Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: X9rCuTPde3oUz4AxHfeLAb0H2vp7mbSPHrt2W6KIfxY=
Subject key identifier: C0:ED:01:0B:3E:B1:20:DB:08:22:06:66:84:8B:FE:61:0C:74:AE:3B
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019A507525AFB45F21F99F603EBF2C5EB448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 15E1
Signing time: Tue 04 Nov 2025 20:00:45 +0000
Manifest this update: Tue 04 Nov 2025 20:00:45 +0000
Manifest next update: Wed 05 Nov 2025 20:00:45 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: Wnerb1zeWrfRlaIuGPFFGjTZUw9Tb8IYh7CfgZBK0xE=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:25:af:b4:5f:21:f9:9f:60:3e:bf:2c:5e:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Nov 4 20:00:45 2025 GMT
Not After : Nov 5 20:00:45 2025 GMT
Subject: CN=c0ed010b3eb120db08220666848bfe610c74ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:ec:57:42:df:45:a1:bf:6c:d3:ce:b0:bf:
78:9d:89:6d:f4:79:06:33:0e:f0:9d:4e:c9:c0:c8:
0e:09:ab:a6:84:c9:61:d5:18:f5:23:41:9a:18:da:
d5:ca:67:27:2c:42:00:d6:50:73:4f:db:27:04:28:
50:0a:01:b2:f6:75:79:9c:be:7a:28:ab:50:15:ba:
f1:4d:bf:c5:a2:48:45:70:87:db:26:19:0d:15:b0:
4b:c2:09:70:93:cd:bc:80:e7:f3:9e:7a:a0:eb:fc:
c8:c7:81:c9:86:41:45:51:5e:4d:04:b6:92:c4:d9:
31:d7:3e:ba:e7:aa:4c:76:aa:48:4c:8d:d6:3b:18:
72:73:67:3a:14:7a:4d:8a:a9:a3:f3:6c:96:08:f8:
d7:08:f2:86:ef:6c:10:2e:17:9e:6f:d2:ff:51:a1:
55:73:5f:18:37:3c:be:b3:4a:7b:d0:c5:ac:b5:7f:
d3:92:84:5c:c0:bc:1b:fa:e1:38:30:ce:70:63:2e:
2d:3f:6a:8f:ca:4e:fc:cc:74:f1:cf:7b:09:38:12:
f5:88:50:2b:a0:08:2f:de:ae:ea:dc:15:0b:72:e3:
31:16:59:a6:11:b8:23:65:e5:a1:7c:a1:86:31:c3:
77:ce:98:88:b0:65:aa:73:29:b7:d0:01:64:6c:1a:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:01:0B:3E:B1:20:DB:08:22:06:66:84:8B:FE:61:0C:74:AE:3B
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c9:1f:45:ad:c4:c6:9d:0c:cd:82:5c:3e:42:7d:b0:0b:ad:
bb:ec:6d:91:b2:5e:f6:2d:7c:d8:13:81:03:d4:33:8c:25:92:
8e:3d:2c:09:04:61:8b:f0:32:52:3e:57:b4:14:be:a1:bf:f2:
e6:c6:98:32:94:67:a9:eb:21:42:e4:ec:bc:f9:00:5f:8e:0b:
f3:c2:27:78:e6:1c:fe:5d:bb:9a:fa:83:88:0d:67:2c:19:a3:
9f:16:2e:33:35:cd:ff:cb:2f:c3:a5:a8:67:01:6f:c0:6e:9b:
1d:e6:58:cf:88:55:ed:e8:f7:0a:b5:ba:c7:b8:54:dc:7e:bb:
c9:c5:0b:cd:80:18:e4:79:61:b7:6b:99:40:76:2d:ee:f7:83:
19:26:4c:67:6f:97:f0:c8:67:c7:de:bb:18:6e:93:fa:26:a3:
eb:4b:c4:bf:10:21:c4:11:cb:ac:0d:5f:c5:82:96:b5:6c:c5:
c5:22:94:2a:81:ce:63:02:b0:02:eb:aa:14:89:62:04:9e:6d:
b7:9a:fe:13:d8:67:45:c5:8d:2e:14:1e:64:df:13:57:e2:78:
21:8b:82:b0:91:78:5a:b9:a2:ed:b0:60:d6:ec:5b:58:3f:4f:
bf:3a:04:55:85:46:00:d4:3d:20:fb:3b:0c:99:89:67:ef:9d:
6c:a7:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:59 2025 by rpki-client