
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: Gm+nYsVpgWigRdTz45xLrNHwHW4CF3GSwC+QX1bqPNQ=
Subject key identifier: 89:09:AC:17:54:C4:CC:AB:51:B6:A4:61:98:CD:6F:2E:19:23:AE:B4
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 019872988367C56717F230D6C587F93D7FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 0FAC
Signing time: Mon 04 Aug 2025 01:00:54 +0000
Manifest this update: Mon 04 Aug 2025 01:00:54 +0000
Manifest next update: Tue 05 Aug 2025 01:00:54 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: Waqo3Z/Xu015nUr3Napy73hY9ACYt7ttROD4k2Af664=)
2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:83:67:c5:67:17:f2:30:d6:c5:87:f9:3d:7f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Aug 4 01:00:54 2025 GMT
Not After : Aug 5 01:00:54 2025 GMT
Subject: CN=8909ac1754c4ccab51b6a46198cd6f2e1923aeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:47:29:f4:cd:10:1c:5e:a4:30:c0:8e:b9:
91:d5:78:d0:4d:0a:b1:a3:4f:2e:1e:a7:77:be:0d:
19:b3:fc:e7:77:27:3e:95:1b:4c:d6:c4:15:68:17:
f0:21:27:24:7f:dc:8c:8b:a3:23:f5:b1:1d:27:61:
87:44:3f:02:b4:a3:d2:f2:6b:ec:18:3e:cd:61:76:
ac:58:fa:11:32:07:9a:dc:8b:98:42:ae:e0:96:1f:
eb:d2:d8:9d:14:9e:b4:ef:00:3a:b5:46:98:4b:27:
9a:dc:7f:66:27:53:6d:61:83:6f:ba:5b:fc:e9:97:
d6:a3:b4:84:c2:56:59:ef:2c:b0:3c:5a:f1:de:ad:
9d:1d:94:a3:62:e0:1b:96:af:7a:51:7a:db:56:7a:
fb:b5:49:9e:26:35:67:e5:a1:7a:55:e9:7b:3b:d6:
6f:f3:01:c6:f3:27:71:6f:a7:2a:52:cb:3d:98:f9:
fd:72:dd:4f:88:02:03:2f:86:34:6b:3c:73:6e:87:
f8:ce:8b:1d:21:33:bf:74:23:19:6e:45:4a:ae:7d:
c4:66:d9:87:17:b5:1a:66:09:9d:41:3e:78:ce:e2:
44:92:8b:1a:1e:7c:ef:7a:46:26:95:1b:bc:d4:79:
c0:1b:e6:95:d5:95:ab:7c:c6:9d:1e:82:b0:4d:94:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:AC:17:54:C4:CC:AB:51:B6:A4:61:98:CD:6F:2E:19:23:AE:B4
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bd:28:8d:b3:ca:25:c0:f8:79:98:03:c7:8d:d6:e6:18:b9:
f5:78:f0:0e:be:57:af:37:d4:6a:37:ab:80:ce:0a:fd:4c:ae:
01:d3:d5:22:6b:33:48:6a:5a:94:fa:5d:c1:8f:5b:54:b4:28:
5f:0b:b8:58:ae:88:c1:02:1f:dd:be:f9:7d:b2:17:95:d0:bc:
e4:f8:27:2a:b1:ee:6a:33:31:ce:10:96:dc:6a:c9:48:02:be:
27:88:8c:b0:43:72:36:a4:0b:af:5b:32:a5:00:0d:55:5b:a8:
1e:50:9d:1a:0e:0b:e5:4b:db:75:35:95:cd:96:31:c5:12:04:
3e:c0:1c:e6:a6:eb:d9:df:0c:dd:b7:ca:df:cb:3a:bb:20:1f:
d8:33:28:c7:ee:9f:26:54:dc:00:6e:03:1c:ec:b9:a0:55:c8:
6d:9f:ac:98:7e:03:8c:54:c6:9c:0a:1a:71:80:12:57:4e:4a:
4a:3c:76:7c:9e:a4:e8:27:21:74:c5:58:3a:02:12:7a:5c:f0:
5a:47:49:11:c7:84:8f:42:e1:24:48:56:f0:04:84:2d:a0:d4:
04:0c:75:56:fa:a5:2c:c0:bf:ae:ef:bf:a0:92:b4:c3:18:23:
af:5f:6c:44:28:66:09:ee:19:8f:19:68:06:a7:6b:ab:8d:61:
22:a6:e1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymINnxWcX8jDWxYf5PX+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjUwODA0MDEwMDU0WhcNMjUwODA1MDEwMDU0WjAzMTEwLwYDVQQD
Eyg4OTA5YWMxNzU0YzRjY2FiNTFiNmE0NjE5OGNkNmYyZTE5MjNhZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kFHKfTNEBxepDDAjrmR1XjQTQqx
o08uHqd3vg0Zs/zndyc+lRtM1sQVaBfwISckf9yMi6Mj9bEdJ2GHRD8CtKPS8mvs
GD7NYXasWPoRMgea3IuYQq7glh/r0tidFJ607wA6tUaYSyea3H9mJ1NtYYNvulv8
6ZfWo7SEwlZZ7yywPFrx3q2dHZSjYuAblq96UXrbVnr7tUmeJjVn5aF6Vel7O9Zv
8wHG8ydxb6cqUss9mPn9ct1PiAIDL4Y0azxzbof4zosdITO/dCMZbkVKrn3EZtmH
F7UaZgmdQT54zuJEkosaHnzvekYmlRu81HnAG+aV1ZWrfMadHoKwTZT6YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkJrBdUxMyrUbakYZjNby4ZI660MB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL0ojbPK
JcD4eZgDx43W5hi59XjwDr5XrzfUajergM4K/UyuAdPVImszSGpalPpdwY9bVLQo
Xwu4WK6IwQIf3b75fbIXldC85PgnKrHuajMxzhCW3GrJSAK+J4iMsENyNqQLr1sy
pQANVVuoHlCdGg4L5UvbdTWVzZYxxRIEPsAc5qbr2d8M3bfK38s6uyAf2DMox+6f
JlTcAG4DHOy5oFXIbZ+smH4DjFTGnAoacYASV05KSjx2fJ6k6CchdMVYOgISelzw
WkdJEceEj0LhJEhW8ASELaDUBAx1VvqlLMC/ru+/oJK0wxgjr19sRChmCe4Zjxlo
Bqdrq41hIqbhqw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:02 2025 by rpki-client