Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: T6RMqpX8K4PArF831EvWahIgqViBqM0Qzga3ZcJsPkk=
Subject key identifier: 4A:39:A1:30:67:E2:6D:76:F4:D5:F4:30:4E:3D:72:AB:5A:69:19:9F
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019A4214622BEFAFD546ADE9364CFC6539EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1354
Signing time: Sun 02 Nov 2025 01:00:23 +0000
Manifest this update: Sun 02 Nov 2025 01:00:23 +0000
Manifest next update: Mon 03 Nov 2025 01:00:23 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: LCSTcWpMtqzsKnqcJkNq/sJNfXsiorU80B8whPEOk9M=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:14:62:2b:ef:af:d5:46:ad:e9:36:4c:fc:65:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Nov 2 01:00:23 2025 GMT
Not After : Nov 3 01:00:23 2025 GMT
Subject: CN=4a39a13067e26d76f4d5f4304e3d72ab5a69199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:47:c9:59:80:87:45:6f:c2:26:db:3b:9f:
65:52:4c:a0:00:43:62:f8:0d:7f:f7:4d:af:01:3e:
74:7a:c9:5c:25:fd:79:37:e4:7e:87:6f:7a:21:71:
d1:96:d1:6a:72:b6:ea:f0:3d:02:be:87:bc:85:ef:
01:6e:81:11:d4:06:83:51:d1:9d:f6:16:fd:20:1e:
69:ea:ef:44:3f:3e:94:00:e1:95:bb:f4:94:28:13:
f2:ec:69:2c:81:cb:d6:d9:7f:76:d3:6c:93:4c:07:
a8:c1:aa:b7:25:80:3e:1e:b4:ec:2f:b9:24:77:aa:
ae:36:58:b8:de:a2:43:fc:81:d4:56:07:12:f4:34:
e1:d6:c1:3b:49:53:0e:44:22:0b:8b:61:9f:e2:3a:
7e:a4:41:d1:58:69:91:ba:82:68:5e:28:8e:51:c8:
c5:eb:b4:6b:85:2f:c1:98:6b:9d:ad:cf:ba:06:a4:
04:df:6a:bd:eb:4a:a0:1f:07:fd:09:b6:5c:10:68:
ea:72:b4:fd:49:b3:b7:10:60:90:67:1d:34:ae:c7:
c8:9f:22:9e:9b:9b:36:ea:e0:93:91:21:79:9e:fa:
bd:a1:8c:c8:83:d7:e9:f0:f8:66:18:7a:a0:85:6d:
2f:72:0b:79:a1:ae:5f:02:a3:5c:ab:1a:e7:7a:fe:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:39:A1:30:67:E2:6D:76:F4:D5:F4:30:4E:3D:72:AB:5A:69:19:9F
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:e4:1f:56:49:ad:18:1c:f1:98:f3:b3:5c:28:d2:b2:fd:
f0:f0:f0:28:07:47:38:46:86:72:9a:25:f6:65:24:0a:06:43:
d4:43:c7:1a:8f:f1:13:e9:55:ab:60:9b:e5:f0:43:d7:03:b6:
38:c5:ec:05:0b:e1:0b:85:8d:6d:81:d3:9a:9b:28:9e:f7:db:
69:b6:29:b1:f9:f7:28:4e:ca:86:bc:1d:e3:2b:a4:e4:c2:26:
66:0a:cf:68:dc:27:be:c9:20:a2:7e:65:fa:99:94:0b:21:fa:
5d:b3:55:60:7c:9b:4b:5f:ea:01:01:c0:30:10:f3:b7:e8:d4:
0a:44:7c:80:0e:b3:9d:93:58:f9:65:7f:7e:11:03:20:71:fc:
c2:53:e7:07:f7:6e:14:dc:3e:25:12:4a:d1:03:65:f6:f5:f3:
f6:0c:bf:e8:6c:c1:b3:93:3d:25:2a:49:af:02:55:15:bf:fc:
02:0b:0c:e0:74:a2:f0:27:be:1f:35:4a:44:d7:34:70:53:1b:
17:46:03:32:b6:f5:63:12:2b:ac:d5:a9:1b:a4:b8:e7:a2:e7:
99:88:04:8b:64:fe:be:fb:25:72:41:06:45:b0:b1:82:8d:de:
54:5e:d7:4b:96:7f:ad:c9:69:99:69:cb:19:7c:1d:9b:64:c9:
71:99:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 08:37:38 2025 by rpki-client