Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json)
Hash identifier: iD+cTZAW3jDMsx2GrazjqVfVtvITXJFrK7R3smVdsIU=
Subject key identifier: 7A:7A:9F:8B:62:58:44:A3:19:64:F5:A1:F9:06:A8:A8:ED:2D:B8:2D
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial: 019A4C6196F8DC8A4FDA6F957A75EEF41A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 01:00:55 +0000
Manifest this update: Tue 04 Nov 2025 01:00:55 +0000
Manifest next update: Wed 05 Nov 2025 01:00:55 +0000
Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: 5rr8IcdE9r7LPuP3p8Fm3n7ucUjphqK9BZEfrK3vWiw=)
2: 5OG6iGTbUMv4yreuCzltBDVdDTU.roa (hash: B8Cg7jxvmm1JBGJPeKqbsREjncwII7bdGdlW3Ml3/PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:96:f8:dc:8a:4f:da:6f:95:7a:75:ee:f4:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
Validity
Not Before: Nov 4 01:00:55 2025 GMT
Not After : Nov 5 01:00:55 2025 GMT
Subject: CN=7a7a9f8b625844a31964f5a1f906a8a8ed2db82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:69:9e:ac:d7:dd:2c:36:b4:dd:9f:6c:ef:
77:06:61:ad:69:aa:37:b1:2c:51:54:e7:ae:4d:4a:
6a:fb:88:fc:d4:20:8c:83:5c:b4:8b:97:07:58:bd:
43:b6:52:48:84:b1:56:17:f6:36:0f:4e:fb:2c:ac:
a1:b9:62:fb:03:f8:56:16:c6:92:10:81:1c:47:10:
39:e0:4c:3e:61:72:13:ae:08:62:ea:2a:1a:fd:50:
99:33:ba:ae:c9:3b:35:aa:e4:bf:d4:6b:c7:09:15:
14:a0:07:a4:b0:f7:55:a9:b4:a6:88:27:8f:e2:a7:
a0:af:9a:cd:c8:8f:8f:99:00:e6:a1:da:12:3b:59:
d9:90:5c:4c:35:a3:fc:22:3b:c2:6b:a6:61:87:84:
68:35:cd:01:fb:af:4e:11:c7:bf:af:bc:f2:31:86:
0e:2b:ec:da:64:4b:aa:99:e2:c1:98:a3:b6:db:30:
27:c2:ad:4d:3f:ac:67:02:5b:a3:0b:8c:69:64:52:
37:54:0f:48:44:ec:6f:72:17:04:66:52:94:25:0c:
16:91:c2:68:46:ce:57:6f:9b:cf:d9:37:79:d8:0f:
be:c4:b3:f4:cf:62:fa:5c:cb:df:93:53:ee:5b:20:
58:2b:3b:59:9f:b8:3c:29:5e:67:de:f1:66:6d:72:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:9F:8B:62:58:44:A3:19:64:F5:A1:F9:06:A8:A8:ED:2D:B8:2D
X509v3 Authority Key Identifier:
keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:61:44:2c:e2:6d:f3:93:9f:57:61:dd:7b:47:e9:11:ff:
8d:ee:a3:06:56:ff:8e:69:27:3c:1d:29:f9:6d:cb:10:6c:65:
80:c0:7e:d1:08:46:af:7e:2e:5d:8a:ab:47:f8:a6:d4:32:80:
bf:15:91:0a:6e:84:6a:e5:d2:3a:c7:69:aa:c9:49:16:32:03:
02:2e:5d:a3:b1:7e:4e:ce:6b:76:12:e5:07:92:ad:d8:14:4a:
ea:75:ba:eb:a9:13:09:1a:d4:20:9c:9b:c9:95:bf:9b:6a:34:
89:74:a1:34:a9:45:2a:c1:5b:48:42:97:31:5c:7e:a5:cb:da:
30:76:85:d2:bd:48:a0:0d:6c:62:ca:b2:a0:3c:c2:a4:aa:42:
1d:60:0a:c8:1d:60:b7:51:1a:d2:42:1e:f7:1c:3e:b0:97:78:
20:67:29:af:0f:78:21:dd:bd:89:6d:f2:72:95:4b:67:e1:ca:
cb:4e:2d:95:21:fd:1f:d4:db:d5:b3:76:c4:0a:ee:a5:22:1f:
be:1b:70:54:e3:33:bf:06:d1:5d:78:14:6b:10:ab:06:db:89:
b5:9e:38:ad:37:3d:ad:87:c8:ca:6c:c8:45:d2:cd:a1:29:04:
e5:91:b2:ef:05:17:f2:2d:b8:0d:2c:f7:71:f5:1b:b0:86:8a:
07:c8:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:03 2025 by rpki-client