Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: alJP/gQsUqZLF5R53uA9uV8IJQSSDA/uKyMABcJgqfU=
Subject key identifier: AE:BD:C7:97:89:E4:6B:6F:08:DE:F3:31:93:04:95:00:E8:80:02:BE
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 0199FC8F52B778CDA3FB146BC0A7B23F3CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1330
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 6926BFG1a3nu4XxJdMMeU8HbktrLsX0wo2fjbNOrOZQ=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:52:b7:78:cd:a3:fb:14:6b:c0:a7:b2:3f:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=aebdc79789e46b6f08def33193049500e88002be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:c1:2b:d4:80:26:0f:57:5c:72:01:57:73:
62:a5:0b:22:9d:db:a2:b4:30:d2:a0:4a:78:4f:fa:
32:4a:79:c5:e4:ec:40:f4:aa:41:5e:ee:42:0a:ac:
a9:15:9c:60:c6:4a:22:25:75:5d:53:25:41:60:80:
b6:84:57:ff:e1:88:47:c8:07:98:c6:18:2b:0b:6c:
c7:6e:fb:3f:ee:18:c9:c4:9c:58:0b:ec:ed:02:b6:
13:ed:bf:5e:26:ee:80:8f:2f:60:09:34:3c:ba:3b:
d5:c9:08:65:c2:98:64:3b:c6:a4:a9:36:ca:67:98:
af:0e:03:94:80:8c:d6:aa:26:7a:f6:39:11:63:7f:
0b:b7:08:29:75:e0:1e:07:f4:94:55:0e:df:d8:5e:
7c:38:5f:d1:e0:d8:ce:03:a3:22:54:73:18:91:50:
2e:70:fe:2d:5c:b6:ae:2d:db:98:a7:51:bd:33:d2:
3c:7b:7a:4a:a1:97:71:1c:bd:cb:7d:44:f6:34:68:
44:79:1d:09:66:d1:42:2e:a9:9e:32:f4:37:50:73:
d4:c3:e8:31:d4:c8:3d:a2:9e:02:eb:9f:d2:b6:fb:
44:24:ee:81:64:0e:9d:68:f1:d8:77:5e:5e:5b:ad:
e0:e3:42:2a:fd:a2:a8:a3:a0:e8:0d:0b:5c:5c:c1:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:C7:97:89:E4:6B:6F:08:DE:F3:31:93:04:95:00:E8:80:02:BE
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:50:c9:b4:92:64:e1:01:3c:28:e7:f8:52:00:62:7c:b4:f9:
64:f0:33:c1:f3:c4:d8:c9:d8:bc:91:20:0f:2a:52:2b:5c:3e:
2f:cf:b7:9a:3a:a9:81:a4:a6:fa:e4:54:d7:99:d6:db:50:8c:
d1:2f:29:fb:f4:fa:77:78:b5:a6:2e:9e:75:e0:99:9d:0b:67:
36:f0:be:b6:05:98:f5:83:39:d5:57:da:4d:ce:e4:4e:ed:1f:
e7:2f:60:40:d6:fe:69:2f:84:92:c5:e2:e5:6a:8a:fc:b6:f3:
09:47:41:93:9c:7b:eb:ca:66:51:37:be:92:df:65:20:09:cd:
31:a6:c8:91:a4:bf:f5:6a:ab:42:bc:48:2c:f3:45:4b:46:ab:
95:02:44:b0:73:15:19:5d:e5:a1:11:0c:87:8f:e3:0f:30:a9:
cc:22:28:eb:de:5b:e5:ef:2c:1e:c0:5a:20:d2:91:df:ba:1a:
7b:2c:81:c0:80:56:f3:78:22:39:22:eb:b3:53:54:26:30:0c:
cf:9c:70:20:0d:5d:81:07:40:12:d3:7c:c9:2d:9e:35:a2:72:
a8:f3:08:a2:f9:27:89:83:ac:ca:ea:28:77:cc:ce:2a:0a:76:
f5:6d:5c:aa:b5:73:9c:b3:00:ae:6e:5b:95:47:8e:f3:06:83:
8e:a5:45:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1K3eM2j+xRrwKeyPzziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz
Mjc2N2QwHhcNMjUxMDE5MTMwMTE1WhcNMjUxMDIwMTMwMTE1WjAzMTEwLwYDVQQD
EyhhZWJkYzc5Nzg5ZTQ2YjZmMDhkZWYzMzE5MzA0OTUwMGU4ODAwMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHzBK9SAJg9XXHIBV3NipQsindui
tDDSoEp4T/oySnnF5OxA9KpBXu5CCqypFZxgxkoiJXVdUyVBYIC2hFf/4YhHyAeY
xhgrC2zHbvs/7hjJxJxYC+ztArYT7b9eJu6Ajy9gCTQ8ujvVyQhlwphkO8akqTbK
Z5ivDgOUgIzWqiZ69jkRY38LtwgpdeAeB/SUVQ7f2F58OF/R4NjOA6MiVHMYkVAu
cP4tXLauLduYp1G9M9I8e3pKoZdxHL3LfUT2NGhEeR0JZtFCLqmeMvQ3UHPUw+gx
1Mg9op4C65/StvtEJO6BZA6daPHYd15eW63g40Iq/aKoo6DoDQtcXMGv6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK69x5eJ5GtvCN7zMZMElQDogAK+MB8GA1UdIwQY
MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt
NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj
LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVDJtJJk
4QE8KOf4UgBifLT5ZPAzwfPE2MnYvJEgDypSK1w+L8+3mjqpgaSm+uRU15nW21CM
0S8p+/T6d3i1pi6edeCZnQtnNvC+tgWY9YM51VfaTc7kTu0f5y9gQNb+aS+EksXi
5WqK/LbzCUdBk5x768pmUTe+kt9lIAnNMabIkaS/9WqrQrxILPNFS0arlQJEsHMV
GV3loREMh4/jDzCpzCIo695b5e8sHsBaINKR37oaeyyBwIBW83giOSLrs1NUJjAM
z5xwIA1dgQdAEtN8yS2eNaJyqPMIovkniYOsyuood8zOKgp29W1cqrVznLMArm5b
lUeO8waDjqVFzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:24 2025 by rpki-client