
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: arkmlp9Y3fOiQ83J7pF9Xw2PKA6fUvfu5Kz7pRYH2Vs=
Subject key identifier: A0:0B:04:93:DC:13:67:FB:53:06:7B:FF:DF:07:89:CC:85:23:78:77
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 0198941231A2969D3B568FA1C415E1DFC408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 13:01:17 +0000
Manifest this update: Sun 10 Aug 2025 13:01:17 +0000
Manifest next update: Mon 11 Aug 2025 13:01:17 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: ncWFOkD+kc2ufjAQ7Iw5u56u4EEeOefOo+hImAKO7Eo=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:31:a2:96:9d:3b:56:8f:a1:c4:15:e1:df:c4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Aug 10 13:01:17 2025 GMT
Not After : Aug 11 13:01:17 2025 GMT
Subject: CN=a00b0493dc1367fb53067bffdf0789cc85237877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:b7:70:af:90:c3:3d:63:25:45:ca:7b:b1:
ee:24:6a:6d:e4:32:d2:10:1d:6b:1a:92:a4:47:aa:
81:d1:82:fb:8f:5f:47:83:d2:2a:4f:c3:29:93:df:
6a:39:be:d0:32:10:55:74:e8:82:82:c9:35:e4:d5:
98:af:df:71:bd:8a:de:3a:4a:46:56:75:68:f8:58:
76:25:7c:dc:4d:06:1b:f4:38:6d:a0:e8:95:6e:61:
ec:ee:d8:0e:61:e6:dd:e1:4d:aa:79:3a:a4:ee:26:
80:8b:d5:bd:40:67:b5:3d:e8:7b:76:02:e7:9a:86:
81:8b:71:3e:6e:e0:5a:55:80:27:9f:b5:6e:1e:15:
da:7e:40:17:34:8b:5f:4b:ad:29:87:55:0d:ad:f1:
6b:f5:9f:80:06:60:4a:75:46:5f:27:e3:85:7c:53:
02:da:57:7c:d9:76:dd:cc:13:ba:2b:a2:e2:4f:c3:
14:c4:32:ed:86:27:bc:32:13:19:18:bc:70:fd:da:
8e:83:e4:cd:74:16:ec:46:7d:95:8c:87:ed:0e:06:
39:be:09:a3:b1:e8:a7:1f:8e:e5:42:52:31:e7:b2:
73:57:83:a2:db:5b:36:d8:2c:3e:2a:93:1d:c2:b3:
e6:68:97:61:0c:e2:8d:85:6a:80:9c:26:e8:87:70:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:04:93:DC:13:67:FB:53:06:7B:FF:DF:07:89:CC:85:23:78:77
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d7:eb:c9:53:8c:a5:87:c0:23:51:6f:69:87:9e:f6:78:64:
63:a2:e2:00:32:14:9a:89:6b:73:bf:f5:8c:b2:6f:16:ef:16:
ab:42:3f:99:b2:96:79:54:2f:3d:25:48:01:44:2f:20:7e:79:
98:f7:d5:d8:40:12:10:ae:94:4d:73:e9:d4:7e:0c:30:55:0f:
f9:eb:a5:e8:9d:22:ad:49:a1:c4:5b:5e:64:30:02:04:72:1b:
f4:16:ac:21:3b:e3:24:9a:13:9a:b5:31:fe:75:32:33:a4:e8:
1f:a9:43:8e:40:83:8d:5d:a2:cb:53:6a:72:40:c8:0c:d7:62:
d0:86:73:5d:12:54:be:30:b7:cf:6d:8c:ac:7e:ee:b7:0f:fd:
99:cc:b2:bc:b7:06:ba:c2:50:88:0f:1e:47:69:df:33:8d:5e:
27:39:fb:9c:fd:9c:b3:d8:dc:0e:03:20:60:21:31:7a:97:a5:
73:56:1f:81:c2:9b:05:7c:f2:e9:fa:8b:d7:de:22:1a:bd:b0:
8e:cb:6b:c5:bf:3e:f9:1a:ea:85:16:c5:e8:f2:13:20:6c:86:
9f:84:c6:fd:53:19:c8:90:22:48:8c:29:6a:1d:5e:32:8a:e0:
be:5a:8e:99:85:d5:cf:d9:ac:f4:75:38:f8:a5:ce:93:71:f9:
5e:41:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:51:09 2025 by rpki-client