Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: xX6SpXPuUOnUmryhoEIy/ILB/h94QK6iJslYUTrHwOg=
Subject key identifier: D1:11:AB:40:FF:49:01:42:B1:1D:9C:D3:3A:AB:7D:C8:AB:DC:EE:3A
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 01984AE5A161DB9A108D6C2940725E2E96AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 14D5
Signing time: Sun 27 Jul 2025 08:00:19 +0000
Manifest this update: Sun 27 Jul 2025 08:00:19 +0000
Manifest next update: Mon 28 Jul 2025 08:00:19 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: XHBIHf+9ITh5sXHzgSN013GFFr8IUW5vEd+TKkqIBj4=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:a1:61:db:9a:10:8d:6c:29:40:72:5e:2e:96:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Jul 27 08:00:19 2025 GMT
Not After : Jul 28 08:00:19 2025 GMT
Subject: CN=d111ab40ff490142b11d9cd33aab7dc8abdcee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:5a:d8:54:70:6d:01:74:26:70:29:5b:90:
d5:ca:75:42:6c:4b:25:c4:15:b7:2d:35:db:11:36:
df:27:1e:df:90:71:38:af:31:32:c5:cd:9e:a3:7a:
e8:b3:65:ed:7e:d0:84:28:87:20:08:76:b1:48:06:
1a:86:ec:b4:d7:51:09:1f:3c:a0:5a:b0:f7:dc:3f:
44:db:c7:62:50:5e:d0:e6:fb:ee:f1:cb:42:fd:8e:
7c:87:44:e8:4a:b9:29:72:0e:86:48:df:ad:59:6d:
a0:0c:6d:cb:95:3d:03:db:50:57:fb:ca:46:f5:68:
13:a9:46:94:1f:22:f4:8b:02:93:38:49:05:7f:ca:
1e:d9:af:19:9f:e1:15:7a:b0:53:ec:a2:9e:a8:6d:
3e:b9:b2:3a:16:b4:f8:82:e0:49:ac:14:5c:a1:2c:
a4:ad:c9:22:99:af:e1:dd:a2:ab:93:80:10:3c:37:
a3:54:8e:73:1c:c6:2f:b3:85:e6:67:11:8f:60:b9:
97:63:b5:c4:fb:4e:18:10:d3:71:e6:7f:78:ce:3b:
c7:21:7b:40:e2:66:79:79:c2:43:df:d9:99:04:c9:
0f:e3:86:c0:11:fe:c4:db:d0:bb:4b:57:f6:56:ba:
ca:ae:15:ec:db:7e:5c:0e:69:0b:ab:8a:53:fa:2f:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:AB:40:FF:49:01:42:B1:1D:9C:D3:3A:AB:7D:C8:AB:DC:EE:3A
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:b6:84:32:7b:9f:8a:d7:cf:2e:62:e2:af:cd:0f:18:ad:
2b:e0:fc:72:6b:2a:7e:cc:f7:52:d3:ef:f8:fa:cf:15:11:6a:
0e:3f:26:90:ea:ae:e9:0d:59:70:b2:1b:89:c5:40:89:39:03:
77:e9:3e:d0:38:69:3b:7a:4e:ef:01:23:42:09:43:10:66:b0:
89:f7:ac:7e:e7:87:d8:c4:5f:d1:8d:54:5d:26:e6:04:84:41:
5c:c9:63:16:f9:36:ba:af:c7:f8:87:91:12:84:db:dc:a5:a7:
93:f8:0d:24:d8:c4:61:1c:62:90:96:2d:84:af:3a:4e:28:cb:
8b:35:91:e5:d8:96:ef:46:f8:4b:49:e1:f8:5b:1d:33:16:17:
8a:b8:86:64:c0:86:9b:0a:a2:10:be:85:bb:ba:c8:f4:93:2d:
11:a7:bb:86:f6:1d:f9:5e:62:e9:99:06:0d:1b:6e:eb:ee:7e:
48:fc:2f:db:20:91:fa:ba:83:32:bf:22:60:f5:53:ed:25:0f:
58:3b:a4:f3:78:bf:54:b9:2b:6f:4a:41:18:40:40:65:8d:a6:
88:b5:f4:47:9f:87:34:78:b1:b7:bd:2c:61:95:a1:0f:6d:61:
e9:92:bf:06:00:91:dd:21:0f:5b:26:b2:65:85:af:9a:dc:06:
d0:d5:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:00 2025 by rpki-client