Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: gmCh7H/OOJWEjFKRiOIfPX5pKPoZlr/FVQNnSBDcLJY=
Subject key identifier: 66:79:AE:50:A7:1A:6B:C8:D0:64:86:89:FA:24:88:C3:31:9E:FC:0A
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01974B1F20B1A5B389028CF76643F84124C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 0F13
Signing time: Sat 07 Jun 2025 16:00:20 +0000
Manifest this update: Sat 07 Jun 2025 16:00:20 +0000
Manifest next update: Sun 08 Jun 2025 16:00:20 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: ZKt+YV0QEIY4nCeah7syqcoaaeuav0m9G2I1Z/qJkjg=)
2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:20:b1:a5:b3:89:02:8c:f7:66:43:f8:41:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jun 7 16:00:20 2025 GMT
Not After : Jun 8 16:00:20 2025 GMT
Subject: CN=6679ae50a71a6bc8d0648689fa2488c3319efc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:fb:3f:a5:ee:15:05:6e:bf:1e:04:34:e6:
b5:51:89:65:08:dd:80:d1:4e:05:16:4b:87:ca:4e:
82:38:32:33:cb:2d:c1:bf:5f:34:16:b5:52:e7:7d:
f9:0c:f2:d4:0d:d8:b9:2c:dd:0b:c1:27:aa:74:5f:
58:69:6d:57:80:87:cd:12:3d:54:f6:40:c1:2f:7c:
35:f3:af:26:f7:3e:b6:e9:20:65:fa:8b:d3:7c:b0:
b1:59:b1:2f:37:e1:d1:1e:80:fe:7f:a4:5a:3f:47:
33:ea:f8:63:98:5a:9d:9c:bf:d5:e2:b6:3d:ba:61:
76:8c:dd:93:4e:54:7c:3b:49:ec:e3:7e:1e:cd:c5:
c1:63:6f:5d:b6:82:37:a8:7e:43:c9:5f:a5:e7:6f:
07:84:7a:c4:02:a0:a7:fe:37:ca:c1:8d:e7:14:61:
3a:27:9d:21:ad:78:0e:72:a7:5f:49:0b:b8:91:6f:
27:be:eb:76:41:6e:2e:7c:5f:86:ff:0d:81:94:b2:
96:65:04:4a:54:4b:20:42:55:05:0b:44:f9:8f:40:
d6:bf:db:9d:f2:6f:76:86:11:04:5d:c3:d7:76:51:
dd:14:33:88:c6:5a:1a:ee:98:88:ad:c1:54:4d:b6:
c1:49:ac:e3:6b:51:36:3a:46:58:b8:b2:1f:77:33:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:AE:50:A7:1A:6B:C8:D0:64:86:89:FA:24:88:C3:31:9E:FC:0A
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:8f:4e:f2:fc:f2:87:31:44:86:1b:df:34:94:f8:ee:69:
b7:17:b3:62:8d:32:45:08:22:a3:af:f8:47:2f:8e:64:36:fd:
7a:4b:90:98:dd:9d:77:09:e3:6c:18:3f:b6:a0:11:34:36:57:
de:80:62:9e:9b:eb:de:79:ea:02:7b:0f:32:6c:14:a3:f0:de:
90:50:81:df:5e:0e:70:c9:b9:61:a8:c0:ee:f0:88:ff:67:7e:
4f:3b:81:2a:95:52:10:a4:bd:92:e6:e1:8c:ba:34:2f:63:38:
9d:cf:1b:8b:39:57:7e:d0:4c:a0:3d:ba:b4:09:e4:e8:26:f9:
40:6d:33:32:fa:4e:58:fa:b1:7a:b6:3e:64:4f:83:75:74:49:
4b:36:a1:18:cc:ee:cd:f8:aa:00:48:49:e7:3e:5d:5f:7b:17:
49:8b:a7:44:d2:65:c2:c5:4e:d2:7b:cb:30:a2:b4:55:9c:9f:
8d:65:7a:fe:a2:6c:40:a1:f0:99:63:53:52:51:60:b9:98:d1:
b6:0f:52:e5:b1:50:ab:79:ac:92:f5:d9:6f:fe:96:48:4d:e1:
15:5a:66:c1:ea:e5:a7:8b:d5:4e:99:34:31:49:a5:39:5b:f3:
a2:7a:3f:75:21:0b:da:12:4a:0a:5e:01:33:5d:38:2a:e6:77:
3c:b6:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:45:51 2025 by rpki-client