Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: 1jkQbYAa8JLQ6/pCvTV2+bU4/7f8tV1JagNOuoG3atQ=
Subject key identifier: 28:25:D0:5B:1D:0B:1C:0E:8D:46:64:A4:D6:EE:5B:48:9D:D3:C0:4C
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 01993492450F0853A359E29860F5458764C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 154E
Signing time: Wed 10 Sep 2025 17:00:25 +0000
Manifest this update: Wed 10 Sep 2025 17:00:25 +0000
Manifest next update: Thu 11 Sep 2025 17:00:25 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: WwTM0w7RSuaO7Sr0Pm+a9HVHunVyA3gL7MLO4I6E+Jo=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:45:0f:08:53:a3:59:e2:98:60:f5:45:87:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Sep 10 17:00:25 2025 GMT
Not After : Sep 11 17:00:25 2025 GMT
Subject: CN=2825d05b1d0b1c0e8d4664a4d6ee5b489dd3c04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:8d:e2:2b:5d:24:9b:ad:89:de:9f:5a:80:
1c:70:dc:e2:bf:76:f2:b3:44:53:8d:b2:76:7e:a4:
ec:16:b8:02:5b:0a:01:1f:7d:fc:6a:b9:de:e3:6f:
a1:a4:73:5f:2e:6a:b4:be:49:54:47:a6:30:ca:f0:
d7:80:f5:35:e9:84:01:13:15:ba:48:d4:5c:01:7e:
0c:c6:0d:12:6d:d1:2c:f4:0a:35:88:ff:a7:5e:84:
4f:a5:3e:e2:3f:d2:d4:4b:5e:5c:4c:06:54:fd:36:
be:4b:27:81:fa:b3:92:f9:4a:96:a8:51:c7:47:6d:
27:c2:1f:9b:48:9d:4e:2c:24:11:33:77:d2:fb:ba:
d7:ef:d0:e1:98:ff:04:af:ab:34:a4:6e:56:34:b5:
b1:4c:0b:5d:ce:8e:ad:8f:b0:19:07:3c:b2:f5:a7:
8a:81:78:8e:c5:4b:b3:f9:c7:15:b4:2f:61:20:11:
3e:b1:e7:36:63:ce:6b:e8:d6:6b:25:48:dd:4b:67:
e7:98:9b:e2:8a:b6:c2:9e:49:5e:d8:85:81:6d:5a:
0b:b3:16:4d:4b:b9:fe:32:4b:8b:dc:63:e6:8b:db:
b7:b6:86:a0:79:31:0e:35:a8:0a:15:08:7e:84:d4:
36:e4:2f:ed:2b:94:7f:b9:c7:19:fa:ae:b3:6e:e2:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:D0:5B:1D:0B:1C:0E:8D:46:64:A4:D6:EE:5B:48:9D:D3:C0:4C
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:59:90:47:38:56:0e:4d:f5:46:21:72:b3:33:ca:10:bc:
5c:20:c6:cb:a5:21:ce:0f:b9:67:b7:b4:4f:26:35:44:38:d6:
ac:50:09:62:9f:62:a8:c1:eb:e8:a7:1b:a9:75:75:35:39:f1:
75:3e:3d:bf:d3:de:03:c2:9d:cf:21:3e:b0:43:77:c4:c6:09:
63:f0:04:78:25:75:ed:67:db:2d:45:20:1a:00:c9:b1:8c:3f:
0b:5e:0b:8e:c8:d7:ce:5e:24:9b:5c:2a:f4:2f:08:d5:53:ed:
b8:df:65:ca:a4:aa:1a:f6:96:c6:41:44:73:bc:f3:b3:c4:0a:
a9:e7:95:0d:65:77:41:35:25:1e:ff:ba:c4:3c:19:95:a7:98:
5f:a8:4d:dd:0c:1d:83:46:45:cc:4f:ed:1c:28:b7:00:b3:5c:
6c:68:60:32:9f:81:23:2f:50:70:67:31:2b:5c:44:8f:d8:e1:
71:e9:73:ae:ab:6d:f4:aa:32:62:d7:55:7c:17:62:5a:44:5e:
16:70:96:79:75:fc:26:13:5f:ae:dc:53:6f:fe:8c:23:7d:dc:
cb:ae:2d:70:62:b2:41:41:dc:da:25:8f:27:5a:ce:fe:37:69:
de:4c:2e:fc:3c:32:15:a4:96:1c:d9:96:2b:91:10:10:cf:86:
24:d7:0f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0kkUPCFOjWeKYYPVFh2TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk
NmNkMGUwHhcNMjUwOTEwMTcwMDI1WhcNMjUwOTExMTcwMDI1WjAzMTEwLwYDVQQD
EygyODI1ZDA1YjFkMGIxYzBlOGQ0NjY0YTRkNmVlNWI0ODlkZDNjMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zWN4itdJJutid6fWoAccNziv3by
s0RTjbJ2fqTsFrgCWwoBH338arne42+hpHNfLmq0vklUR6YwyvDXgPU16YQBExW6
SNRcAX4Mxg0SbdEs9Ao1iP+nXoRPpT7iP9LUS15cTAZU/Ta+SyeB+rOS+UqWqFHH
R20nwh+bSJ1OLCQRM3fS+7rX79DhmP8Er6s0pG5WNLWxTAtdzo6tj7AZBzyy9aeK
gXiOxUuz+ccVtC9hIBE+sec2Y85r6NZrJUjdS2fnmJviirbCnkle2IWBbVoLsxZN
S7n+MkuL3GPmi9u3toageTEONagKFQh+hNQ25C/tK5R/uccZ+q6zbuJAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgl0FsdCxwOjUZkpNbuW0id08BMMB8GA1UdIwQY
MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt
OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi
LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiFZkEc4
Vg5N9UYhcrMzyhC8XCDGy6Uhzg+5Z7e0TyY1RDjWrFAJYp9iqMHr6KcbqXV1NTnx
dT49v9PeA8KdzyE+sEN3xMYJY/AEeCV17WfbLUUgGgDJsYw/C14LjsjXzl4km1wq
9C8I1VPtuN9lyqSqGvaWxkFEc7zzs8QKqeeVDWV3QTUlHv+6xDwZlaeYX6hN3Qwd
g0ZFzE/tHCi3ALNcbGhgMp+BIy9QcGcxK1xEj9jhcelzrqtt9KoyYtdVfBdiWkRe
FnCWeXX8JhNfrtxTb/6MI33cy64tcGKyQUHc2iWPJ1rO/jdp3kwu/DwyFaSWHNmW
K5EQEM+GJNcPcQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:31 2025 by rpki-client