Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: Tk4G4jp12RtnL2lRhlX9z5OtI15FL3UsZxkC6VFBi40=
Subject key identifier: 8A:30:71:28:B6:BF:D1:2D:64:BA:82:01:19:3B:77:C1:A0:D8:AC:1F
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0199FB7CECC60B198356F2C7F68B747C53EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: GlmXUFlwiHnZfy8wmB9tt1EEJZiTc2E4+dXi6AQT3P4=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ec:c6:0b:19:83:56:f2:c7:f6:8b:74:7c:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=8a307128b6bfd12d64ba8201193b77c1a0d8ac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:ad:2c:66:e6:df:0a:f4:e7:f0:24:b8:c0:
c0:af:c8:de:f1:2b:ad:45:89:41:4c:e0:10:93:fe:
8c:e2:6f:0c:f8:19:d1:bb:f0:41:1c:1f:37:1f:74:
17:34:76:b7:e0:41:19:ed:1b:24:0c:d4:e9:c2:a9:
10:84:f2:9c:61:da:3a:57:64:96:f2:a6:5b:fb:88:
85:10:88:05:6d:11:32:00:1c:7b:c1:bc:81:23:df:
cb:69:a3:cc:6d:26:a4:74:11:a2:a9:5e:af:d0:c8:
63:d5:f0:66:31:e0:0f:a8:ae:10:41:1a:8b:63:89:
3f:14:1a:ef:5b:02:53:39:06:16:fe:7a:58:15:ec:
6f:c5:85:fe:3c:82:51:9b:b9:c5:08:44:0c:74:54:
cf:ed:48:8b:58:c4:51:0d:e8:58:42:36:78:ee:c6:
b9:23:2b:67:d9:22:ef:21:01:67:6e:34:dd:2d:4b:
82:11:f5:e4:cb:46:ce:88:89:90:e1:4b:89:cc:64:
49:2f:28:c0:55:24:e8:1d:6b:ae:43:fc:aa:40:19:
17:f7:ae:5d:3d:63:09:cb:31:68:18:f1:31:20:4a:
d0:8c:cb:c2:60:e3:e5:8e:44:cc:8f:b3:24:27:26:
bb:a4:70:29:39:cb:32:8d:4c:51:0d:e4:96:1a:c0:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:71:28:B6:BF:D1:2D:64:BA:82:01:19:3B:77:C1:A0:D8:AC:1F
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a8:14:25:ad:b7:a4:90:f8:80:63:be:26:dc:18:6b:e1:2c:
1c:43:82:ba:f1:01:70:e2:2b:47:32:39:29:88:1e:ca:09:3d:
46:f1:00:9f:39:5d:39:20:42:88:56:20:6d:68:fc:56:6f:e1:
4c:36:80:27:3e:fa:d9:a2:ef:98:46:66:69:68:bf:d3:81:82:
34:9d:7d:12:0c:17:ce:04:23:b3:b9:b3:17:81:40:04:cb:f1:
d4:28:2d:a7:a9:23:b2:47:a3:0c:b0:3e:c0:30:8f:b7:9f:95:
03:20:8c:7b:67:62:66:8f:81:33:d8:96:e3:3a:b3:62:bb:5b:
85:3a:bd:99:30:e6:d9:55:91:7b:29:15:7c:b6:24:47:6a:1a:
ea:a5:71:cd:d0:b2:7c:cf:c2:5a:e4:73:61:ee:6a:eb:5b:b8:
d1:c1:cf:72:e6:f5:56:b3:53:f3:cb:8d:13:75:17:ac:d9:54:
6e:c5:18:ce:a4:be:70:ed:9d:b7:f3:ee:fe:42:10:2d:d9:bc:
a2:c5:c7:71:c1:ca:02:3c:52:7a:d4:b5:f8:28:75:eb:71:54:
4e:42:c6:e6:46:e3:d1:61:d7:d5:34:67:6b:5d:13:84:d5:6b:
7e:50:77:8b:e5:d9:1b:ed:c2:dc:c3:94:33:c6:3b:30:f1:f6:
2e:01:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:05 2025 by rpki-client