Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: 85GNVNoAWhZUg29u2v+b0TG3MMuRVv3D3+qaKRWhX64=
Subject key identifier: B8:27:71:CA:41:7C:53:DF:B5:86:CF:C7:C1:C6:28:8C:7A:13:8A:70
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0198458896177A6ACC0EC9F67ABF7075B404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:00:35 +0000
Manifest this update: Sat 26 Jul 2025 07:00:35 +0000
Manifest next update: Sun 27 Jul 2025 07:00:35 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: Ld4ZV/zAejJw63HttvliivhVC8RFw30FSUziROKnTVI=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:96:17:7a:6a:cc:0e:c9:f6:7a:bf:70:75:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jul 26 07:00:35 2025 GMT
Not After : Jul 27 07:00:35 2025 GMT
Subject: CN=b82771ca417c53dfb586cfc7c1c6288c7a138a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:2a:d9:dc:da:4e:77:1f:f7:ac:24:f2:03:
12:f0:72:41:27:ed:e3:87:ed:9b:7f:4b:89:18:a6:
42:52:a5:29:0c:5f:35:4c:65:d5:0f:67:77:1a:2c:
b3:26:6b:ed:1e:72:c8:d0:92:42:67:3a:ac:a3:86:
8c:69:3c:60:8d:98:44:58:71:bd:e2:8e:65:32:c8:
f2:d3:c0:45:bb:48:bf:fa:2d:5a:a9:95:89:6f:9d:
d6:41:36:90:dd:6d:d4:fd:7f:1f:e6:f7:c1:32:ff:
51:57:9f:51:6f:ad:e6:51:83:3f:0b:00:de:6f:1f:
5a:be:40:18:ac:af:42:00:cd:b7:fc:03:e2:e4:ac:
3f:a3:80:62:06:23:a3:45:df:bd:12:e0:92:c9:b6:
b2:f6:96:12:c9:2d:79:48:79:47:72:ac:0e:4b:c6:
72:87:d8:ab:2e:92:1e:69:ca:87:8b:07:94:1e:ff:
51:a8:1d:3b:e3:ed:e3:14:35:6d:e6:6b:a3:74:1e:
0f:34:3e:05:86:9e:e0:c4:92:e4:76:77:ae:5b:4d:
73:03:34:45:ef:c7:4e:36:88:0c:27:26:92:d2:d1:
61:24:35:33:56:05:ff:a5:ee:ef:9f:f3:2f:ba:aa:
e7:d4:fa:4e:aa:80:5a:ac:9f:2e:37:82:b3:63:b9:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:71:CA:41:7C:53:DF:B5:86:CF:C7:C1:C6:28:8C:7A:13:8A:70
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7b:99:ba:eb:87:76:f1:2a:b9:8d:65:1b:78:de:35:d9:27:
31:d9:6d:5a:c3:1a:63:07:6d:27:d6:e5:1e:27:e3:37:8d:2e:
e3:88:3a:21:e1:e7:77:72:36:54:74:78:f1:32:c9:19:aa:ac:
8d:8f:0f:1d:d6:de:91:71:18:60:40:5c:81:d6:e6:6f:c9:2e:
9f:d2:59:ed:50:5d:f4:ee:0b:f3:4d:e7:60:e0:a5:0e:31:2a:
e7:c5:b0:a8:32:43:4a:47:06:40:1b:4e:25:5c:cd:78:32:ae:
5d:13:8a:f0:f7:bf:a2:00:35:07:4f:07:38:2f:a6:8e:75:05:
ec:95:53:64:9b:b3:84:df:9e:ee:8d:f0:b9:dc:e3:70:aa:cf:
b4:d0:16:3e:3b:57:c6:41:30:0e:a6:65:85:97:a6:fb:d0:89:
ee:28:96:ce:56:4b:28:ab:49:07:92:f2:c9:c7:2a:43:a3:59:
42:d4:ab:2a:fe:30:79:07:9f:a3:13:af:dd:e1:d4:6e:0d:ee:
05:0e:aa:f2:7b:17:09:38:d1:3c:1a:33:f8:27:19:51:ea:34:
e3:9c:27:18:e0:5d:ba:5e:72:e9:59:fc:d6:c4:7d:f1:45:ea:
d0:94:c5:ba:ed:ad:65:91:4e:49:e4:8a:a5:a1:67:6d:92:ac:
e9:ad:90:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiJYXemrMDsn2er9wdbQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj
OTNiODAwHhcNMjUwNzI2MDcwMDM1WhcNMjUwNzI3MDcwMDM1WjAzMTEwLwYDVQQD
EyhiODI3NzFjYTQxN2M1M2RmYjU4NmNmYzdjMWM2Mjg4YzdhMTM4YTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7cq2dzaTncf96wk8gMS8HJBJ+3j
h+2bf0uJGKZCUqUpDF81TGXVD2d3GiyzJmvtHnLI0JJCZzqso4aMaTxgjZhEWHG9
4o5lMsjy08BFu0i/+i1aqZWJb53WQTaQ3W3U/X8f5vfBMv9RV59Rb63mUYM/CwDe
bx9avkAYrK9CAM23/APi5Kw/o4BiBiOjRd+9EuCSybay9pYSyS15SHlHcqwOS8Zy
h9irLpIeacqHiweUHv9RqB074+3jFDVt5mujdB4PND4Fhp7gxJLkdneuW01zAzRF
78dONogMJyaS0tFhJDUzVgX/pe7vn/Mvuqrn1PpOqoBarJ8uN4KzY7mEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgnccpBfFPftYbPx8HGKIx6E4pwMB8GA1UdIwQY
MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt
NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll
LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonuZuuuH
dvEquY1lG3jeNdknMdltWsMaYwdtJ9blHifjN40u44g6IeHnd3I2VHR48TLJGaqs
jY8PHdbekXEYYEBcgdbmb8kun9JZ7VBd9O4L803nYOClDjEq58WwqDJDSkcGQBtO
JVzNeDKuXROK8Pe/ogA1B08HOC+mjnUF7JVTZJuzhN+e7o3wudzjcKrPtNAWPjtX
xkEwDqZlhZem+9CJ7iiWzlZLKKtJB5LyyccqQ6NZQtSrKv4weQefoxOv3eHUbg3u
BQ6q8nsXCTjRPBoz+CcZUeo045wnGOBdul5y6Vn81sR98UXq0JTFuu2tZZFOSeSK
paFnbZKs6a2QYw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:44:29 2025 by rpki-client