Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: +ZT8yV/pAuXZqQ4K2VgFCVfCr3hytjIpGQbSjk62i4M=
Subject key identifier: B7:70:DC:2B:DB:9B:DE:B1:FB:C5:FA:12:4E:BF:80:36:5A:2E:2F:00
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 0198D515D71ACA63F29C074B5B82E49FCCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1297
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: XKMuhUbnxNVO1yPJxDgmBEilDZgaht4yeysXj7X2nuw=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d7:1a:ca:63:f2:9c:07:4b:5b:82:e4:9f:cc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=b770dc2bdb9bdeb1fbc5fa124ebf80365a2e2f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:3a:ca:e4:45:dd:61:67:42:77:56:bc:f3:
d8:de:47:ef:32:7e:40:b0:cb:5b:f0:7e:df:c7:e5:
bd:ad:58:c1:33:cf:54:61:8d:3c:01:6e:40:13:1c:
ca:d3:ea:7a:ae:6c:f9:71:4d:28:52:81:c2:c6:aa:
99:ca:48:a5:8c:92:c2:57:44:70:d4:e4:ce:07:30:
81:c4:44:9e:d6:a6:b6:d1:db:60:b5:7a:26:f7:ac:
2e:a5:8e:77:0b:1e:9a:e7:4b:e2:b8:94:d2:5d:22:
1a:ba:5d:d2:97:71:8b:63:cc:f6:e2:9a:e3:73:6b:
0c:76:c4:e3:95:b8:0b:8a:17:be:84:59:cb:f6:37:
25:15:b3:cc:87:f1:71:ea:13:ac:5e:ad:f3:ef:58:
58:91:76:3c:dd:80:9b:c1:23:b6:d6:5b:5f:81:64:
f4:7e:c7:76:58:07:bd:66:bb:df:64:2b:d3:52:cc:
a6:eb:d0:ec:42:2a:50:c6:b5:52:54:bd:73:b6:33:
57:3e:26:cc:9d:fe:ae:e5:95:9d:05:a4:0e:92:94:
f9:25:4f:fa:0c:db:14:93:3a:84:5e:8f:cf:0a:82:
21:b8:ce:da:b2:65:a9:a5:42:fc:20:01:5c:8c:a3:
f7:18:c8:25:6e:ef:e3:66:55:94:33:dd:cb:d6:24:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:DC:2B:DB:9B:DE:B1:FB:C5:FA:12:4E:BF:80:36:5A:2E:2F:00
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1f:93:48:9a:5d:d2:84:74:56:37:52:e6:58:cc:8d:01:75:
53:af:81:ff:a2:12:56:c2:86:02:b9:c7:56:2e:c4:a3:f9:6f:
3f:e0:07:32:4e:13:fc:96:ff:9c:31:2d:cd:6a:a8:d5:95:a8:
75:a9:4e:33:9e:1f:b7:79:a5:d0:e5:36:ea:d0:fd:d8:3c:66:
ae:47:4f:e6:db:43:0b:f8:f4:b3:70:72:6b:b3:81:79:4a:b7:
e5:53:91:8d:0e:84:53:22:03:33:e0:37:55:6b:f0:99:8e:12:
a2:27:4a:84:a9:5b:00:89:91:06:c6:d0:6f:c1:bc:bd:ab:cb:
d6:3f:7e:bf:59:71:48:13:2c:c4:21:cb:db:a8:b3:1e:02:51:
1c:33:17:39:d6:e5:c4:de:c5:4f:98:f1:a4:b7:94:1a:56:db:
a1:3c:d1:aa:35:13:54:47:29:85:dd:7f:e9:71:29:af:0c:ca:
6a:37:52:53:84:c6:32:03:fd:f4:ca:cc:b3:e4:e7:b9:40:c8:
5f:ca:31:25:9e:2b:d0:17:c9:b6:d8:4b:72:c1:d8:3c:de:e8:
98:49:c0:a5:5b:7f:4a:20:61:ca:4b:d4:e7:0b:25:a1:51:a5:
96:51:2f:d5:39:2f:cf:30:d1:6f:58:92:26:5a:6b:03:78:2b:
0c:10:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:43 2025 by rpki-client