Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: 5aopsOvPL8PMITDq3rWIy+9QRMZd11bAU4c/+5ODArg=
Subject key identifier: A9:22:69:26:36:79:EF:9C:E9:59:49:21:83:8E:27:B5:3B:5E:E8:B3
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 01976EBDD1137506EA1F0998DA422E9E6E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 1463
Signing time: Sat 14 Jun 2025 14:00:22 +0000
Manifest this update: Sat 14 Jun 2025 14:00:22 +0000
Manifest next update: Sun 15 Jun 2025 14:00:22 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: WliLhwgbbKjC9nceynd+5zz9oLD+PxgLqRTyoRLr7NI=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d1:13:75:06:ea:1f:09:98:da:42:2e:9e:6e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Jun 14 14:00:22 2025 GMT
Not After : Jun 15 14:00:22 2025 GMT
Subject: CN=a92269263679ef9ce9594921838e27b53b5ee8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:91:99:35:30:96:d1:c2:cb:b4:af:34:c8:
cb:a2:29:ce:ac:b9:f7:5c:2c:3c:f5:c9:2c:99:de:
9c:6a:a6:0f:d9:38:3f:8f:c3:c7:c1:06:87:29:e2:
5b:68:04:6b:7c:4d:af:2f:d8:1a:46:a4:1c:19:07:
6d:e9:3b:1c:85:e0:87:06:9b:86:31:45:ee:1c:37:
58:9a:71:e9:02:55:36:42:88:ef:ca:cd:57:a4:a5:
b2:95:cd:a8:93:bc:c2:c1:98:bf:b6:df:f3:c5:87:
e6:2d:3b:7c:f5:7c:4c:aa:29:c3:ca:4d:dd:9f:62:
03:2d:16:66:95:c0:99:9b:e5:4d:5d:04:96:af:99:
f8:03:d4:a3:ee:c0:b9:99:3a:af:86:7a:40:0b:fc:
81:23:ee:33:65:09:82:0a:e8:93:62:33:6d:28:39:
3f:05:ae:52:14:9e:e0:1c:df:2b:fc:96:9f:3b:2c:
a3:02:86:5f:3f:a0:0e:40:b3:10:ec:0b:51:aa:0d:
46:6a:d9:b2:a4:80:db:39:ee:b8:c1:09:2c:79:55:
a8:b6:5b:1f:04:7c:02:23:37:76:d5:9f:17:d9:dd:
7f:34:fe:72:9a:22:a2:08:95:d0:63:6f:ef:0d:4a:
4d:12:f8:f2:37:fd:30:a9:4a:2a:55:cd:0a:2f:76:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:69:26:36:79:EF:9C:E9:59:49:21:83:8E:27:B5:3B:5E:E8:B3
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:e3:3f:d3:6c:03:e8:25:79:2d:a2:7f:96:da:39:38:dc:
ed:37:d1:1a:ef:33:fc:e6:da:19:84:be:93:42:82:7c:21:a3:
3f:18:cf:73:b5:c1:0c:17:c3:d8:c6:8f:31:87:de:fe:51:17:
5b:94:32:a5:60:e4:9c:7f:3e:a4:74:1b:c5:af:00:df:16:8e:
fb:12:61:c6:ad:e9:0d:46:6e:f1:5f:7e:c3:7e:e5:68:cd:c7:
b7:86:a2:18:9c:29:2a:4b:4e:fb:5b:08:91:b3:b0:b8:04:88:
b3:bd:f1:4e:57:cf:e9:ee:4a:b3:1d:f9:88:95:5e:d9:5a:73:
ba:3b:97:cb:0b:1b:f0:27:b3:5a:2c:af:01:22:36:ae:63:e2:
12:80:b2:2a:ca:90:9f:ae:a3:48:09:bb:df:05:76:2b:85:f5:
82:a9:d3:49:ef:06:b3:da:b9:d0:9f:ec:67:4e:0b:43:8b:6a:
1d:88:75:df:a4:0f:02:83:8c:dc:31:18:6f:5f:e0:82:e5:5f:
07:79:9b:fe:16:f6:b7:72:e7:2d:21:a7:9e:8d:8e:fc:fb:12:
d2:4e:54:ef:99:e0:d8:7c:cf:d8:f2:3b:d6:bb:03:f5:61:b4:
e2:ce:76:02:37:71:23:be:7a:8a:bb:44:7b:e8:38:01:3a:cd:
7b:e2:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:33 2025 by rpki-client