Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: 2tHaBokw0fGo3BqWuKg7e6u+hTJzsm+kze7zdqvowv8=
Subject key identifier: BB:09:0A:13:14:0F:43:44:A7:E7:14:DF:97:F3:5F:0E:A3:88:EF:A8
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0197469DF4B5823F62601941C05AE2234F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:00:46 +0000
Manifest this update: Fri 06 Jun 2025 19:00:46 +0000
Manifest next update: Sat 07 Jun 2025 19:00:46 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: NsDAhJ5l9cnZ/QZxgdZ6xdg7P1Abdu77KGGLPHe+soM=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:f4:b5:82:3f:62:60:19:41:c0:5a:e2:23:4f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jun 6 19:00:46 2025 GMT
Not After : Jun 7 19:00:46 2025 GMT
Subject: CN=bb090a13140f4344a7e714df97f35f0ea388efa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:8a:38:8a:9d:54:a2:1e:5f:55:6e:a2:99:
c0:d9:01:3c:51:e4:0e:a0:3b:9f:f0:a1:56:93:98:
26:64:39:1d:d8:41:f1:8c:92:60:5c:a8:8c:07:9d:
2f:6f:7e:1b:2c:1a:e6:d6:aa:3e:78:47:76:53:65:
c7:0c:2f:24:70:80:52:44:9e:0e:95:19:da:73:7d:
83:ab:8f:f5:55:18:64:fe:7a:ba:1a:63:b3:66:18:
74:70:c8:0f:68:d7:32:68:df:6c:28:f0:00:cb:97:
39:45:b4:38:64:97:ed:96:00:94:d2:af:3b:27:38:
e8:bd:ce:e8:a7:78:a8:8f:fc:23:3b:9f:d3:aa:76:
c6:63:8d:17:ef:1b:fa:dc:98:0c:cd:82:7c:1a:06:
63:f1:e4:52:a8:44:6c:6e:0b:1a:5e:06:a9:70:b3:
df:e3:bc:a4:6d:1a:f9:4c:c0:49:16:03:ca:2c:8e:
b7:04:92:54:20:c9:0f:02:14:f1:96:2a:09:ab:4b:
81:fc:38:b0:44:58:aa:6c:ba:3a:e6:90:5e:d8:99:
a7:14:33:ea:f4:d2:98:cc:0d:d3:19:5f:5e:7d:c5:
b8:a5:50:1f:78:bc:b3:5d:f3:4e:55:d6:89:6c:68:
65:13:53:21:87:b8:99:b3:67:54:fa:ee:42:fb:83:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:0A:13:14:0F:43:44:A7:E7:14:DF:97:F3:5F:0E:A3:88:EF:A8
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9b:86:69:19:2e:bc:81:f5:b2:ff:e5:f7:a7:2d:b4:6f:6a:
3e:bf:fa:df:1b:50:7a:02:8e:bd:c2:5b:10:2c:ce:94:d7:3c:
da:48:2d:1d:31:37:b1:32:fa:1e:64:dc:bc:aa:23:5c:50:4d:
03:15:9c:5d:5a:41:63:c4:47:f0:20:00:0c:7c:78:b1:cc:e9:
98:a5:d1:a4:75:5a:f4:34:70:f9:d1:8e:d1:d2:27:f0:79:b1:
b7:16:bf:71:03:f6:2c:08:32:6f:f4:fa:8a:d3:2c:ef:eb:94:
b7:a5:36:07:d5:80:ee:21:50:64:1a:07:6d:66:6e:f6:3e:39:
db:26:eb:d3:45:1c:09:10:32:a9:97:2e:2f:f4:79:43:e4:ff:
08:20:ea:6a:3d:fb:22:69:2d:45:c3:2d:99:0f:59:26:40:5f:
e8:5a:71:e0:81:a3:6a:fe:be:ac:1b:02:8e:c6:26:4b:ec:2a:
70:4b:f0:fd:72:d2:fc:ad:95:d3:64:23:c1:e8:54:24:0c:bf:
db:07:44:79:30:06:82:9d:44:2e:98:e3:95:de:1b:41:54:53:
d0:62:fe:53:db:e8:0e:b8:9f:e3:62:1b:8d:52:c6:6a:b5:01:
55:97:49:d6:61:7e:fd:a9:20:08:de:33:20:a0:0a:80:85:8f:
34:22:ef:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnfS1gj9iYBlBwFriI08DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj
OTNiODAwHhcNMjUwNjA2MTkwMDQ2WhcNMjUwNjA3MTkwMDQ2WjAzMTEwLwYDVQQD
EyhiYjA5MGExMzE0MGY0MzQ0YTdlNzE0ZGY5N2YzNWYwZWEzODhlZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5+KOIqdVKIeX1VuopnA2QE8UeQO
oDuf8KFWk5gmZDkd2EHxjJJgXKiMB50vb34bLBrm1qo+eEd2U2XHDC8kcIBSRJ4O
lRnac32Dq4/1VRhk/nq6GmOzZhh0cMgPaNcyaN9sKPAAy5c5RbQ4ZJftlgCU0q87
Jzjovc7op3ioj/wjO5/TqnbGY40X7xv63JgMzYJ8GgZj8eRSqERsbgsaXgapcLPf
47ykbRr5TMBJFgPKLI63BJJUIMkPAhTxlioJq0uB/DiwRFiqbLo65pBe2JmnFDPq
9NKYzA3TGV9efcW4pVAfeLyzXfNOVdaJbGhlE1Mhh7iZs2dU+u5C+4PzrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsJChMUD0NEp+cU35fzXw6jiO+oMB8GA1UdIwQY
MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt
NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll
LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpuGaRku
vIH1sv/l96cttG9qPr/63xtQegKOvcJbECzOlNc82kgtHTE3sTL6HmTcvKojXFBN
AxWcXVpBY8RH8CAADHx4sczpmKXRpHVa9DRw+dGO0dIn8Hmxtxa/cQP2LAgyb/T6
itMs7+uUt6U2B9WA7iFQZBoHbWZu9j452ybr00UcCRAyqZcuL/R5Q+T/CCDqaj37
ImktRcMtmQ9ZJkBf6Fpx4IGjav6+rBsCjsYmS+wqcEvw/XLS/K2V02QjwehUJAy/
2wdEeTAGgp1ELpjjld4bQVRT0GL+U9voDrif42IbjVLGarUBVZdJ1mF+/akgCN4z
IKAKgIWPNCLvmA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:21 2025 by rpki-client