Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: YnzEPWy0HQMZ5N5EEteDW3EN0ykuFskRRTzWZLhPI6s=
Subject key identifier: 61:3B:EA:55:0E:72:6D:7D:52:F1:43:00:2A:00:B7:84:D7:04:8A:FC
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 019A4DE1D8D37B16F1C3627B484D75B26201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: E/WRKkmxe1U9Q0dmS0eQfYbIzTCZfnVa0GlgUi0OXbw=)
2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d8:d3:7b:16:f1:c3:62:7b:48:4d:75:b2:62:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=613bea550e726d7d52f143002a00b784d7048afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:86:38:2c:d6:e1:83:b0:24:a2:a5:0e:b6:
4b:0b:40:c1:a6:86:19:db:5e:7b:1a:fc:a9:49:ee:
82:f4:43:34:1a:39:87:0d:fd:2d:10:29:e3:c6:e7:
0a:68:34:31:61:73:aa:78:53:d4:c7:7e:c4:c4:01:
71:ef:2b:3c:8d:f6:90:c9:ee:a5:94:8f:d3:f7:df:
6e:f0:f9:30:bf:f6:76:4e:03:2d:bc:a5:bb:c6:db:
80:b2:81:07:d1:27:98:d8:f8:18:ac:49:83:43:d9:
0e:d4:f7:b1:e3:84:ad:10:2a:9c:ed:b8:b9:7d:a9:
2e:f2:47:4d:50:c9:41:05:8a:a7:08:42:34:05:b0:
57:da:ca:07:c8:1e:92:1b:01:e0:1c:23:8c:fa:98:
1c:f1:c5:13:36:3f:31:d0:b9:a3:39:55:43:45:1d:
df:b9:02:34:44:9b:82:b7:2d:50:6c:7b:e3:9b:5c:
e1:88:1d:71:29:06:86:e6:1e:4c:b8:9b:78:80:b0:
d2:04:19:45:8f:b7:8c:18:54:56:d4:75:ac:f2:15:
83:9e:3b:47:f1:10:5b:75:97:e7:e9:f4:33:1b:8b:
d0:62:87:28:c4:be:4a:eb:59:0f:d0:0a:b2:51:70:
33:95:1b:7a:0a:2c:b5:42:a3:c0:dc:22:7a:49:cb:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:EA:55:0E:72:6D:7D:52:F1:43:00:2A:00:B7:84:D7:04:8A:FC
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:11:84:73:73:9a:4b:04:e5:67:d8:25:5a:14:36:a3:31:7f:
b0:82:8c:2b:e8:a0:ea:48:62:4d:40:4d:1a:9e:04:c0:78:46:
4f:de:61:bc:f1:7c:4a:1b:28:9d:d1:be:0e:a7:5b:45:6d:50:
6c:e6:dc:ec:4f:dc:94:9d:3f:0a:91:e1:d0:24:b0:01:49:ef:
38:d7:00:f8:ba:a2:df:88:38:47:3d:6e:66:84:4c:db:18:97:
61:46:6f:a7:eb:e1:12:f0:c8:43:b9:3a:78:d8:fe:00:f7:c6:
7e:15:69:13:e5:56:66:a6:65:ab:cf:eb:ac:09:0f:e3:a3:fc:
cb:14:11:99:98:3f:34:65:19:80:30:4c:da:f4:ac:7b:83:b0:
7c:4e:a1:b7:0a:78:bb:07:bb:bd:8a:90:b6:36:30:52:0c:8d:
9d:9a:9f:59:37:c7:e5:06:67:1d:4a:c9:0a:45:d3:6d:53:61:
92:f2:bc:94:99:e4:ac:69:94:d2:98:39:0b:85:40:69:2d:d7:
35:49:84:6c:35:6b:ef:89:71:6a:89:fb:7c:92:29:63:d1:1b:
3c:16:62:5b:87:2f:93:a5:f2:f2:c3:da:e4:26:0a:b9:e5:c4:
b8:70:f9:0e:8e:6e:75:73:e3:3f:e4:12:b9:a4:2d:fb:c7:ff:
36:53:4f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:29 2025 by rpki-client