Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: WJ1tKYVJXlG7HVZ0eUJaDEIODwEW9jGsEemuDktMjWo=
Subject key identifier: 40:1E:4D:ED:B9:01:B4:D6:D9:8D:83:54:3F:60:FB:B4:98:15:23:1C
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 0196C20285D2A30C31D1C25A3C8D2D082B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1184
Signing time: Mon 12 May 2025 01:01:07 +0000
Manifest this update: Mon 12 May 2025 01:01:07 +0000
Manifest next update: Tue 13 May 2025 01:01:07 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: FVM7jnZ2pbicCaDgoAkwKgjJo0UHdL3updzRVB6TcVY=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:85:d2:a3:0c:31:d1:c2:5a:3c:8d:2d:08:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: May 12 01:01:07 2025 GMT
Not After : May 13 01:01:07 2025 GMT
Subject: CN=401e4dedb901b4d6d98d83543f60fbb49815231c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:97:4f:2e:03:9a:8c:ca:21:ca:e4:bc:80:
22:b9:62:f9:7b:45:fb:eb:88:ac:ce:ff:3f:9e:aa:
52:4d:d9:9f:72:36:fd:44:73:e9:bd:86:57:c8:f2:
86:92:5b:a8:56:6e:01:c2:ff:2f:d3:74:0b:c1:dd:
53:48:f4:92:ed:63:fa:f6:f4:75:7d:3d:88:d1:b1:
6d:61:8c:cc:13:d7:45:e1:eb:e1:47:6d:c9:2d:f3:
bb:e0:09:fb:a1:87:57:7a:30:59:43:31:63:7e:3e:
91:fc:de:94:d5:6b:db:98:6c:8f:be:77:36:98:4a:
aa:4a:c5:00:6d:9a:81:5e:0e:41:2f:3f:ac:8e:8c:
c0:8f:8e:92:07:84:81:1a:cb:99:44:84:e8:42:17:
6c:39:a6:39:0c:40:5d:82:32:02:d7:7a:82:c0:35:
b1:3d:36:1a:6f:9f:e8:59:9b:30:7d:d7:fa:5f:ab:
81:b2:54:73:c7:f9:6c:97:28:54:58:e6:0a:a5:17:
e6:0f:99:b0:03:e1:e6:62:52:56:82:d9:5c:e3:db:
98:4f:6b:51:99:b9:f7:cd:e3:f7:ea:6c:ec:42:24:
58:49:65:c5:31:83:fa:3c:a0:d9:fa:ae:43:38:65:
5e:b8:9c:0c:c9:2b:a4:a4:8e:86:08:54:f5:ab:70:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:4D:ED:B9:01:B4:D6:D9:8D:83:54:3F:60:FB:B4:98:15:23:1C
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:48:49:c5:f6:bb:c3:6d:63:17:75:0e:70:bf:40:6b:a7:94:
c4:ee:7b:5e:8b:6d:60:53:46:b3:13:97:0c:90:2a:de:b0:67:
db:45:1f:4b:7e:d0:09:2e:a5:32:5a:7f:b6:c2:99:46:0e:60:
a1:5e:0e:90:76:de:0f:a2:54:76:52:2d:d5:55:d9:a8:24:11:
3d:10:49:5a:16:63:61:41:60:46:4b:af:46:b1:45:b3:39:51:
28:9a:25:6d:e4:30:d3:bb:b5:6a:3d:75:7d:1e:62:29:65:1e:
66:a8:ce:fb:ab:f5:72:61:93:34:21:a0:ec:51:7b:f9:47:92:
b5:e4:fb:53:b0:8f:96:23:8c:00:9f:81:4b:51:c3:42:f8:c8:
4d:5c:38:46:5c:91:e4:e9:2c:13:6c:f0:3a:59:f6:aa:5c:fd:
27:02:58:b2:79:b2:c2:35:4c:9a:3c:5b:a0:8d:2a:5a:b1:db:
f3:66:2a:fe:46:a0:42:78:b3:f6:df:74:47:74:8d:33:af:32:
90:ca:f0:11:79:71:94:41:f9:14:e3:6a:79:84:f9:b3:f5:18:
aa:d3:82:1b:5b:3f:48:41:44:03:97:93:77:0c:36:ec:8a:01:
00:72:5d:f7:b3:4b:01:42:a9:a8:cf:77:ef:ba:49:86:d8:fb:
64:5e:6a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAoXSowwx0cJaPI0tCCtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjUwNTEyMDEwMTA3WhcNMjUwNTEzMDEwMTA3WjAzMTEwLwYDVQQD
Eyg0MDFlNGRlZGI5MDFiNGQ2ZDk4ZDgzNTQzZjYwZmJiNDk4MTUyMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T+XTy4DmozKIcrkvIAiuWL5e0X7
64iszv8/nqpSTdmfcjb9RHPpvYZXyPKGkluoVm4Bwv8v03QLwd1TSPSS7WP69vR1
fT2I0bFtYYzME9dF4evhR23JLfO74An7oYdXejBZQzFjfj6R/N6U1WvbmGyPvnc2
mEqqSsUAbZqBXg5BLz+sjozAj46SB4SBGsuZRIToQhdsOaY5DEBdgjIC13qCwDWx
PTYab5/oWZswfdf6X6uBslRzx/lslyhUWOYKpRfmD5mwA+HmYlJWgtlc49uYT2tR
mbn3zeP36mzsQiRYSWXFMYP6PKDZ+q5DOGVeuJwMySukpI6GCFT1q3A7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAeTe25AbTW2Y2DVD9g+7SYFSMcMB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUhJxfa7
w21jF3UOcL9Aa6eUxO57XottYFNGsxOXDJAq3rBn20UfS37QCS6lMlp/tsKZRg5g
oV4OkHbeD6JUdlIt1VXZqCQRPRBJWhZjYUFgRkuvRrFFszlRKJolbeQw07u1aj11
fR5iKWUeZqjO+6v1cmGTNCGg7FF7+UeSteT7U7CPliOMAJ+BS1HDQvjITVw4RlyR
5OksE2zwOln2qlz9JwJYsnmywjVMmjxboI0qWrHb82Yq/kagQniz9t90R3SNM68y
kMrwEXlxlEH5FONqeYT5s/UYqtOCG1s/SEFEA5eTdww27IoBAHJd97NLAUKpqM93
77pJhtj7ZF5qvA==
-----END CERTIFICATE-----
Generated at Mon May 12 05:42:46 2025 by rpki-client