Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: 7AvfnVFmnUQ2j48KjCvxSt2SpptOTygxGKUIW5a5o70=
Subject key identifier: A9:DA:B7:C1:B1:25:DB:94:09:14:D8:7E:4A:DE:FA:7F:DF:A1:92:2E
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 01976A05F8D3F80DE989AB7E36AE7B6AFDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 11DB
Signing time: Fri 13 Jun 2025 16:01:05 +0000
Manifest this update: Fri 13 Jun 2025 16:01:05 +0000
Manifest next update: Sat 14 Jun 2025 16:01:05 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: yHoZjtE8zX/9JcHVg2BXwfQKvHrl74aZ4aCfecLMM2M=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:f8:d3:f8:0d:e9:89:ab:7e:36:ae:7b:6a:fd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jun 13 16:01:05 2025 GMT
Not After : Jun 14 16:01:05 2025 GMT
Subject: CN=a9dab7c1b125db940914d87e4adefa7fdfa1922e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:91:c7:bc:4f:17:7d:31:d8:7c:b1:0e:a6:
5f:8a:53:82:a1:a6:b3:32:a4:de:2c:96:ff:ae:a5:
a6:1c:20:03:01:4c:82:55:80:b5:35:1d:95:13:98:
ba:38:be:27:7e:ac:08:9a:ba:37:6b:25:d3:14:c4:
c5:09:c9:09:90:25:56:17:d8:35:31:6c:b6:dc:27:
0c:3e:cc:6c:ad:46:dd:b2:2c:27:65:27:6c:63:cd:
d3:34:0e:d4:58:e6:67:c5:a3:35:d2:03:c4:b0:e1:
78:ff:de:2a:c1:32:de:90:ad:15:a5:2c:bc:d3:51:
de:14:72:cc:70:3a:3b:1e:6b:be:d1:3d:cc:d9:07:
88:04:7e:73:d7:e8:17:fb:69:e5:ad:cb:65:6e:a6:
c2:2d:b9:8c:c0:64:7d:b4:3b:4c:e3:80:41:49:7e:
fe:84:4b:e8:79:24:d6:aa:99:f5:b9:cf:0b:59:12:
8a:cd:90:e7:85:96:96:b4:ca:67:fe:02:f4:51:a2:
af:42:e4:9a:6f:90:c2:55:74:08:62:d5:fa:4a:08:
f9:81:12:e8:90:40:1b:5d:ab:fc:1b:bc:8e:fa:f1:
41:1b:69:74:9f:6e:bd:24:24:b1:a5:85:c0:87:88:
01:fc:75:cd:d3:a7:9f:f1:6b:3f:c7:c3:3b:6c:87:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:B7:C1:B1:25:DB:94:09:14:D8:7E:4A:DE:FA:7F:DF:A1:92:2E
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:02:90:49:27:ac:bc:47:a7:03:bc:2f:ad:a6:39:f8:cf:
45:00:b8:1c:c2:4b:62:c8:72:fa:74:8e:88:bd:65:8f:50:60:
71:37:47:06:5c:36:e9:6f:0d:6c:c8:83:d0:b5:71:74:93:26:
5f:5e:66:c5:9a:3f:15:1f:6f:ff:91:d0:b9:17:f0:bb:f5:9a:
fe:46:05:89:63:69:de:23:51:a8:79:e6:0d:82:e2:49:e8:15:
08:22:e2:82:65:90:7c:3b:48:32:0c:13:66:4b:60:98:95:7f:
6a:73:66:b8:dc:0a:1e:15:c7:52:f2:39:ab:ea:f1:40:21:bb:
b0:da:14:f7:b1:d1:89:55:d5:b9:e5:17:5a:1a:ef:88:88:aa:
f6:86:14:73:8e:1b:df:3f:0c:fe:4f:38:9e:9d:88:89:67:e7:
50:eb:cb:3d:a3:00:45:a4:bb:07:58:73:92:0c:58:15:66:d9:
b9:55:38:53:01:ea:c7:63:64:ba:4f:88:3f:da:64:69:2a:68:
9b:fb:4c:38:ab:26:5f:b3:d7:cb:02:38:0a:84:25:85:a1:c1:
fa:bd:50:03:7f:9e:5d:3f:03:af:5c:1a:2f:0d:03:ee:ce:66:
f6:52:30:5a:c1:d3:21:89:1c:7a:9b:78:1f:cd:d5:33:30:8c:
e1:d9:dc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:43 2025 by rpki-client