Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: ZQzAplm3fnfArApPOyXo/r6iD/olM3LP0dqwWWUUzUY=
Subject key identifier: 85:31:2E:66:22:1E:C1:1D:A7:64:DB:B9:8B:E2:0D:27:3F:53:46:D9
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019A725CB109446AA4CC83F9DA15722A3979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 10B5
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: XQn82tDj0IOYEhp1thNnLfPUv0fu/CJRQGTMM046/Rc=)
2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:09:44:6a:a4:cc:83:f9:da:15:72:2a:39:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=85312e66221ec11da764dbb98be20d273f5346d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:1a:33:a4:04:39:a5:e9:4b:47:2e:15:c7:
4b:8b:74:b5:9b:71:42:2b:e0:cd:9d:88:38:7b:18:
72:1a:1d:7b:c5:00:aa:66:5d:b1:ab:5b:24:e8:61:
f7:db:d6:52:4c:83:28:f6:81:0e:22:a4:8a:0e:ba:
2f:6b:06:2a:ad:bd:cd:d1:a1:fe:e5:a4:e1:f3:18:
8b:0b:5c:c0:6d:07:bc:e8:39:1e:c1:1f:69:a7:f5:
66:6c:ae:1f:dd:1b:42:31:3a:71:a9:51:a1:3a:b9:
e6:b3:44:a3:57:1b:fe:a4:f6:f9:bc:31:5d:b9:4e:
86:d1:15:f9:ab:ed:cb:79:8b:91:98:b0:a1:2c:b9:
ca:dc:49:c2:6b:73:9d:96:85:9d:c8:a7:a5:11:7d:
0e:66:c2:ed:aa:9a:77:ca:93:34:f3:66:9b:bc:0c:
13:8d:fa:cd:37:e4:fe:f9:78:87:f3:52:68:df:3b:
fa:de:d8:2a:30:be:09:5d:f3:76:a6:16:0d:de:53:
2e:44:0e:4b:77:55:e9:64:14:d7:8c:cc:df:4d:f8:
84:15:a7:6c:76:a8:d1:20:72:fd:c1:dd:24:9e:03:
66:39:5b:5b:33:dc:7e:80:ed:0c:c5:e3:65:86:2b:
89:b6:89:3a:19:0c:32:13:37:cf:86:3c:b0:02:5e:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:2E:66:22:1E:C1:1D:A7:64:DB:B9:8B:E2:0D:27:3F:53:46:D9
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:d7:6b:5e:b4:f5:7a:28:0b:20:1f:ae:b1:ec:a3:ea:4b:
d0:d4:9f:f1:71:f7:e3:4f:ab:f7:0b:ec:04:3a:4e:af:a8:22:
b9:a7:38:7b:ea:bd:c3:fa:c4:56:05:23:a6:fa:bf:3e:71:7b:
6d:45:5d:fd:e9:74:2c:b9:bb:49:fb:e1:e9:92:88:cf:8b:e4:
9e:78:15:0f:92:73:e0:34:41:2f:64:2a:fd:f9:25:54:bd:02:
23:b7:62:42:fe:3e:51:58:cb:0e:95:c8:ec:4c:00:43:28:4e:
d9:75:0b:3e:a4:1d:b2:0e:f5:c7:cb:7c:d9:5f:4f:c9:ef:7e:
83:15:26:e0:2a:79:70:e7:56:20:7a:68:b3:61:dd:e0:7c:ab:
58:4a:44:23:58:3b:42:d2:80:60:91:f3:40:1d:15:38:8c:19:
9e:ae:85:5f:f6:b0:e3:b5:6e:88:9e:11:fe:5b:83:5c:d8:7f:
ef:6b:1f:97:8c:38:ef:2b:ef:fd:9f:7d:eb:75:79:2d:ef:aa:
08:30:e9:40:8f:a0:9a:a4:01:b1:5e:c1:09:cf:01:71:de:88:
97:2a:7e:22:77:10:91:64:a9:ca:8f:e3:fd:cb:6c:51:81:ff:
43:99:59:29:98:1d:32:df:aa:9d:c4:e1:d2:6b:5e:bc:23:45:
6d:34:34:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXLEJRGqkzIP52hVyKjl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjUxMTExMTAwMTA4WhcNMjUxMTEyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg4NTMxMmU2NjIyMWVjMTFkYTc2NGRiYjk4YmUyMGQyNzNmNTM0NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEkaM6QEOaXpS0cuFcdLi3S1m3FC
K+DNnYg4exhyGh17xQCqZl2xq1sk6GH329ZSTIMo9oEOIqSKDrovawYqrb3N0aH+
5aTh8xiLC1zAbQe86DkewR9pp/VmbK4f3RtCMTpxqVGhOrnms0SjVxv+pPb5vDFd
uU6G0RX5q+3LeYuRmLChLLnK3EnCa3OdloWdyKelEX0OZsLtqpp3ypM082abvAwT
jfrNN+T++XiH81Jo3zv63tgqML4JXfN2phYN3lMuRA5Ld1XpZBTXjMzfTfiEFads
dqjRIHL9wd0kngNmOVtbM9x+gO0MxeNlhiuJtok6GQwyEzfPhjywAl6FpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUxLmYiHsEdp2TbuYviDSc/U0bZMB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx7Xa160
9XooCyAfrrHso+pL0NSf8XH340+r9wvsBDpOr6giuac4e+q9w/rEVgUjpvq/PnF7
bUVd/el0LLm7Sfvh6ZKIz4vknngVD5Jz4DRBL2Qq/fklVL0CI7diQv4+UVjLDpXI
7EwAQyhO2XULPqQdsg71x8t82V9Pye9+gxUm4Cp5cOdWIHpos2Hd4HyrWEpEI1g7
QtKAYJHzQB0VOIwZnq6FX/aw47VuiJ4R/luDXNh/72sfl4w47yvv/Z9963V5Le+q
CDDpQI+gmqQBsV7BCc8Bcd6Ilyp+IncQkWSpyo/j/ctsUYH/Q5lZKZgdMt+qncTh
0mtevCNFbTQ0hw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:10 2025 by rpki-client