Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: EdDvBtIDWswo91Jv8TbgypM7DMGIKNQm8tMQFavFeuA=
Subject key identifier: C7:EE:1E:61:B2:6D:59:C9:31:81:B9:F2:E4:A5:0E:04:AA:F2:03:96
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 01993191BA87BC336500740823E6CAEB172C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 1664
Signing time: Wed 10 Sep 2025 03:00:57 +0000
Manifest this update: Wed 10 Sep 2025 03:00:57 +0000
Manifest next update: Thu 11 Sep 2025 03:00:57 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: h3YxUcs1vJs8hzqHZ+DLr71JHHbEtxrPa3wKFffhRVI=)
2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=)
3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=)
4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:ba:87:bc:33:65:00:74:08:23:e6:ca:eb:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Sep 10 03:00:57 2025 GMT
Not After : Sep 11 03:00:57 2025 GMT
Subject: CN=c7ee1e61b26d59c93181b9f2e4a50e04aaf20396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:55:e0:48:0b:f1:79:be:a2:67:aa:bf:54:
09:e7:65:8f:69:b7:e1:cc:f9:5d:41:63:66:3b:7b:
4b:95:96:26:9e:b5:0e:f0:b2:ea:5c:aa:b1:59:cd:
ae:08:ae:0a:9f:4e:e4:78:b5:3d:9f:5f:e3:e1:b6:
39:78:67:8f:a0:30:c7:b7:53:45:e5:2e:a2:47:06:
f3:ca:63:1c:dd:ca:e1:94:8d:fb:b3:cf:64:e6:58:
03:f2:84:91:09:bc:49:8c:78:da:d4:88:e4:26:1c:
7b:b3:e9:8e:23:2a:27:60:3f:bd:48:d3:93:d5:f7:
db:4a:de:c0:b6:7f:80:7e:3f:b3:3a:b6:27:09:05:
c6:1f:04:aa:d0:9b:76:d5:0b:94:7b:83:db:4c:6e:
15:97:34:f6:db:dd:a4:55:04:2c:10:bf:a9:48:7d:
36:d6:47:11:d8:53:23:da:3e:29:cb:40:89:d5:4b:
e2:61:cf:77:93:61:80:63:a8:ff:70:0e:aa:b6:2f:
9b:b9:61:61:ac:c6:cf:f7:a7:79:47:80:3c:a8:24:
f4:84:99:4b:b9:a4:a6:28:e6:90:68:c3:30:31:02:
b3:e7:7f:09:87:99:95:e9:48:25:c0:d1:b5:47:11:
ff:1f:9b:44:37:b9:22:67:d5:94:98:b2:9f:53:e2:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EE:1E:61:B2:6D:59:C9:31:81:B9:F2:E4:A5:0E:04:AA:F2:03:96
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b4:27:60:bd:6c:2d:4f:af:56:59:ef:99:dd:bf:e4:00:dd:
85:98:45:7d:2e:6a:45:67:05:0c:c3:c1:75:ab:a3:5b:a2:db:
63:92:52:ee:28:5f:44:7b:8d:ed:c6:72:58:07:82:05:b3:84:
cd:96:f3:2a:46:7e:2f:fe:f5:fd:40:51:23:4e:b7:2a:8e:7f:
cc:48:9d:44:f4:70:59:1e:d0:3a:ea:1a:f9:27:49:c4:be:ec:
74:a0:d3:1b:8c:5b:0b:60:f2:d6:28:88:12:a4:dd:98:40:ff:
cf:91:a4:ef:a1:27:ea:c3:a7:b6:6f:54:b6:6d:74:f7:b4:d9:
08:fb:95:88:b0:7b:f5:ef:da:45:f4:59:d1:89:74:6c:ec:ad:
f8:ca:ae:3a:15:5c:c4:d2:d5:c1:56:df:a7:54:cb:c3:a5:fd:
29:2b:e6:e9:0f:cc:7a:08:c5:6c:4f:e4:e6:32:68:6e:c8:0e:
55:7b:52:c7:7e:96:52:c7:16:5f:73:85:cc:bf:5e:25:03:5e:
f3:e2:97:2f:55:71:41:31:1a:0b:22:19:ee:4c:de:5c:53:92:
c0:78:a2:b5:0f:30:4a:7b:64:5d:c5:82:34:77:7b:bb:a2:69:
97:ed:52:56:6b:fd:b0:d9:be:d3:95:4c:7e:18:d7:10:32:8d:
20:28:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:26:53 2025 by rpki-client