Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: FaQInRwmtTBBitIjd2gsVi59U5SR04iQSCALbKvH4wI=
Subject key identifier: 99:1E:43:09:C5:01:16:D7:55:14:6F:B9:66:45:85:2D:93:11:77:5C
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019853B1C9D0780DC844278CE17C0BDF4A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 0F9C
Signing time: Tue 29 Jul 2025 01:00:17 +0000
Manifest this update: Tue 29 Jul 2025 01:00:17 +0000
Manifest next update: Wed 30 Jul 2025 01:00:17 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: xVBcXAbGNVnRXuAIb4WbDp040KC6dQncq4qt+bz0IkA=)
2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:c9:d0:78:0d:c8:44:27:8c:e1:7c:0b:df:4a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jul 29 01:00:17 2025 GMT
Not After : Jul 30 01:00:17 2025 GMT
Subject: CN=991e4309c50116d755146fb96645852d9311775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:b7:cf:b1:e2:01:48:86:3c:db:d5:ba:28:
ae:e3:28:52:e3:d6:27:93:f5:8b:35:59:23:ba:de:
c8:31:2e:f0:f4:de:6a:c5:27:22:e7:e7:2d:98:09:
9a:2f:e1:fe:b9:c2:00:95:9c:76:43:e2:df:93:9d:
1d:02:a7:67:b4:1b:46:07:a3:5f:2f:33:b2:95:98:
f1:fb:95:c0:1f:fe:45:fa:2a:f2:25:27:86:d5:4c:
a1:85:be:6c:c9:97:51:e4:eb:bc:39:cc:4e:41:2d:
00:3d:d3:9a:cd:11:48:e7:4a:14:9d:f1:0c:22:78:
06:b9:75:b6:30:c8:5a:d6:a2:6b:6f:35:57:62:f2:
2e:a8:73:d5:c1:26:4d:3a:50:f2:b3:e9:ad:26:24:
fd:5e:cf:4a:36:84:a9:ab:2a:aa:6c:30:dd:c1:61:
48:05:8b:b1:bf:23:fc:30:42:b6:e5:e4:47:6e:68:
c2:48:51:97:d5:3b:d1:bd:b2:d6:f3:bc:91:68:d1:
42:f6:51:76:40:d0:f8:0e:7b:5b:f9:a6:44:3d:2d:
5a:e2:14:29:0b:98:fc:56:40:55:f2:2a:a6:47:8c:
6e:f5:57:c3:4e:82:63:e9:fb:6a:82:0f:a5:8e:0a:
a8:ea:83:2a:e7:9d:02:1f:d3:d8:39:34:17:69:ff:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1E:43:09:C5:01:16:D7:55:14:6F:B9:66:45:85:2D:93:11:77:5C
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:03:45:10:05:9c:55:00:9c:07:d2:41:e6:46:5b:a6:42:70:
6d:27:50:77:13:2a:e8:05:e2:f6:15:87:10:80:eb:09:bf:f1:
98:ed:b4:1b:74:06:30:96:e8:0c:43:d2:70:26:b8:c3:09:c8:
f9:ae:7c:cd:81:df:48:b2:e4:07:a2:30:47:61:1d:0c:e1:dc:
77:db:81:30:58:9a:8c:24:06:37:56:fc:7a:c6:5f:e3:87:f4:
79:ea:1e:08:43:3a:95:8e:04:86:50:99:98:7b:66:66:33:59:
a1:d8:a7:1f:a8:92:98:1d:0a:b1:ab:2e:c7:59:b6:ac:e9:f2:
2c:2d:9e:98:ae:fe:48:65:4e:7c:f3:dc:0e:81:33:db:0e:82:
f7:4d:fa:10:67:f5:8d:74:bc:4e:0f:ca:8b:c0:b8:22:b8:c6:
d2:51:aa:cc:b9:cf:e3:c3:63:0d:89:1c:3a:4c:0a:7f:89:35:
bc:5e:eb:20:66:df:90:76:0e:c6:cd:cb:94:29:3a:ee:af:c5:
d1:6b:f1:15:2e:57:cf:67:79:58:c8:55:14:09:14:dc:a0:7f:
d3:c4:89:6f:0c:90:7e:f0:e3:5b:a3:9d:fe:54:ba:7b:bb:b3:
c0:18:c6:a0:6d:10:a3:53:2c:58:02:82:80:23:c3:8f:2d:59:
95:66:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:52 2025 by rpki-client