
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: iXZcH+zI2lZ+r7nivfwuQ1SJyTJkowYmSyx0RKlZMgM=
Subject key identifier: 47:CB:21:8B:73:05:F2:96:A3:19:F2:F9:6F:E5:46:B9:C7:D1:71:16
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 01963F8BDCCB1AC7A56CED506A8FCDD9A14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 13C6
Signing time: Wed 16 Apr 2025 17:00:52 +0000
Manifest this update: Wed 16 Apr 2025 17:00:52 +0000
Manifest next update: Thu 17 Apr 2025 17:00:52 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: nQnUu9nPweoIWgNlOWKMRJGETFh/0HjZ+tJHqkZjNiQ=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:dc:cb:1a:c7:a5:6c:ed:50:6a:8f:cd:d9:a1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Apr 16 17:00:52 2025 GMT
Not After : Apr 17 17:00:52 2025 GMT
Subject: CN=47cb218b7305f296a319f2f96fe546b9c7d17116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:b9:71:51:db:a2:46:a5:06:e5:41:72:8e:
1c:4e:88:9e:87:eb:04:b5:d1:8d:f9:b5:f6:7c:b0:
f9:f5:93:3a:56:c2:b5:66:0b:cd:f3:6e:d3:b5:56:
17:99:19:31:c8:75:2b:b0:d6:ae:93:e5:42:e3:7c:
89:87:3b:d3:9d:b6:6f:d2:f3:44:1f:b0:17:e0:bd:
a5:5f:d6:c1:b5:00:a7:6e:49:56:86:1b:ae:30:13:
02:98:72:b5:f3:50:36:9e:be:86:19:5d:fd:1a:ca:
c0:6d:4d:b7:73:9b:07:c6:51:1e:45:a6:75:c1:86:
f7:2f:09:90:5c:ae:9f:1a:62:2e:9b:03:9b:db:b5:
23:d6:d5:49:94:e6:01:59:c0:79:db:06:9e:7c:71:
a0:7f:1a:6f:bb:12:8e:3d:96:fa:4d:88:0e:0d:14:
7b:86:60:dc:e4:da:7a:13:94:f5:47:5e:4d:a5:a2:
d4:4c:50:71:ad:f0:20:fe:68:93:95:71:5d:06:d4:
05:ae:d5:bc:61:d1:0a:44:5a:7a:57:88:d8:dc:ce:
15:99:38:b3:2c:bd:eb:ba:32:4d:c3:2e:9b:c2:af:
59:5f:2a:06:22:81:d1:92:1a:dd:98:ad:7d:6a:f6:
5f:7f:b3:b2:cf:2b:f6:99:85:27:6a:46:c9:30:46:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:21:8B:73:05:F2:96:A3:19:F2:F9:6F:E5:46:B9:C7:D1:71:16
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:96:5f:e1:51:07:3d:99:ac:52:79:b9:38:5a:91:9b:d6:20:
a8:07:e5:f4:8a:c1:ce:a4:df:6c:91:a8:01:10:87:30:2c:00:
82:95:bd:c5:b3:7f:8c:34:56:d8:11:98:c9:04:5d:9e:40:94:
20:80:40:c3:a6:ff:d8:1a:81:79:8c:a8:6d:6d:87:2a:d7:25:
52:09:76:a4:75:6c:b4:5f:42:9a:ec:f8:64:28:33:c5:a0:4b:
9d:44:f5:6f:9d:5c:5c:cd:90:01:da:14:23:e6:b0:90:d0:1e:
3f:96:92:f0:24:80:3f:85:32:89:c3:e2:83:65:97:07:1c:79:
94:30:d3:37:29:82:a2:8f:b3:fb:e7:a2:18:c2:b5:7c:6e:50:
3e:b5:51:0f:dd:cf:65:0e:12:87:17:11:fd:82:eb:4d:cc:dc:
8a:4b:fb:e3:f6:ac:8f:87:0a:b4:da:8f:61:59:c3:92:4d:9c:
5b:12:4b:3d:c1:9c:db:8f:18:4d:f7:1a:b6:78:3f:e2:f5:41:
2e:ba:9b:e7:8a:2e:42:fd:88:cf:4d:ee:c8:59:04:cc:f4:b7:
68:98:bb:56:08:f0:53:80:38:8d:ef:4a:3e:09:26:fb:7a:c7:
b6:66:bc:90:9a:08:96:a3:8c:2f:17:ae:af:64:03:83:23:d1:
21:3c:64:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i9zLGselbO1Qao/N2aFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk
NmNkMGUwHhcNMjUwNDE2MTcwMDUyWhcNMjUwNDE3MTcwMDUyWjAzMTEwLwYDVQQD
Eyg0N2NiMjE4YjczMDVmMjk2YTMxOWYyZjk2ZmU1NDZiOWM3ZDE3MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2S5cVHbokalBuVBco4cToieh+sE
tdGN+bX2fLD59ZM6VsK1ZgvN827TtVYXmRkxyHUrsNauk+VC43yJhzvTnbZv0vNE
H7AX4L2lX9bBtQCnbklWhhuuMBMCmHK181A2nr6GGV39GsrAbU23c5sHxlEeRaZ1
wYb3LwmQXK6fGmIumwOb27Uj1tVJlOYBWcB52waefHGgfxpvuxKOPZb6TYgODRR7
hmDc5Np6E5T1R15NpaLUTFBxrfAg/miTlXFdBtQFrtW8YdEKRFp6V4jY3M4VmTiz
LL3rujJNwy6bwq9ZXyoGIoHRkhrdmK19avZff7Oyzyv2mYUnakbJMEZkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfLIYtzBfKWoxny+W/lRrnH0XEWMB8GA1UdIwQY
MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt
OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi
LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5Zf4VEH
PZmsUnm5OFqRm9YgqAfl9IrBzqTfbJGoARCHMCwAgpW9xbN/jDRW2BGYyQRdnkCU
IIBAw6b/2BqBeYyobW2HKtclUgl2pHVstF9Cmuz4ZCgzxaBLnUT1b51cXM2QAdoU
I+awkNAeP5aS8CSAP4UyicPig2WXBxx5lDDTNymCoo+z++eiGMK1fG5QPrVRD93P
ZQ4ShxcR/YLrTczcikv74/asj4cKtNqPYVnDkk2cWxJLPcGc248YTfcatng/4vVB
Lrqb54ouQv2Iz03uyFkEzPS3aJi7VgjwU4A4je9KPgkm+3rHtma8kJoIlqOMLxeu
r2QDgyPRITxkvw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:08:51 2025 by rpki-client