Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: Ute755WUZ9eI8AfJABgFNw5cjQND1U3iegi25IFPs1Q=
Subject key identifier: 2B:4C:7D:71:B2:69:AE:26:71:7D:C0:56:F6:E0:F0:D1:C3:9C:72:44
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0199FDD8C0BE10190EE08300703633609387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:04 +0000
Manifest this update: Sun 19 Oct 2025 19:01:04 +0000
Manifest next update: Mon 20 Oct 2025 19:01:04 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: wVJanfJVDBtPIKqijDePCxco6YrnvtDHFs3u0l2oNPo=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c0:be:10:19:0e:e0:83:00:70:36:33:60:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Oct 19 19:01:04 2025 GMT
Not After : Oct 20 19:01:04 2025 GMT
Subject: CN=2b4c7d71b269ae26717dc056f6e0f0d1c39c7244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:1d:94:31:e7:bc:37:23:96:45:7c:6f:81:
4c:7a:50:08:ad:65:e2:7d:32:48:bb:50:a1:f0:d1:
9b:49:23:a0:4f:7a:b8:ba:88:60:d7:b2:f6:fe:ee:
7f:7a:2e:4f:f4:25:47:3c:1c:33:f9:06:f7:64:9c:
e9:0f:f6:fe:b9:df:3e:a4:1d:58:b1:db:d9:3e:10:
65:af:fc:79:ef:58:60:02:85:38:0b:40:b9:fd:3d:
10:4d:ab:2e:39:e8:7c:72:68:b7:40:de:51:cd:fc:
a0:52:ed:a8:8d:da:83:c2:90:1a:19:b2:02:ef:66:
09:3f:ea:dd:d2:e5:02:37:bc:30:94:b0:09:98:72:
be:5f:91:77:d2:7b:73:77:2d:14:89:a4:41:57:3a:
47:5d:b2:a2:29:bb:8f:c2:78:8c:f6:98:d1:51:5d:
4d:93:14:fe:d3:f9:43:1d:42:0b:9b:dd:c5:29:f9:
a7:e3:ff:bd:da:f1:50:45:c8:12:70:0b:51:0f:77:
cf:c4:d0:f3:67:05:2f:b2:99:f0:c8:a9:2d:c8:78:
46:65:12:ef:d5:81:ef:36:a0:dd:a7:1c:57:de:c8:
fc:e2:0c:e3:02:c5:09:c5:39:12:1a:a5:c9:3b:68:
23:d3:1a:a2:1a:eb:e2:f8:dc:f9:c2:00:06:f8:7a:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:7D:71:B2:69:AE:26:71:7D:C0:56:F6:E0:F0:D1:C3:9C:72:44
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:16:a9:ff:ff:3c:0e:eb:86:9d:0a:04:b9:d3:bc:f8:54:de:
ce:08:57:56:31:bd:6e:b2:94:37:ed:d7:1c:ff:84:17:d6:ce:
00:59:42:09:36:03:00:8d:ba:a2:9e:77:58:61:db:6e:53:95:
96:40:db:59:76:63:1f:d3:41:23:4a:7d:78:76:7b:2b:5c:46:
72:af:74:13:2f:ae:0c:f9:d9:01:20:8a:48:d0:da:b2:cb:e2:
16:2a:79:d2:ea:97:7b:e0:29:40:7a:3f:0a:0c:e4:c5:7e:c6:
13:9a:4a:45:7e:ff:34:1b:fd:2c:ef:eb:92:f1:45:94:09:b1:
22:74:7a:27:a6:2a:87:a7:72:b6:87:51:9a:30:20:98:75:12:
4e:09:39:4e:d3:30:9b:38:fd:e6:be:4a:87:7e:a1:cc:8c:74:
48:27:13:b6:fb:ec:48:90:f8:7f:7d:d0:cf:8b:93:44:77:94:
ea:f0:05:87:88:1a:c4:7a:bd:09:2e:1b:81:33:d0:a7:61:74:
f9:9f:f1:73:b9:1f:91:19:53:a9:d9:e1:cf:11:f6:c3:59:a4:
9b:09:5c:db:66:ee:81:c0:00:ad:1f:32:dc:31:c3:54:0e:8c:
8c:18:e0:d9:92:5c:75:71:d3:41:14:78:fb:eb:9c:ee:9e:12:
98:b7:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:09 2025 by rpki-client