Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: 6Ht3FdMbilrzAStCL810+EfiZkmkEl9nm2o2z4Jy2yk=
Subject key identifier: 06:D4:A7:EE:44:48:6C:97:3E:5E:89:F4:6D:DA:3D:D8:DF:C9:49:B3
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0196C4CBD6351D4B13F563A34C0FA49AB01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 14:00:15 +0000
Manifest this update: Mon 12 May 2025 14:00:15 +0000
Manifest next update: Tue 13 May 2025 14:00:15 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: E3gyCMQwKWOJs46FzA885bqM5ToWyfKlqR7cxDhEfNM=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:d6:35:1d:4b:13:f5:63:a3:4c:0f:a4:9a:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: May 12 14:00:15 2025 GMT
Not After : May 13 14:00:15 2025 GMT
Subject: CN=06d4a7ee44486c973e5e89f46dda3dd8dfc949b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:1d:9f:47:57:6d:df:03:fb:83:7b:e4:89:
b1:7f:e7:7d:cc:39:30:95:28:e5:5c:04:77:ec:05:
d6:de:34:f1:51:e6:0e:55:73:38:b4:47:0a:00:13:
c7:8b:59:61:6c:18:34:e6:ac:9c:5d:13:36:49:97:
e0:49:78:86:9b:6f:a4:05:59:9d:bb:3a:d5:19:1b:
e1:b8:02:dd:59:21:35:78:5d:4e:32:36:12:17:15:
fb:c1:3a:c8:04:94:4f:10:31:68:f6:e0:70:a1:c5:
f9:65:dc:ba:6b:29:f1:45:bd:11:04:09:dd:5d:57:
c0:c9:f6:3f:6d:46:b7:ff:75:af:fd:80:ac:17:34:
16:b7:26:ee:6b:4d:5b:4c:f1:a8:92:0e:c5:43:7c:
ad:27:f3:94:32:b8:33:7a:57:11:2b:29:ee:75:a5:
98:1f:9e:75:4c:a3:d9:37:11:d6:54:ea:28:14:f0:
75:d3:a9:bf:11:e9:04:d0:3c:e3:bb:77:04:dd:8e:
f5:60:db:e6:81:b3:30:ac:7b:a8:e7:4d:3d:12:be:
e6:c8:4b:d8:d3:95:15:66:dd:44:d5:81:ad:7e:c9:
23:51:75:24:01:99:4b:61:7e:b8:a0:71:c5:3b:8b:
61:f9:fc:5d:a5:b2:f9:48:b0:48:f0:85:80:6a:a1:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:A7:EE:44:48:6C:97:3E:5E:89:F4:6D:DA:3D:D8:DF:C9:49:B3
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:47:07:28:62:1d:38:26:5a:99:73:7b:0d:09:14:9a:18:79:
92:24:33:49:e4:de:6c:f4:4e:b2:6c:b5:e9:61:7d:4b:62:5f:
73:a9:7e:9f:62:94:95:20:bc:86:63:30:1a:1c:fd:e4:5e:73:
3f:fd:bb:cf:76:1e:23:a9:ec:b9:06:0b:1f:fa:9a:91:5a:bc:
bb:73:ee:08:94:10:27:6d:46:40:9f:b6:db:bb:03:60:3e:80:
b9:67:d2:e6:ac:0d:f2:16:19:61:d7:02:ca:dd:bd:eb:1e:ee:
d1:5c:44:f2:f1:bc:64:50:60:a6:37:ce:ab:11:16:1e:ed:51:
00:64:25:c2:18:4a:86:4a:9f:9f:81:1c:f0:a9:e3:8f:66:14:
aa:81:aa:b5:04:f3:54:71:fe:8a:d3:04:2c:fd:19:22:78:a7:
37:02:86:86:36:36:3b:d3:36:db:9c:ff:7a:80:e1:de:76:c6:
25:59:25:7c:dd:e7:0f:10:a7:2d:50:87:5b:65:fa:1c:60:dc:
f6:e6:f8:6f:d3:d2:c6:ef:22:0b:0c:d2:ef:9d:7f:1c:ae:66:
db:fc:c9:63:8b:5f:4b:00:23:a1:ba:91:42:c1:8f:b0:c1:4d:
c4:a4:14:55:8e:4c:3e:9d:82:ec:7a:a3:d1:9e:86:9b:75:fe:
94:2e:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:38:44 2025 by rpki-client