Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: lLUevGU4d9mCb0DLor1QN+iMV2t+cV7pLjW6vWZvxLI=
Subject key identifier: D5:D0:9B:BB:DC:5A:BE:84:CD:0F:12:FD:FB:F5:2A:AA:FC:4E:EC:CD
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 01974A0CB733E5803C0BEBCF49F13359BCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 1450
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: iqEgOQ3ZSTdR0kXwOy10axjhPb2JKB7NDmfb8UOlX6w=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b7:33:e5:80:3c:0b:eb:cf:49:f1:33:59:bc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=d5d09bbbdc5abe84cd0f12fdfbf52aaafc4eeccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:2b:d2:08:36:59:33:15:cd:0c:85:a0:1d:
cb:d2:45:43:57:94:8a:fd:26:ab:85:72:bb:7d:69:
a0:af:62:af:6d:eb:21:65:7b:03:10:a9:43:90:53:
5e:c0:b3:0a:dc:97:05:e1:9e:5a:e0:c1:33:dc:a4:
c5:69:97:34:e7:f8:06:cd:e9:1f:f0:46:19:33:8b:
06:a8:76:c7:2c:e6:2e:36:d8:15:34:4c:ee:96:b3:
15:b0:24:db:1a:77:eb:71:9e:31:09:25:ef:17:b3:
2c:de:3b:ac:78:62:2d:0b:0e:96:7c:4f:e8:2e:b1:
c6:b7:03:91:be:e9:be:d0:37:19:8b:1f:a9:24:00:
dd:a6:c1:03:14:61:e0:6b:98:b6:40:65:27:ca:83:
ca:07:c6:d2:d2:4b:49:67:1f:f2:34:d5:a6:67:d6:
00:10:f1:2e:16:b7:e1:be:d2:c7:d8:b1:2f:6e:84:
70:51:ad:cb:ec:b5:4b:20:41:b1:95:79:ec:ec:7c:
06:9d:91:af:d9:e2:db:dd:03:0a:92:21:51:c6:18:
a9:f1:d3:16:b8:da:41:af:a3:14:bc:aa:9b:21:2a:
ce:91:36:3e:5e:b8:ad:a1:be:59:a1:36:15:19:fe:
ca:d6:a9:a4:0c:3e:fd:7d:af:75:1d:9d:52:1f:a5:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:9B:BB:DC:5A:BE:84:CD:0F:12:FD:FB:F5:2A:AA:FC:4E:EC:CD
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:30:b2:09:85:6f:a4:f1:83:cf:89:fb:0d:73:2a:41:06:
9c:3b:a3:f3:b9:48:40:67:bb:30:3d:8b:80:1f:a2:b0:25:61:
d4:6f:6d:cb:e7:a4:35:cc:17:9a:7b:3c:d9:9e:5c:9f:72:04:
79:e6:79:34:62:c7:d4:cf:29:9e:06:3c:23:a2:bb:7a:79:d7:
1f:ee:df:15:ac:d4:d3:90:0a:29:90:a6:07:9e:02:16:7a:94:
47:6f:9d:f0:36:8e:78:71:f4:1e:3d:6f:db:66:5b:ba:c6:9f:
bd:aa:b8:cf:f0:17:d6:4c:03:03:b0:9a:f7:51:8a:50:b0:7c:
26:05:5a:b8:0a:b1:f6:0f:7a:09:e8:6e:f5:32:d7:79:cf:8f:
a8:f8:08:c6:b4:96:63:c3:ba:46:1d:ca:e2:78:14:f0:8a:ca:
f4:c5:eb:04:e6:f7:6a:6c:6e:8b:fe:ee:b1:d9:22:b6:21:43:
43:14:e2:7e:25:de:9a:64:1f:cd:c8:a0:c0:e4:97:0b:c5:b2:
bf:4d:18:f9:73:dd:8f:52:fe:92:e3:5f:00:ad:93:04:d5:56:
67:76:89:88:83:3b:5a:36:91:fe:fc:55:e2:08:71:c7:b2:e0:
d4:41:68:a0:80:97:5d:b4:4e:36:d4:14:43:de:e6:b4:1e:38:
90:17:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:37 2025 by rpki-client