Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: M0FEQBC8D8IZYGlnsFO3Ikm82ptX6zhGll+57sqv5P8=
Subject key identifier: 8F:F7:E3:98:F5:D3:FD:67:8A:CE:7E:F0:52:D6:DD:E2:37:FB:59:3C
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 01977F0CE01B89A5F0ADE2B8896CDE45237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 1583
Signing time: Tue 17 Jun 2025 18:00:39 +0000
Manifest this update: Tue 17 Jun 2025 18:00:39 +0000
Manifest next update: Wed 18 Jun 2025 18:00:39 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: 2FgpJRKATLtJCFffpaHoj8FAHP4bolpNwG1sXkMB3ho=)
2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=)
3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=)
4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:e0:1b:89:a5:f0:ad:e2:b8:89:6c:de:45:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Jun 17 18:00:39 2025 GMT
Not After : Jun 18 18:00:39 2025 GMT
Subject: CN=8ff7e398f5d3fd678ace7ef052d6dde237fb593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:2a:14:d2:99:a2:f4:3e:1a:b3:04:b9:71:
c0:5d:9c:29:fe:56:df:7f:f7:c6:52:82:1f:bb:2d:
49:b7:37:d3:3a:92:51:29:23:a6:6f:ff:2d:82:3c:
82:e9:e6:3f:47:03:44:fc:2a:63:97:ba:f3:6c:d8:
64:c8:79:7f:46:bc:f0:52:3f:cd:30:c2:fc:a5:43:
4d:90:07:3b:aa:e0:95:86:0d:de:d6:c2:87:8a:ed:
ed:96:ee:6e:24:58:35:7b:d2:a5:c0:d2:d3:35:1d:
85:94:3c:1c:99:e7:5f:40:32:2a:94:c7:62:6e:73:
c7:69:59:7d:94:31:71:1f:9c:31:a9:92:b8:a7:87:
b6:71:3b:6f:45:13:6d:ca:1e:9f:dd:a0:25:6d:92:
27:0f:f1:11:8f:37:c6:09:8a:ea:24:d5:47:b3:ea:
a2:3c:99:b1:f2:a6:aa:7b:d3:ca:f0:1a:8c:9e:78:
8b:40:99:7b:c5:11:2d:26:19:50:5f:3f:d9:89:cb:
6f:43:5c:b4:f9:77:0a:73:bb:43:48:1c:8c:89:6a:
1c:f7:44:43:86:4b:7e:1a:a2:0c:3c:cc:80:8a:56:
c4:85:eb:e8:37:6d:bd:7b:a1:52:7e:7d:7d:04:e9:
a4:19:e0:58:62:23:ea:75:e7:12:ac:a2:f5:0b:5a:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:E3:98:F5:D3:FD:67:8A:CE:7E:F0:52:D6:DD:E2:37:FB:59:3C
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ec:a9:f7:03:e8:4a:a2:0a:6f:ce:d7:02:f7:f0:39:52:32:
da:e8:cd:75:87:ca:35:a1:b5:25:26:90:fa:bb:9f:b2:d5:79:
43:4f:77:25:a0:f7:d9:1b:83:41:37:b3:53:b6:2d:ef:ed:98:
03:bd:0d:c5:bd:99:30:ca:ef:22:cd:a0:cc:3f:6c:3d:d6:ba:
1f:62:84:53:78:c1:73:e4:7c:d2:7c:cc:4f:b8:98:7e:67:f4:
61:89:fb:0b:e6:49:04:d3:63:df:59:8a:01:b0:37:5c:6b:67:
65:13:d7:0c:71:02:ca:1f:01:b7:66:12:12:1a:55:7c:16:d4:
5f:30:55:a3:cb:39:a0:04:9b:ff:f8:2a:de:13:dc:54:dd:ab:
73:24:c0:5c:dd:88:44:56:ba:20:95:c0:a2:e8:88:be:b9:e8:
4b:6d:b7:aa:0c:4e:f6:29:e0:6d:e7:c6:61:db:da:1f:4b:5b:
2b:3f:2c:20:f0:d6:7e:c9:46:72:a3:10:11:0f:8e:ff:ea:8a:
70:cb:54:f8:95:e1:80:f3:46:eb:ac:be:c3:cb:48:1f:35:8b:
16:e2:58:66:33:68:29:56:13:f1:66:b9:34:61:49:b1:31:99:
ae:bf:a1:c4:5a:5c:09:41:1b:d7:2e:f2:78:99:6a:09:76:e0:
7a:0d:f2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/DOAbiaXwreK4iWzeRSN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2
NDEzMzMwHhcNMjUwNjE3MTgwMDM5WhcNMjUwNjE4MTgwMDM5WjAzMTEwLwYDVQQD
Eyg4ZmY3ZTM5OGY1ZDNmZDY3OGFjZTdlZjA1MmQ2ZGRlMjM3ZmI1OTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc0qFNKZovQ+GrMEuXHAXZwp/lbf
f/fGUoIfuy1JtzfTOpJRKSOmb/8tgjyC6eY/RwNE/Cpjl7rzbNhkyHl/RrzwUj/N
MML8pUNNkAc7quCVhg3e1sKHiu3tlu5uJFg1e9KlwNLTNR2FlDwcmedfQDIqlMdi
bnPHaVl9lDFxH5wxqZK4p4e2cTtvRRNtyh6f3aAlbZInD/ERjzfGCYrqJNVHs+qi
PJmx8qaqe9PK8BqMnniLQJl7xREtJhlQXz/ZictvQ1y0+XcKc7tDSByMiWoc90RD
hkt+GqIMPMyAilbEhevoN229e6FSfn19BOmkGeBYYiPqdecSrKL1C1q9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/345j10/1nis5+8FLW3eI3+1k8MB8GA1UdIwQY
MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt
NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj
LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+yp9wPo
SqIKb87XAvfwOVIy2ujNdYfKNaG1JSaQ+rufstV5Q093JaD32RuDQTezU7Yt7+2Y
A70Nxb2ZMMrvIs2gzD9sPda6H2KEU3jBc+R80nzMT7iYfmf0YYn7C+ZJBNNj31mK
AbA3XGtnZRPXDHECyh8Bt2YSEhpVfBbUXzBVo8s5oASb//gq3hPcVN2rcyTAXN2I
RFa6IJXAouiIvrnoS223qgxO9ingbefGYdvaH0tbKz8sIPDWfslGcqMQEQ+O/+qK
cMtU+JXhgPNG66y+w8tIHzWLFuJYZjNoKVYT8Wa5NGFJsTGZrr+hxFpcCUEb1y7y
eJlqCXbgeg3ykQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:59 2025 by rpki-client