Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: /R9PB/waKbW6jt5RvdR5ylbn3z/8hTnRzWQoRx7KaNU=
Subject key identifier: 3C:00:62:43:EF:7B:9C:34:7D:91:9F:64:3A:6D:CD:51:EE:87:34:EE
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0199C37B22EA7D9CF6B2E315227FD15C2E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 16C7
Signing time: Wed 08 Oct 2025 11:00:50 +0000
Manifest this update: Wed 08 Oct 2025 11:00:50 +0000
Manifest next update: Thu 09 Oct 2025 11:00:50 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: IVxB1Z2p2xfWZ9Q9kudbN1838kBmVLq1emJAFl5MAhI=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:7b:22:ea:7d:9c:f6:b2:e3:15:22:7f:d1:5c:2e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Oct 8 11:00:50 2025 GMT
Not After : Oct 9 11:00:50 2025 GMT
Subject: CN=3c006243ef7b9c347d919f643a6dcd51ee8734ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:51:78:ef:40:45:4d:44:b0:c1:cc:3f:99:
1b:a2:be:9d:a7:6f:05:e5:1d:87:8c:bb:f6:37:c4:
30:7a:df:77:9f:0a:35:8d:e8:30:44:88:be:a5:3d:
f3:05:71:e3:d3:bb:29:83:4f:57:65:5c:25:03:83:
d7:65:84:8f:98:23:bc:b9:17:a8:2b:88:57:57:79:
b7:67:1a:ea:e1:80:90:a7:60:a5:c5:e0:b5:27:ec:
5d:a9:ae:c2:d2:d4:2f:d6:c3:da:9a:08:7d:65:70:
c0:7b:79:d2:d5:a1:f9:04:12:25:15:e7:5f:99:ba:
e7:87:37:16:25:ac:fe:22:3a:ba:bd:21:99:d9:81:
8e:44:7d:f0:79:da:7c:a3:4f:9c:70:86:c2:be:8e:
1f:f2:ae:f4:77:3f:26:65:a0:ab:b2:b0:49:a3:ed:
fe:16:ca:01:5c:94:f8:8e:2a:0a:14:7d:e7:46:cc:
18:a0:bc:30:ac:6e:55:45:8a:2b:63:c6:92:12:03:
20:f9:14:6c:8c:2d:c4:c7:7e:66:42:9e:74:2b:e1:
78:73:0a:3f:12:ed:b3:9e:38:fa:35:1e:7b:f7:78:
46:f6:bd:e6:00:87:93:2e:a7:9f:31:c4:ec:5f:6a:
a6:53:2c:c2:51:33:75:2c:0c:5a:9e:15:0f:e4:f5:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:62:43:EF:7B:9C:34:7D:91:9F:64:3A:6D:CD:51:EE:87:34:EE
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:16:fc:80:5f:05:fb:cf:6c:3f:c8:aa:f5:b4:22:94:e9:0b:
61:01:03:54:a4:1e:65:27:70:80:1f:e8:2c:b1:7b:84:6c:5d:
3e:59:9a:b2:7b:32:32:c4:30:f9:03:24:6f:17:1e:de:c6:6e:
ed:fc:0e:7a:9f:0f:ff:55:1a:ca:5b:89:8d:18:5f:33:f8:db:
16:f5:2e:f1:78:16:be:85:79:f3:9a:69:cb:cf:a6:3f:ac:ea:
16:36:b2:87:b7:a5:6b:2e:cd:e2:05:65:71:4a:e1:a2:4d:7a:
b2:32:65:e5:7b:ba:c0:57:96:f5:d8:8a:2e:d3:d1:47:06:ce:
15:57:bd:be:19:46:3c:18:dd:6c:70:d0:58:b0:c1:9f:cb:72:
5a:15:73:8c:94:af:6c:e8:ae:36:f4:03:79:f9:df:fb:1b:66:
bf:7e:f8:08:ac:70:63:5d:0a:ed:56:c5:0f:45:f4:5f:03:47:
81:ab:66:7f:b3:df:37:27:7a:8f:e0:0b:19:8a:ab:6c:63:a1:
1d:b3:b8:b2:5f:55:81:47:ed:e2:14:62:8d:8c:6e:ab:c1:b0:
60:81:e0:ef:5f:9f:a4:8a:f6:c3:1b:fa:a5:66:46:6e:cf:fc:
ee:65:ae:0c:60:f0:41:7a:a8:1e:f8:79:da:ca:5c:89:4f:dd:
bf:49:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:59 2025 by rpki-client