Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: H/JhYqOpts1hkhTYZBD7HdpoICkie7AQ8l68iJqUdyc=
Subject key identifier: 69:53:10:91:55:85:BE:88:95:CC:C5:FF:EB:74:68:10:84:34:6A:A3
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 01960E68B89BB5B73F337B8D9B2B609566AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1127
Signing time: Mon 07 Apr 2025 04:01:06 +0000
Manifest this update: Mon 07 Apr 2025 04:01:06 +0000
Manifest next update: Tue 08 Apr 2025 04:01:06 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 8k7OJFEsy2wlxjLVaKPgps4jgmauI/HATRATLFyXlG4=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:68:b8:9b:b5:b7:3f:33:7b:8d:9b:2b:60:95:66:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Apr 7 04:01:06 2025 GMT
Not After : Apr 8 04:01:06 2025 GMT
Subject: CN=695310915585be8895ccc5ffeb74681084346aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:67:e7:69:3a:df:cd:d3:0e:48:cf:63:82:
4f:30:46:4d:66:04:82:35:f4:2d:76:2c:43:0c:31:
9d:78:61:56:98:21:ee:5c:40:93:c7:94:11:74:29:
63:f7:fb:7f:e3:48:57:27:71:da:cd:95:21:71:12:
99:2c:2b:09:90:70:2e:b0:ba:66:38:09:68:d1:c0:
21:50:ae:b5:ca:75:10:8f:50:5f:6c:63:0d:7a:eb:
94:e9:9d:63:b1:45:9e:f9:d9:20:08:f1:92:2c:7a:
80:90:58:f7:fb:09:5f:a2:ef:d7:c7:24:62:c1:19:
17:59:f3:ea:e6:88:a5:31:9a:18:78:91:87:ba:55:
1e:d9:86:92:52:f8:f0:4f:df:1f:cb:7a:63:34:0c:
ae:51:25:35:82:85:81:06:11:08:a6:12:80:f3:92:
7c:02:0b:bc:85:b7:9c:33:f7:4c:26:eb:5d:c8:de:
4f:e6:78:6f:eb:a0:e0:5d:f4:da:4d:e0:95:73:bb:
4a:af:96:65:64:33:30:f4:4c:38:e4:68:e3:37:7d:
a8:52:81:ae:a7:d9:e9:03:5b:2a:1d:16:cc:94:74:
13:3a:01:5e:08:17:f0:ca:17:59:ee:4d:11:a6:62:
eb:7b:1e:56:d2:f6:8c:84:97:23:58:a2:cb:22:bd:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:10:91:55:85:BE:88:95:CC:C5:FF:EB:74:68:10:84:34:6A:A3
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8f:21:9e:98:62:e0:3e:72:de:8c:7f:c0:9f:a1:d7:47:cc:
3b:02:b0:bf:09:98:31:e8:c7:17:f5:b0:4a:26:2f:1c:8b:67:
e4:82:3b:5c:5e:df:98:49:41:ea:94:b0:28:b5:28:66:64:51:
91:8b:d1:e5:42:6e:5f:5e:e1:d9:ed:58:27:80:63:b4:91:0b:
61:a4:44:bd:b9:a6:ea:c1:b8:66:f6:49:81:ea:f8:57:b5:4f:
84:2d:08:12:44:d8:7e:a7:bc:7a:69:fb:a4:36:92:66:03:2c:
35:69:1c:20:43:a2:15:3f:ba:f6:76:8a:0f:eb:d6:ed:4f:56:
4e:92:7b:56:fb:c3:94:02:0b:f9:5c:bf:67:15:a1:37:23:e2:
bc:01:90:52:6f:f9:52:59:d1:47:27:8b:91:00:e5:51:ae:43:
4e:c7:b2:96:95:c8:25:a6:e6:5c:0c:6e:e1:aa:9f:92:54:29:
53:44:f1:36:6f:1c:57:0b:bf:12:7f:99:9a:56:f8:87:bd:0d:
62:9c:36:6b:2a:f6:f9:b9:4d:d8:46:ff:18:17:f3:e1:ff:2a:
c9:0a:c6:87:5e:87:25:4e:c3:ef:2c:01:66:19:3a:05:5c:b6:
ad:bb:b0:60:6e:34:f3:c0:c1:b6:20:84:6d:9e:fc:e5:42:6d:
68:0f:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:06 2025 by rpki-client