Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: yG495w9Dt1/NVXP3C0sO+vw4Qwl55nrToZbwwogZiAA=
Subject key identifier: 7A:7F:D5:4B:E9:D2:05:36:AC:45:68:BD:6D:03:5B:0C:75:87:5F:0C
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 0198406248D59B72A33AFA86E58A9B557923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 124A
Signing time: Fri 25 Jul 2025 07:00:39 +0000
Manifest this update: Fri 25 Jul 2025 07:00:39 +0000
Manifest next update: Sat 26 Jul 2025 07:00:39 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: Ne00fwayZt/5Ll7KzaD1oLdtLd7KIdCkKqJih3fTLW4=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:62:48:d5:9b:72:a3:3a:fa:86:e5:8a:9b:55:79:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jul 25 07:00:39 2025 GMT
Not After : Jul 26 07:00:39 2025 GMT
Subject: CN=7a7fd54be9d20536ac4568bd6d035b0c75875f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:72:4d:16:09:8c:4f:24:0f:e8:48:c7:a6:
25:42:67:54:9b:89:fd:45:6f:50:c5:ef:65:d0:5a:
d3:0e:1a:29:ea:9f:08:84:9c:34:63:c2:9e:67:e1:
8f:f6:04:21:3c:a4:d4:32:10:b5:4a:f4:b1:fc:2d:
33:c6:26:5b:30:41:d7:49:2c:45:d9:ac:43:a0:3c:
90:39:27:e7:fd:f1:b9:fc:5c:af:cb:63:4a:92:26:
8b:f9:0a:ec:30:4a:1e:67:fa:e1:aa:db:f5:c0:76:
98:91:7c:b9:f4:e3:58:76:0f:94:32:30:17:70:6d:
b0:2e:3d:ed:a7:64:64:38:37:8a:4b:59:0a:e2:0b:
60:f0:69:f7:07:2c:97:b8:6b:2f:32:cc:36:36:25:
c4:87:aa:01:62:df:9a:26:ac:f9:85:d5:23:3c:41:
a3:27:59:f1:88:6a:02:e5:0f:fe:78:25:38:cb:30:
d3:23:5a:00:83:01:5a:a9:48:20:5e:3e:75:08:ca:
0f:c7:0c:df:7a:9f:77:41:ea:b2:d6:f5:40:ac:6d:
12:62:3f:65:35:36:61:92:86:2a:03:b7:4f:44:db:
7b:6c:99:12:f7:c9:5e:01:c3:ec:82:b9:95:2e:a6:
8f:e2:4a:63:0b:25:af:2f:64:72:e0:ad:4c:2b:e5:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:D5:4B:E9:D2:05:36:AC:45:68:BD:6D:03:5B:0C:75:87:5F:0C
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:a7:93:6a:4a:db:9b:5c:0d:70:28:34:a9:c5:f6:87:00:
02:4a:69:91:f8:a1:32:9e:37:fb:25:68:1b:83:a8:14:de:b1:
57:64:b4:70:93:06:32:46:f2:f2:4f:94:cb:42:de:31:c7:a8:
f4:cb:21:a8:d1:54:44:ec:9c:c3:8e:76:55:13:64:f7:84:49:
7d:85:7a:13:94:32:bb:63:e9:b2:51:6f:a3:93:86:10:f1:cd:
84:9a:4c:bc:52:9b:4b:61:6a:cd:3e:6a:f3:10:0f:b4:13:f9:
5e:f2:71:aa:46:59:cf:c9:52:b7:31:56:35:2e:b7:58:39:c6:
3e:01:ce:bd:50:d0:3c:36:2e:79:20:05:0e:5d:3b:7e:ff:ce:
ca:41:b6:03:ab:6a:cc:ea:77:4a:ee:17:f1:eb:87:0a:5a:47:
cc:9c:be:6f:6c:b5:fc:81:90:b8:59:ea:a1:b5:86:e6:80:5a:
a8:88:2c:21:30:9a:d8:59:46:de:76:73:87:1d:7e:4e:57:59:
8f:c6:f1:3d:af:dd:11:63:0f:5f:7f:87:eb:45:03:53:95:6e:
b6:a4:23:b7:d3:a7:e2:4d:fe:39:25:b0:82:69:55:ff:7c:dc:
e1:14:69:76:37:3f:e6:bf:45:cb:d1:ee:f9:7b:83:cb:16:e1:
b9:b8:4b:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhAYkjVm3KjOvqG5YqbVXkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjUwNzI1MDcwMDM5WhcNMjUwNzI2MDcwMDM5WjAzMTEwLwYDVQQD
Eyg3YTdmZDU0YmU5ZDIwNTM2YWM0NTY4YmQ2ZDAzNWIwYzc1ODc1ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VpyTRYJjE8kD+hIx6YlQmdUm4n9
RW9Qxe9l0FrTDhop6p8IhJw0Y8KeZ+GP9gQhPKTUMhC1SvSx/C0zxiZbMEHXSSxF
2axDoDyQOSfn/fG5/Fyvy2NKkiaL+QrsMEoeZ/rhqtv1wHaYkXy59ONYdg+UMjAX
cG2wLj3tp2RkODeKS1kK4gtg8Gn3ByyXuGsvMsw2NiXEh6oBYt+aJqz5hdUjPEGj
J1nxiGoC5Q/+eCU4yzDTI1oAgwFaqUggXj51CMoPxwzfep93Qeqy1vVArG0SYj9l
NTZhkoYqA7dPRNt7bJkS98leAcPsgrmVLqaP4kpjCyWvL2Ry4K1MK+VH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp/1Uvp0gU2rEVovW0DWwx1h18MMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+ink2pK
25tcDXAoNKnF9ocAAkppkfihMp43+yVoG4OoFN6xV2S0cJMGMkby8k+Uy0LeMceo
9MshqNFUROycw452VRNk94RJfYV6E5Qyu2PpslFvo5OGEPHNhJpMvFKbS2FqzT5q
8xAPtBP5XvJxqkZZz8lStzFWNS63WDnGPgHOvVDQPDYueSAFDl07fv/OykG2A6tq
zOp3Su4X8euHClpHzJy+b2y1/IGQuFnqobWG5oBaqIgsITCa2FlG3nZzhx1+TldZ
j8bxPa/dEWMPX3+H60UDU5VutqQjt9On4k3+OSWwgmlV/3zc4RRpdjc/5r9Fy9Hu
+XuDyxbhubhLFw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:46:49 2025 by rpki-client