:04:e1:8c:f3:cc:35:
07:d8:bb:4b:b1:ff:56:e6:8b:f8:8a:93:b0:97:a2:b6:81:31:
4a:e2:3c:a8:3b:7d:60:da:9a:27:47:0c:6e:fc:8f:23:13:dd:
05:9d:e2:b8:10:cc:69:7e:6d:63:c8:90:1f:43:b0:2d:e7:d1:
f4:33:6a:0c:17:47:15:ca:2f:96:90:82:91:d5:38:ec:4f:d1:
32:b1:1f:48:0c:99:56:55:49:c3:e1:b9:87:2d:2d:0a:17:30:
76:1f:40:c4:56:69:fd:b4:7a:53:6e:28:cd:0c:1d:de:ab:1f:
d8:c7:af:02:14:06:7c:14:4e:15:d3:80:3c:95:81:77:48:75:
da:ed:79:ee:99:7b:d8:1b:de:db:ac:5e:ee:6c:93:4b:78:11:
9a:fa:d1:d5:e7:ae:5d:f0:ce:b4:a1:78:19:e6:74:e4:97:0e:
17:71:df:ae:6a:4a:92:3e:a1:96:a8:82:34:bd:a0:5e:d4:84:
40:9c:60:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MvrX+zgYtBTp1cGq6o/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh
MGFmZjIwHhcNMjUwNjI4MTEwMTIzWhcNMjUwNjI5MTEwMTIzWjAzMTEwLwYDVQQD
Eyg3M2ZlNzg1MWRlY2Y3OTM0ZTE0MmM2Yzg4YjE5MjQ1ZDU1NzIzZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33ZyJSZZhoMU0auRSihsqF4+AuQ+
P57lB5CjQpcByQN1fww37XwW99Yu2XKnBxp3Sf9+LQfGpTq2P2Qn+lv7VU9eZ9D/
a7o67Xw+GAkLJifc0nkOWcT0y+nOC6eS+Ip7CW7rtPZvrfRrxshO4oP9tjXWEyDi
9yxV+/mHGbxPB7CQ+RiKJljLrvh18p2k7wFyc9jJLuLVDEdyT/51nxTSvnz2mxEI
wSA/y+2BQ2EvbOLvxcvxXObSwlOEemfIrE8Iz5QCuJIMl/cJDaLRZgntSaIxHnMW
gSu+vkpaeda5+j4ZS6bw7WdI1rYcf4C3p9OwmTIxWjx/KgzkS528hyJxqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP+eFHez3k04ULGyIsZJF1Vcj8tMB8GA1UdIwQY
MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt
NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz
LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrNIby9p
+rgp8l+jBAyZrTGdLtcSQ5/Uk4RLPdt6NJumrbIH3nZeY5SvpuU+Hu5t2L7n8YvZ
x72RQ9cPOZ6yI7PiBOGM88w1B9i7S7H/VuaL+IqTsJeitoExSuI8qDt9YNqaJ0cM
bvyPIxPdBZ3iuBDMaX5tY8iQH0OwLefR9DNqDBdHFcovlpCCkdU47E/RMrEfSAyZ
VlVJw+G5hy0tChcwdh9AxFZp/bR6U24ozQwd3qsf2MevAhQGfBROFdOAPJWBd0h1
2u157pl72Bve26xe7myTS3gRmvrR1eeuXfDOtKF4GeZ05JcOF3HfrmpKkj6hlqiC
NL2gXtSEQJxgVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:21 2025 by rpki-client