Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: Dur/4y0wr8NYY6kpNbnR8NTH5Z2SFszxtua0QgEwtJo=
Subject key identifier: 96:F8:83:84:61:76:0B:74:2A:97:8E:6F:A4:C2:FC:94:DF:9F:F3:B3
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 01987373DE05A81718EC3F46B847A7D94ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 14EA
Signing time: Mon 04 Aug 2025 05:00:29 +0000
Manifest this update: Mon 04 Aug 2025 05:00:29 +0000
Manifest next update: Tue 05 Aug 2025 05:00:29 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: 5W9WkWCK5WY5RmUj4n8bQBtB5ZYvMrGIdXSl6SjTHW0=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:de:05:a8:17:18:ec:3f:46:b8:47:a7:d9:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Aug 4 05:00:29 2025 GMT
Not After : Aug 5 05:00:29 2025 GMT
Subject: CN=96f8838461760b742a978e6fa4c2fc94df9ff3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:eb:70:91:df:fa:ba:2a:13:4c:b5:55:71:
6f:90:48:c0:66:48:b7:46:57:d6:c9:61:32:ee:cc:
10:80:c6:d4:c2:3a:cf:dd:a7:1d:01:1d:8f:c0:68:
54:01:f4:0c:bb:dd:3e:1c:4a:49:5a:5f:54:dc:9c:
e2:9c:a3:e1:69:8d:a8:a5:75:3c:3d:5c:44:16:8b:
92:ec:9a:b2:45:75:fe:f8:8e:8b:1f:26:d0:7f:5b:
18:68:0b:9e:f7:2d:9c:53:9b:ee:c2:3c:8d:01:54:
56:76:e0:6b:a8:9c:16:8b:1f:c6:51:7a:69:7f:5d:
55:b3:ca:79:f7:63:d2:7e:5f:9b:56:e6:6b:56:80:
8b:46:3a:39:08:a3:b6:ba:58:53:0b:24:3a:72:ea:
66:94:5a:d3:28:af:ce:4b:24:4d:8c:90:74:92:e3:
8b:3e:45:7f:4f:d6:d5:3a:1d:c1:88:ee:4d:ea:4b:
48:a5:f9:91:93:af:d1:c9:47:30:9a:1d:4d:62:c4:
11:01:80:3a:74:73:2e:67:6c:7b:bc:7e:0c:6f:27:
8f:e1:71:a2:d6:a4:20:08:ca:91:94:1a:c8:65:38:
c9:c2:b9:fc:70:4e:c3:ab:a8:6e:13:4c:43:3b:83:
db:1b:36:b6:80:b7:82:8b:c9:d0:c8:2d:65:7d:fa:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:83:84:61:76:0B:74:2A:97:8E:6F:A4:C2:FC:94:DF:9F:F3:B3
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:78:6c:5c:e4:d3:02:36:c8:a5:83:78:27:bc:50:ea:0a:
44:d6:50:9e:d0:76:b6:e4:b8:ed:68:29:6e:28:25:66:10:a3:
e1:c1:0f:03:0f:fd:d7:e7:51:d6:ac:eb:07:cf:09:84:00:55:
4d:94:ec:62:44:5e:e6:ff:5b:13:29:c7:42:6f:99:56:83:ff:
e9:c6:29:6f:0d:59:54:c0:ec:54:aa:19:91:78:15:b1:aa:90:
8f:58:fa:40:9c:a7:57:6f:5e:21:3c:98:11:59:d0:d8:55:0e:
ca:f9:0e:6b:c2:6b:a3:d6:42:38:78:21:13:98:f8:52:cf:79:
3d:f5:22:af:5f:f0:a6:6e:b3:1c:66:ff:f9:9c:22:9c:85:f0:
07:f5:3f:8c:a0:7d:20:39:85:7e:eb:d9:21:d8:34:8e:0d:64:
b8:b2:18:de:0b:c2:7b:f8:40:08:e0:a0:1c:08:46:58:00:aa:
e3:e7:88:45:aa:45:c8:f8:9d:fd:52:12:f2:d8:28:6d:1a:10:
10:8d:b5:6e:3f:04:68:a3:ab:d5:6e:53:ad:7c:ef:68:7d:f1:
4d:0d:46:3d:55:29:9d:ea:1b:c3:5d:66:5c:2b:5e:03:b0:24:
71:15:6b:0c:29:0e:45:d7:a3:3e:72:b6:69:de:36:1b:09:e5:
ee:99:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:27 2025 by rpki-client