Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: jSOirmOb/2DVE1CFd77tnBJgjGT4Vvv1tf4v/wIBAGI=
Subject key identifier: 66:2D:4D:CA:91:3B:C8:D2:B1:B6:F3:27:E8:D0:28:60:87:E5:1D:BA
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019A51879E9D185FA8584D3795A5AD921AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 135C
Signing time: Wed 05 Nov 2025 01:00:33 +0000
Manifest this update: Wed 05 Nov 2025 01:00:33 +0000
Manifest next update: Thu 06 Nov 2025 01:00:33 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: p4v1fJhMdAN03maWr48JgwizJVguCkq+4Vxj9SSwIek=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9e:9d:18:5f:a8:58:4d:37:95:a5:ad:92:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Nov 5 01:00:33 2025 GMT
Not After : Nov 6 01:00:33 2025 GMT
Subject: CN=662d4dca913bc8d2b1b6f327e8d0286087e51dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:1f:22:93:a2:73:b4:68:f0:92:8b:85:95:
53:63:cc:f1:f3:cc:f0:7e:a5:04:e1:3e:b4:59:5b:
b3:86:a8:08:8f:89:8e:64:e4:32:1c:3f:57:13:51:
d3:6c:62:6a:57:48:25:bd:ed:fd:4b:9c:b5:39:ed:
81:07:55:ba:55:2c:c6:01:64:b0:ae:dc:8e:b8:09:
6b:7f:6e:dc:48:ef:37:3d:23:23:45:34:e2:29:20:
7f:a0:96:a8:fc:24:cb:6f:46:86:6d:14:62:fb:9d:
ab:09:80:ab:7e:f3:4a:d7:cf:d3:24:64:75:99:66:
26:65:43:ef:7a:d2:78:ba:75:6a:d4:6b:dd:bc:16:
30:ea:43:9a:cf:ec:74:0e:a4:ca:c9:b9:10:55:6e:
68:d0:98:bb:7d:28:41:f0:7a:97:1a:d8:aa:6f:79:
14:ea:83:76:50:a0:45:0d:a9:e4:56:05:fd:a4:d8:
b4:fe:f2:c7:b2:91:05:e2:e9:af:b7:5a:d7:df:14:
b1:0b:27:ab:b9:ea:03:45:8f:b5:ec:c2:65:82:a8:
0b:73:1c:e3:34:1d:72:5a:b3:be:42:fc:ac:5e:dd:
91:6f:4c:cc:05:b6:a5:45:b7:ea:cf:f8:60:25:ff:
23:0b:f1:e1:ab:cb:00:98:4a:dc:59:59:b1:cd:85:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:4D:CA:91:3B:C8:D2:B1:B6:F3:27:E8:D0:28:60:87:E5:1D:BA
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:76:8b:de:9d:18:ae:1c:58:81:6e:10:27:79:f8:b3:e7:
13:c6:59:b3:3c:3b:ee:4c:f0:13:ba:2b:63:db:14:4f:18:9e:
e1:e3:c4:3d:48:27:f7:a6:4a:48:03:f2:b2:4e:17:7f:49:d5:
e6:54:f4:1c:bf:99:73:f9:a9:51:62:c8:d1:17:e2:20:c6:98:
09:61:ac:47:4e:d3:cf:4f:e1:55:b7:28:54:8b:6b:c1:92:f4:
cb:2d:94:f5:c9:74:11:58:6f:5d:e8:de:66:d3:a8:58:07:ad:
10:c4:72:68:b7:d2:48:27:c9:ce:b6:86:67:fb:69:ca:c9:98:
43:10:fe:18:22:bd:18:9f:67:8f:9a:f6:09:eb:b3:43:cf:bf:
32:dd:60:99:da:3b:e6:ab:6f:39:ba:d6:2e:cc:2a:e9:56:89:
05:77:98:e6:41:1f:58:36:cc:60:95:d3:41:d0:9c:d2:1c:6b:
eb:d7:50:fc:51:25:df:77:32:58:c8:4f:63:74:49:4e:12:2e:
10:ce:21:6b:78:22:31:ab:cb:f1:09:59:4d:9f:29:a8:8f:57:
c6:84:3c:7f:61:9c:f3:08:51:09:dd:e0:69:02:f4:d3:6b:91:
e2:83:f0:ba:fe:4e:31:6d:4c:b5:7d:0c:d1:a9:8f:27:5f:1b:
62:fa:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:15 2025 by rpki-client