Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: +IK3rQ4hjx/pcIuoORFAtKHfefA3p5tgXXx6Ax2aGiA=
Subject key identifier: 0E:38:F0:B5:4A:9B:EB:31:EF:8F:E4:FC:DD:42:12:84:CA:24:A4:BF
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019A50E34027F2136B1BD9CEC1C6EF05C630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:01 +0000
Manifest this update: Tue 04 Nov 2025 22:01:01 +0000
Manifest next update: Wed 05 Nov 2025 22:01:01 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: bI/6QYRmEcN3UCv1wOv4QiOhaSc0/JNy5Jt1Dkkly3Q=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:40:27:f2:13:6b:1b:d9:ce:c1:c6:ef:05:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Nov 4 22:01:01 2025 GMT
Not After : Nov 5 22:01:01 2025 GMT
Subject: CN=0e38f0b54a9beb31ef8fe4fcdd421284ca24a4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:67:88:cf:d4:89:87:a9:21:75:bf:0a:41:
6c:dc:b7:2e:cd:8e:57:6e:8a:be:84:d2:c6:d6:4c:
d6:09:a3:d5:cf:07:20:d1:53:32:16:4b:94:53:dc:
cd:f1:97:38:f1:a0:00:ca:76:97:d7:5e:66:06:6e:
96:43:56:49:69:b4:1e:86:a2:df:76:d0:71:c4:ce:
4d:4e:60:05:2d:43:4a:7f:eb:c7:e1:1b:21:99:ed:
ce:46:49:df:50:a0:b3:d4:c7:2c:b2:b0:39:9f:20:
19:f3:df:ca:46:bb:2e:e5:74:e4:d6:c2:91:5d:f5:
e4:bb:a1:78:0a:3b:c9:1d:2a:87:78:dd:46:b5:09:
67:6c:55:13:19:1d:47:f8:ae:a8:9d:96:ba:9d:e8:
1f:34:33:1f:6e:38:f9:ab:ef:88:82:29:8b:62:2b:
53:05:d9:75:a8:82:e0:0f:6f:83:ef:7c:3b:4c:3f:
ea:9f:f0:1e:e1:b2:25:84:8f:7f:ca:c3:02:d7:36:
46:fc:8f:59:3d:eb:94:1c:54:5c:f8:2c:7c:96:16:
9c:ad:2a:cb:b9:d0:dd:43:d1:30:22:8f:27:27:f8:
0e:c8:0d:9e:99:c4:14:ac:85:5e:b2:67:fd:6e:0d:
7c:50:06:66:28:3b:40:ec:f7:6f:52:b5:d7:e9:eb:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:F0:B5:4A:9B:EB:31:EF:8F:E4:FC:DD:42:12:84:CA:24:A4:BF
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:29:c9:40:98:da:6d:78:6b:d9:aa:cd:4d:88:ad:c8:f3:ee:
cf:c2:a3:08:1c:8c:16:96:00:fa:da:6e:72:c4:e7:56:39:40:
f4:b7:33:fe:eb:f6:59:2e:11:ae:4a:d9:99:7c:a6:10:e1:8a:
54:3e:89:7e:e8:cf:35:dc:3b:94:e8:bf:4f:a9:28:d1:f8:78:
46:db:c9:9e:c1:3f:c9:26:98:82:9c:34:0d:23:42:40:25:f5:
92:32:9d:89:4d:4b:d6:8d:cc:a6:b5:b6:9b:d9:16:0a:04:69:
30:c1:d9:12:2b:6d:09:1b:60:8d:a5:fe:3a:a2:0f:b3:83:10:
83:24:c4:d3:7e:19:0d:03:5a:5b:38:85:94:b8:23:99:1a:19:
0f:f5:0d:95:43:df:4b:07:46:3f:5f:7d:7b:6e:0a:ab:9c:3a:
e3:81:b7:d5:12:20:0a:2d:b5:b7:56:b0:80:2f:0d:17:fa:63:
a0:91:1e:a9:39:e2:df:dc:37:9a:41:ae:33:7c:4e:f9:04:b7:
da:11:f4:dd:df:ec:b0:74:0a:5a:64:71:49:c8:27:5a:e6:e7:
2c:4e:d6:9e:02:0e:6b:79:7a:1e:a6:ee:c5:e3:e4:4a:6f:81:
f1:4f:29:d8:72:ff:92:cc:90:ab:83:00:53:79:bd:b1:b0:02:
79:0f:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:28:51 2025 by rpki-client