Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: A6uTzsNjLkH+oc8VXjt9E5NDPz5K3mh3IqxD5vbBxD0=
Subject key identifier: C8:1A:3B:AE:E3:C1:25:DD:CE:FA:02:F7:4E:E2:9B:A9:0A:16:FA:CD
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019A209C5A7CB89FC138E675185DD5055999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 13:01:48 +0000
Manifest this update: Sun 26 Oct 2025 13:01:48 +0000
Manifest next update: Mon 27 Oct 2025 13:01:48 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: ve0c4WZkDBnY1ofnlSOXAAs2zbuAia8PNae8e9a5nK0=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:5a:7c:b8:9f:c1:38:e6:75:18:5d:d5:05:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Oct 26 13:01:48 2025 GMT
Not After : Oct 27 13:01:48 2025 GMT
Subject: CN=c81a3baee3c125ddcefa02f74ee29ba90a16facd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:4d:c1:02:71:a1:45:83:26:26:7d:0e:7f:
0a:a5:be:65:28:9d:8c:73:62:70:80:e0:17:5b:f6:
bc:0b:d4:27:56:d9:83:d3:bc:e3:9a:3e:4e:db:ef:
7c:f0:cc:4f:c2:c4:a4:6c:0f:be:e9:fa:4d:61:6d:
56:33:ac:3f:a1:69:76:31:82:a4:22:01:11:bc:ca:
eb:3f:81:58:48:e1:ad:09:aa:68:d0:6d:f8:64:c5:
9f:4c:bc:2b:b5:d6:b9:3e:26:02:49:c6:2e:f8:a2:
01:14:66:ec:74:2e:d1:fb:0c:58:c8:3d:e9:50:3d:
a9:af:fa:f5:db:df:9d:69:83:9f:65:93:33:1e:de:
fb:4f:4f:7d:0a:1e:5e:73:7b:f7:dc:b2:40:05:2b:
bf:38:b4:6f:6d:cf:2e:75:d9:61:fb:00:12:4a:64:
fe:c4:74:f4:55:00:52:77:5a:5b:29:79:00:34:b7:
53:1d:80:7d:4f:c9:3e:81:40:8b:27:32:e6:ea:1c:
81:2f:e8:e1:8e:a2:a1:b7:75:49:b3:02:cd:e7:c8:
4c:83:10:9d:e9:db:6c:47:f7:13:c8:b1:52:ec:f8:
ec:5f:6c:5d:33:9b:59:33:94:e0:a3:87:a6:88:20:
0f:a3:fc:6d:a1:f7:1d:08:fb:54:89:3c:75:12:24:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:3B:AE:E3:C1:25:DD:CE:FA:02:F7:4E:E2:9B:A9:0A:16:FA:CD
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:ff:97:65:da:1b:3f:e5:32:ec:40:bf:36:8b:9d:79:71:
2e:32:d9:6c:6a:5e:2f:7a:eb:7a:12:98:49:4c:1f:f9:a7:2b:
ce:dc:ea:b3:cf:63:44:d7:d0:47:e6:2f:9e:3f:1e:28:e4:15:
6e:01:79:03:d8:f7:cf:95:01:76:b6:ed:8e:12:fb:83:a5:3a:
ef:f0:6d:80:3e:47:29:81:df:74:3a:62:b4:26:e2:48:a4:83:
80:d7:9b:dc:4c:5d:1f:6e:69:b8:f1:95:89:67:0e:05:23:70:
07:7d:48:32:da:3b:ff:72:1c:5f:c0:44:4d:30:63:41:13:5f:
4f:a8:4a:98:b1:0e:3f:ab:8b:c2:e7:be:ff:27:59:d4:87:dd:
eb:73:89:f0:46:d7:ed:f5:6b:e8:df:e9:f1:8c:c1:e4:14:24:
ee:9c:45:e5:3b:ce:f6:6d:d3:68:ac:d5:d7:fd:6f:49:c1:f4:
29:b5:1d:87:0a:a9:47:4f:a3:a9:89:68:03:e4:9a:7f:a2:35:
b0:d2:45:12:b5:7c:ce:bc:4d:09:5c:8e:6c:79:ba:1c:25:63:
5e:a9:8f:0e:d2:ed:bd:e3:00:c0:ce:40:5c:19:b3:87:8d:f1:
6b:a7:dc:12:3e:fb:b7:44:dd:32:0f:9e:46:76:7a:d0:b4:99:
50:6d:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:49:51 2025 by rpki-client