Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: q4qt9QCzc6iiNQ/YlM6Zc4BuMrtQYWmKCGZHu+ivZ8Y=
Subject key identifier: 10:6F:E8:3C:A2:32:29:64:67:2C:42:D8:D0:F1:DE:C3:2E:EC:F7:E0
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 01992DEC664A430B5C87D79A21687049040B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 12C5
Signing time: Tue 09 Sep 2025 10:01:31 +0000
Manifest this update: Tue 09 Sep 2025 10:01:31 +0000
Manifest next update: Wed 10 Sep 2025 10:01:31 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: q7f7x6Nj7Z2uA0XRG3FFgFyIk+nETrtZ9hndIJ8zDXQ=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:66:4a:43:0b:5c:87:d7:9a:21:68:70:49:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Sep 9 10:01:31 2025 GMT
Not After : Sep 10 10:01:31 2025 GMT
Subject: CN=106fe83ca2322964672c42d8d0f1dec32eecf7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:b6:a9:cf:8e:13:29:37:fa:ed:50:d2:78:
01:aa:8a:e5:68:88:da:eb:c2:6e:0e:0a:f8:2a:f4:
5c:65:82:ad:2a:cf:5f:c9:b5:0f:81:39:bd:96:d4:
63:e4:e4:19:eb:41:79:10:94:f8:44:f9:61:ed:de:
3d:05:4b:a4:7c:3e:04:59:4c:ee:ff:66:68:2c:bc:
6d:2c:5d:b6:95:99:75:b2:f1:37:07:ae:a0:7d:a2:
2d:d2:bd:8b:63:8a:ec:14:8d:93:d9:20:13:d9:ce:
12:e7:7e:33:60:18:f4:9f:5c:42:8b:6f:04:8a:4f:
db:ea:b3:96:28:c1:b9:aa:6d:64:80:be:27:b3:25:
ba:aa:c8:9f:be:e3:8a:cd:6d:a7:52:d1:ed:35:9f:
4b:e9:28:4d:c0:6b:cd:61:cb:81:16:f9:31:c2:00:
98:b6:66:fc:7a:79:74:2f:e9:f9:98:14:b8:d9:2f:
da:b5:72:ef:8c:d5:c6:c4:c0:b1:dd:eb:0b:17:d3:
52:df:11:d5:67:5f:d6:46:8b:04:9e:d1:f2:6c:b9:
f3:aa:5a:c9:1e:d4:09:9b:f5:36:60:2f:50:d1:b5:
d5:0a:6e:30:88:04:e3:0b:22:80:f0:a1:f1:c9:9d:
b2:93:b2:4d:1f:c3:e4:8e:62:ec:bf:cb:74:63:30:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6F:E8:3C:A2:32:29:64:67:2C:42:D8:D0:F1:DE:C3:2E:EC:F7:E0
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:59:f1:54:56:c7:3d:d7:e8:64:ca:b1:81:0a:2e:3b:ce:90:
c9:6a:de:e6:6b:0f:13:9d:f1:73:95:37:d2:19:50:80:7d:02:
06:0e:e6:fc:dc:5d:51:00:78:a9:dd:6d:86:3f:02:43:e3:2b:
c4:5d:de:8f:55:6b:30:2b:27:c5:b8:3b:d0:d0:4c:4e:21:67:
6e:02:1c:b1:a7:ee:41:27:16:98:ae:26:76:a3:be:a0:b8:db:
eb:19:5d:76:93:83:0a:75:00:c5:71:3a:04:50:8b:4e:9c:42:
eb:22:a1:2c:fe:43:64:83:40:d1:cd:8f:66:cd:7b:3d:d4:ce:
15:7f:90:6d:f1:20:45:95:53:81:64:25:01:d0:4b:e8:66:c8:
2f:72:21:40:12:52:53:e9:01:5c:88:42:cf:4e:9b:5f:a6:26:
33:96:47:46:26:9b:f2:43:f5:27:b9:cb:90:ba:82:a8:50:7a:
3b:d5:53:4f:fe:f0:71:18:10:d6:4b:50:f8:b2:25:a9:5e:3e:
e0:f5:a3:1b:d0:60:f6:ca:7d:9f:c9:d4:72:ac:d9:20:0d:80:
37:ea:46:cf:8e:2a:b8:31:1e:e3:77:da:0c:f0:c4:f7:4c:de:
9b:ee:b2:80:0c:8d:4d:7a:0d:4a:5a:f5:e5:c2:5b:a3:a2:da:
0b:83:2e:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkt7GZKQwtch9eaIWhwSQQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjUwOTA5MTAwMTMxWhcNMjUwOTEwMTAwMTMxWjAzMTEwLwYDVQQD
EygxMDZmZTgzY2EyMzIyOTY0NjcyYzQyZDhkMGYxZGVjMzJlZWNmN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiti2qc+OEyk3+u1Q0ngBqorlaIja
68JuDgr4KvRcZYKtKs9fybUPgTm9ltRj5OQZ60F5EJT4RPlh7d49BUukfD4EWUzu
/2ZoLLxtLF22lZl1svE3B66gfaIt0r2LY4rsFI2T2SAT2c4S534zYBj0n1xCi28E
ik/b6rOWKMG5qm1kgL4nsyW6qsifvuOKzW2nUtHtNZ9L6ShNwGvNYcuBFvkxwgCY
tmb8enl0L+n5mBS42S/atXLvjNXGxMCx3esLF9NS3xHVZ1/WRosEntHybLnzqlrJ
HtQJm/U2YC9Q0bXVCm4wiATjCyKA8KHxyZ2yk7JNH8PkjmLsv8t0YzBdbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBv6DyiMilkZyxC2NDx3sMu7PfgMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1nxVFbH
PdfoZMqxgQouO86QyWre5msPE53xc5U30hlQgH0CBg7m/NxdUQB4qd1thj8CQ+Mr
xF3ej1VrMCsnxbg70NBMTiFnbgIcsafuQScWmK4mdqO+oLjb6xlddpODCnUAxXE6
BFCLTpxC6yKhLP5DZINA0c2PZs17PdTOFX+QbfEgRZVTgWQlAdBL6GbIL3IhQBJS
U+kBXIhCz06bX6YmM5ZHRiab8kP1J7nLkLqCqFB6O9VTT/7wcRgQ1ktQ+LIlqV4+
4PWjG9Bg9sp9n8nUcqzZIA2AN+pGz44quDEe43faDPDE90zem+6ygAyNTXoNSlr1
5cJbo6LaC4Mu8A==
-----END CERTIFICATE-----
Generated at Tue Sep 9 11:30:06 2025 by rpki-client