Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: /B94X4Lm+Ciip8chp0rxECMR5pNr1pSagU6qfORJTYA=
Subject key identifier: 33:A4:F7:FE:4F:15:91:86:74:89:F2:CF:0D:FB:DD:18:5F:03:00:F8
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 0197B7453421AA4924EBEB6AD5E1C8400B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1203
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: c2lqf3vmUBpHq+yCDnNdYywjbamZpSnBtcMRXtrYjWA=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:34:21:aa:49:24:eb:eb:6a:d5:e1:c8:40:0b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=33a4f7fe4f1591867489f2cf0dfbdd185f0300f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:81:92:e5:12:39:7e:0b:f4:4f:c9:ed:40:
74:ce:f5:58:b0:a0:94:53:f0:c1:19:77:aa:16:9e:
03:5a:87:1d:d2:a2:10:e1:c2:45:d4:cc:00:0d:90:
d8:a2:2e:28:f3:2f:3f:f5:af:e7:9d:c4:80:02:a6:
43:cb:e0:52:76:4a:76:2a:53:00:80:0a:24:20:15:
ae:79:cd:07:d5:5b:7b:d1:74:21:fa:87:02:9b:8f:
5a:6d:c1:0b:6a:09:0a:21:a4:a5:e0:27:40:a1:ea:
8f:a8:af:d8:1d:59:0f:1a:f6:d1:3d:53:1b:04:8e:
69:45:29:27:31:4d:d3:07:92:e7:83:1a:32:5c:e3:
e5:da:92:a7:88:aa:7f:e6:47:fd:95:db:8c:7d:4d:
92:11:fb:f2:46:1b:dd:64:aa:d7:c7:82:3c:61:3b:
c6:9e:da:b1:1f:1a:0c:e2:fd:23:23:18:fb:69:71:
57:d5:6a:40:1d:92:e8:89:b7:44:65:be:3e:3a:bb:
d8:ab:be:5a:df:fc:c5:36:51:1a:ef:fd:ad:0a:d6:
2d:c3:c1:47:a8:80:61:2c:7e:2a:74:33:ea:40:fd:
43:5d:b8:1d:df:18:52:4a:b1:f6:d3:0a:b4:46:11:
d2:16:32:19:8d:95:e0:6d:04:5a:0e:55:aa:0f:12:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:F7:FE:4F:15:91:86:74:89:F2:CF:0D:FB:DD:18:5F:03:00:F8
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:95:1d:fa:b1:af:c5:37:b6:b4:88:17:4b:9d:06:8c:e4:
dd:a7:79:cb:20:a4:01:f5:07:1d:4f:8c:60:7f:a6:03:66:a1:
95:4d:84:3d:0c:06:4a:1e:1a:c4:fd:18:de:53:44:69:fc:18:
30:9d:08:c4:9b:df:cb:78:46:a0:f2:c3:d7:8f:4d:98:50:13:
ea:b8:56:e8:e0:46:7a:a3:fe:5e:8c:66:bb:00:1d:b1:c8:d6:
8e:7a:54:7f:38:3c:6f:78:7f:09:9d:d5:2a:35:5f:89:ec:ba:
cd:61:45:65:46:e0:2c:29:82:4d:fe:7d:5c:39:47:93:44:dd:
43:ee:50:0a:c2:45:ba:d8:a6:bd:0e:fa:cf:cc:4d:63:60:e4:
e6:d9:8c:bf:bf:f2:31:b1:ac:a7:02:8c:ee:44:1e:59:9a:24:
f8:9d:56:25:3f:a3:5e:ca:c7:c5:af:ab:ee:f1:8d:ba:be:62:
45:73:de:3c:27:ab:3e:de:f3:65:c4:51:b0:ff:35:2f:4a:99:
4a:a7:a0:6f:8d:94:f8:a5:8f:ee:07:68:b4:cd:7f:60:3d:ac:
3d:a2:9c:1e:e5:1f:68:07:37:7c:70:81:a2:06:40:ca:fc:2d:
bb:1b:e4:7f:6b:c2:0d:7d:02:af:0f:4f:62:64:6b:1e:10:d7:
f2:dc:08:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTQhqkkk6+tq1eHIQAtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjUwNjI4MTYwMDU1WhcNMjUwNjI5MTYwMDU1WjAzMTEwLwYDVQQD
EygzM2E0ZjdmZTRmMTU5MTg2NzQ4OWYyY2YwZGZiZGQxODVmMDMwMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWSBkuUSOX4L9E/J7UB0zvVYsKCU
U/DBGXeqFp4DWocd0qIQ4cJF1MwADZDYoi4o8y8/9a/nncSAAqZDy+BSdkp2KlMA
gAokIBWuec0H1Vt70XQh+ocCm49abcELagkKIaSl4CdAoeqPqK/YHVkPGvbRPVMb
BI5pRSknMU3TB5LngxoyXOPl2pKniKp/5kf9lduMfU2SEfvyRhvdZKrXx4I8YTvG
ntqxHxoM4v0jIxj7aXFX1WpAHZLoibdEZb4+OrvYq75a3/zFNlEa7/2tCtYtw8FH
qIBhLH4qdDPqQP1DXbgd3xhSSrH20wq0RhHSFjIZjZXgbQRaDlWqDxLIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOk9/5PFZGGdInyzw373RhfAwD4MB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG6VHfqx
r8U3trSIF0udBozk3ad5yyCkAfUHHU+MYH+mA2ahlU2EPQwGSh4axP0Y3lNEafwY
MJ0IxJvfy3hGoPLD149NmFAT6rhW6OBGeqP+XoxmuwAdscjWjnpUfzg8b3h/CZ3V
KjVfiey6zWFFZUbgLCmCTf59XDlHk0TdQ+5QCsJFutimvQ76z8xNY2Dk5tmMv7/y
MbGspwKM7kQeWZok+J1WJT+jXsrHxa+r7vGNur5iRXPePCerPt7zZcRRsP81L0qZ
Sqegb42U+KWP7gdotM1/YD2sPaKcHuUfaAc3fHCBogZAyvwtuxvkf2vCDX0Crw9P
YmRrHhDX8twInQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:15 2025 by rpki-client