Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: dRSMn7rdTRO21TBB1gbqNmeMjPos0Se4LYropHIoHEk=
Subject key identifier: BD:DD:5E:77:E9:49:57:9C:40:9A:EF:74:3C:D4:CB:CC:7D:0B:35:BF
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 01989592035C45A7D2FC733F53F2CAA01838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 20:00:30 +0000
Manifest this update: Sun 10 Aug 2025 20:00:30 +0000
Manifest next update: Mon 11 Aug 2025 20:00:30 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: StTH5m6dso26fRAB/4Yjh3UJK2JJg8p9U5lyDrhGEyU=)
2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:03:5c:45:a7:d2:fc:73:3f:53:f2:ca:a0:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Aug 10 20:00:30 2025 GMT
Not After : Aug 11 20:00:30 2025 GMT
Subject: CN=bddd5e77e949579c409aef743cd4cbcc7d0b35bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:6b:85:5c:ba:f6:52:3a:82:e5:d7:9d:fd:
ec:25:01:83:13:4a:ff:af:ed:39:93:ba:b3:34:00:
f6:39:e2:5d:3d:a4:02:5e:6f:16:d6:8f:aa:d2:7d:
7f:50:6d:31:42:04:68:d1:47:3d:0b:fd:27:3c:66:
75:d6:d5:9a:23:a8:0e:a6:ea:c5:88:60:af:7e:85:
05:2a:3e:e1:f7:e1:2a:e0:d3:d0:f4:e4:5b:3d:54:
ba:61:4c:00:45:1e:fa:67:3e:b8:f6:a6:c0:2f:cf:
dd:98:16:9b:88:c8:91:0c:c2:84:8b:c1:de:86:85:
9f:17:bd:74:54:7e:50:8f:49:1d:ed:53:9a:10:8f:
7d:19:f4:82:4e:ec:08:ae:15:80:1c:76:46:ac:6a:
3a:79:0e:9e:ce:22:50:bb:7c:8b:c4:b6:a7:45:fb:
59:4e:4b:c1:bd:52:6a:3c:ba:97:50:fa:b0:46:30:
b3:6d:3f:32:f9:95:95:1d:71:71:81:e4:91:0e:68:
73:fd:2e:d1:5b:10:e8:5d:bd:2c:80:e5:8f:b8:f5:
c6:e9:87:49:89:94:a1:c7:e0:5a:e8:ae:4b:47:ab:
9d:19:5e:9f:be:5f:0e:21:bc:2f:91:fa:63:3c:d9:
28:03:9f:64:c1:27:1a:24:d3:c7:58:27:30:b4:f7:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:5E:77:E9:49:57:9C:40:9A:EF:74:3C:D4:CB:CC:7D:0B:35:BF
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:65:15:0c:a4:ec:34:47:da:ce:e1:f2:82:03:8b:fd:c7:c3:
51:91:b9:c2:f4:e3:bb:43:40:3a:75:ca:10:c6:ce:0e:7d:b6:
dd:73:81:38:b9:f4:61:d0:8e:b3:3a:9d:5c:7f:d1:50:e6:fc:
7c:98:2d:38:ef:8b:34:11:1b:c5:b0:f6:4a:b8:18:66:1c:d9:
1d:b3:49:f8:2d:91:c0:bf:51:44:ac:22:aa:4c:cb:33:ca:5a:
1f:40:63:e4:4b:f9:bb:00:b5:2c:38:53:22:60:ca:43:ad:ca:
f7:1e:8b:6c:4c:d9:5d:e4:f8:22:07:9c:db:38:29:be:0f:b2:
93:c9:7e:38:06:5f:d4:f6:a2:cb:5b:79:4a:36:46:cc:a5:c8:
03:b1:9e:67:d6:b2:19:3e:77:b9:26:50:94:23:50:af:fd:48:
59:ae:dc:3e:d0:6b:40:20:f1:72:93:ad:06:1f:38:68:cb:59:
46:00:f9:5c:5f:50:76:22:68:bc:06:32:b4:94:d9:a4:6f:ac:
54:6b:91:66:39:59:67:b8:0b:d9:a0:ed:d1:66:61:b9:13:fb:
13:b9:2c:39:25:82:39:36:f4:2d:c4:26:cd:16:b5:db:67:41:
c9:70:d6:21:bb:3c:7a:37:c0:b3:35:f2:1d:35:45:95:35:e7:
a9:fe:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:35 2025 by rpki-client