Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: oFqkZKHcxD8o2HvDPMdcLFY5HKbf95VH9QkbnOR3//w=
Subject key identifier: AF:C1:07:16:54:8D:CA:3B:8B:69:F0:75:C8:8E:8B:A0:98:D7:27:98
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 0199FC58A634DB72E8566DD9DC8EB879EB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 16CD
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: z79efOIt80Be8Wu4cBvT0sYRBsJC2hjcAjfJWk+EdsI=)
2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=)
3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=)
4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a6:34:db:72:e8:56:6d:d9:dc:8e:b8:79:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=afc10716548dca3b8b69f075c88e8ba098d72798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:10:25:5b:34:7d:22:0e:48:26:c7:26:a9:
9d:8d:25:ed:49:3c:e9:b5:11:2a:06:95:34:92:80:
74:d7:b9:64:fc:89:30:98:19:bd:c4:c7:59:4b:59:
85:82:d1:31:10:58:c3:43:88:4a:3e:1b:3f:8b:d2:
8c:5c:56:19:24:fa:5f:10:1c:c3:69:22:53:47:85:
e8:60:19:7f:f5:69:b9:6b:09:31:07:fa:7a:7e:42:
4c:8e:ce:04:1b:cc:0e:2b:4d:44:3a:43:2a:53:17:
7f:10:a6:a0:82:59:0a:02:a3:1f:4f:e3:03:17:4d:
9c:12:b4:8b:2d:22:39:cb:76:16:95:e3:06:c2:f3:
dc:9f:06:c6:b6:43:e1:9d:4b:22:42:36:8b:ac:1e:
4c:d3:50:4e:ba:b4:0c:8e:ea:c7:f7:2a:9a:7c:9b:
d7:22:a9:26:ed:ae:2b:93:b4:b0:68:07:d7:f6:c2:
a9:48:ae:c5:09:9f:72:28:5e:86:3f:7a:eb:69:98:
26:8d:e8:78:52:60:4f:e4:aa:a2:15:99:93:ca:08:
31:46:c3:57:9c:6b:df:63:0e:7f:a2:fd:0e:48:de:
d2:02:6b:e0:8a:5e:31:5f:f4:14:61:03:41:8a:30:
ba:60:07:9e:4f:a1:7c:ac:be:b4:68:12:60:cd:f2:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:07:16:54:8D:CA:3B:8B:69:F0:75:C8:8E:8B:A0:98:D7:27:98
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:97:35:24:9f:b8:bf:18:8d:1b:15:08:f7:2f:d2:99:86:38:
3b:cf:65:6f:d1:ad:b1:b3:0c:b9:e6:b8:f1:ed:23:2e:65:6c:
ba:6e:c5:e4:6a:30:1a:aa:6e:10:06:29:82:97:bd:22:82:0a:
1b:15:60:dc:7e:53:6f:77:75:a4:e7:11:2f:45:f3:de:cd:d4:
b7:d1:08:1e:23:5e:6a:f9:3d:26:5f:47:3b:b7:79:9c:41:cd:
b2:2f:df:62:fc:eb:b3:af:46:9e:1d:fd:72:95:97:e4:f5:d1:
42:8f:b1:45:73:df:4d:9b:3b:9f:e5:85:1c:0a:b1:c8:4a:94:
7c:d9:3d:b7:88:67:f9:de:3e:89:7f:0f:56:64:e7:be:8b:ed:
ad:7d:e9:a1:db:31:fc:f0:3a:90:08:dd:fa:d9:57:1d:95:ea:
cb:96:89:79:3a:6e:58:1b:fd:90:b3:32:fd:06:37:72:50:58:
ea:e0:7b:61:57:4d:40:e6:a7:52:80:cc:2a:56:fe:68:62:35:
b4:7d:34:43:d4:2f:93:d8:93:c5:25:69:4f:8f:13:12:c0:31:
a5:a7:93:4f:a3:42:7e:11:6e:af:f5:2e:d6:d8:49:b5:ad:e5:
2a:4e:d2:4b:68:71:fb:a6:00:9f:fd:01:dd:4e:3c:05:22:89:
14:57:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:53 2025 by rpki-client