Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: Ud7GVPZnX9GrxfmHNaaGkI7x5XqU/tiPsGPdekk27N4=
Subject key identifier: 0D:F7:6A:CE:70:47:68:5C:28:7E:DC:C9:A8:65:59:4F:B7:15:45:A6
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019848526EEA8855F1FC0B52D2A50E5667F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 20:00:18 +0000
Manifest this update: Sat 26 Jul 2025 20:00:18 +0000
Manifest next update: Sun 27 Jul 2025 20:00:18 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: v4WRWVuqS7NkwOa18micDuPEuG9IExAnYtHuoBEl0lo=)
2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:6e:ea:88:55:f1:fc:0b:52:d2:a5:0e:56:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Jul 26 20:00:18 2025 GMT
Not After : Jul 27 20:00:18 2025 GMT
Subject: CN=0df76ace7047685c287edcc9a865594fb71545a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:81:7d:08:15:8c:e8:d3:5d:1c:9f:ea:9f:
cf:ed:92:8a:39:6d:5b:3e:8a:70:02:5b:f3:5d:cb:
9e:a3:f5:b4:6e:4e:0b:7c:c8:d5:b3:c9:88:39:30:
da:e6:ee:8a:cb:24:b6:24:3c:a7:7b:64:cb:49:eb:
34:38:2c:5f:e6:5c:05:7c:f9:4c:10:8e:44:25:bb:
60:ed:4b:4b:94:95:7b:f0:b0:fe:f5:eb:6a:a1:dd:
82:a6:9f:04:52:b7:ae:bf:ac:f5:3d:b0:88:2e:82:
ff:d2:04:4a:a6:33:a1:c0:f7:cd:86:0f:90:37:cb:
a3:c4:42:f5:7a:cf:36:44:ad:2f:be:54:af:ac:5b:
e5:07:b0:5a:cd:db:28:ac:1c:67:f6:26:5b:74:3e:
a8:58:a8:96:fe:87:8c:01:8a:60:c2:f0:ce:6f:66:
ca:8f:86:aa:37:f6:aa:f7:9d:98:54:b2:93:38:f8:
0e:02:e7:3c:54:2f:c8:e8:90:60:c8:6f:47:e6:84:
fd:6d:02:80:9c:77:0d:bd:52:23:c2:dd:03:2e:ec:
ca:67:a0:3d:f2:92:3a:f0:24:cb:82:3f:3c:e9:e3:
b6:5a:21:12:ec:58:bb:0a:a3:92:98:66:b2:d4:f4:
e3:c3:a6:0a:28:24:e2:1b:46:b4:7b:3e:20:b5:29:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F7:6A:CE:70:47:68:5C:28:7E:DC:C9:A8:65:59:4F:B7:15:45:A6
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:31:5b:77:41:7d:af:00:5d:52:dd:64:44:1b:f6:00:3d:42:
2c:23:1d:0a:9a:d8:95:25:eb:58:ac:7f:c0:6a:0b:09:14:31:
b1:f5:87:68:9e:fd:52:27:3b:8d:5a:ae:18:e5:cb:81:1b:1f:
0d:a5:4e:da:7a:05:c8:89:51:50:f7:2c:b5:a3:c6:df:0a:10:
e7:6b:6c:9a:43:a8:85:4e:d3:d3:a3:bf:7b:68:89:dc:92:bc:
46:d4:c2:20:25:0f:93:b0:93:e8:6b:37:ee:f0:9b:95:48:20:
17:92:8f:42:70:7d:03:6d:3b:78:63:dd:4c:a5:a5:34:aa:cf:
fe:0b:b8:55:77:61:2f:21:1b:ec:0d:d0:89:35:79:d0:e4:c1:
8d:17:b7:ce:8d:f4:bb:41:84:89:f8:b6:d6:53:88:0f:b0:c2:
dd:d8:3a:dd:62:e1:02:3f:d4:6f:51:a9:20:2b:9f:c3:04:b2:
06:8d:11:ea:02:00:a8:5b:89:ad:c0:0d:82:ed:91:d3:77:b6:
22:21:7f:d1:df:fb:5d:5a:a0:3a:7e:49:f7:3e:47:9c:42:fe:
12:c7:0a:56:bc:ce:fc:1e:63:fc:ce:ec:53:be:29:4f:7a:f7:
0a:de:ef:b3:38:b8:65:b3:04:bb:48:e9:cd:63:6b:0c:b2:24:
74:c5:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:00:15 2025 by rpki-client