Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: aiNo6S9sypKAGygKkWGbWsGGSBcLmP+ZFYqq+ZCXnao=
Subject key identifier: 4D:0A:0C:1F:D9:91:0B:DD:F3:8D:E0:65:46:D6:75:13:7A:33:AF:ED
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0197B6A198EF3E840A4A32BEE8743FC65C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: +2iwX6EbBkRXE9MDaSSb1vzvvoBEce5lrTVQeQxBz+Y=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:98:ef:3e:84:0a:4a:32:be:e8:74:3f:c6:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=4d0a0c1fd9910bddf38de06546d675137a33afed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:ee:ea:0d:ff:4d:6b:4b:eb:a6:c9:99:24:
02:65:42:80:01:a6:ca:98:cd:98:8f:e0:a7:07:88:
60:0d:66:eb:70:80:58:04:df:53:41:1c:ae:0c:e4:
b0:38:86:22:ff:2b:a7:0b:11:34:32:37:f9:5d:a7:
f2:93:2d:7d:9d:6f:b5:87:19:8f:0d:b2:28:4d:98:
77:0a:f9:d5:9c:6c:1d:cc:61:bf:5f:76:b5:0c:f9:
f3:f4:5d:cd:f2:92:60:1e:40:1b:5a:56:c7:ed:d4:
71:52:16:03:e1:2a:9f:7a:a1:a8:3b:da:6d:2f:8a:
ca:9d:dc:9d:f4:b7:ac:ab:38:eb:a5:27:a9:0b:66:
89:97:73:86:5b:2b:e1:0a:70:1a:51:f2:3a:fe:17:
fa:db:67:c3:89:32:74:e7:6f:66:c0:15:2e:42:e6:
ac:d5:4f:4d:72:a1:e4:f0:7b:97:97:20:fe:31:5b:
16:d2:df:b9:a7:06:22:1f:e7:3c:00:8b:fe:01:1f:
c8:41:77:12:ca:13:5c:21:c0:31:a1:15:57:e9:cf:
67:fe:14:f6:99:d5:bb:19:d8:cc:74:3a:02:a5:f1:
3b:30:9c:f6:3d:f0:ee:49:fc:7d:8f:a3:19:0f:c2:
00:ae:d6:35:f0:76:45:09:55:73:aa:80:0f:43:12:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:0C:1F:D9:91:0B:DD:F3:8D:E0:65:46:D6:75:13:7A:33:AF:ED
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ed:03:29:fd:7e:59:79:e8:db:96:fb:06:00:5a:ae:7a:a7:
89:a4:e4:c2:db:45:86:b7:16:9e:09:c0:cc:e3:91:de:e0:75:
6a:b4:d1:35:d7:70:ee:03:cf:fb:8f:40:d0:fa:64:b2:e4:a4:
7a:01:4e:26:d7:f5:77:92:8a:81:53:1a:24:a7:51:b3:07:1a:
4c:e7:2c:83:f7:84:4a:a3:13:98:1f:76:35:73:8c:17:a2:e7:
bb:34:b9:d1:38:d1:e5:73:00:12:3a:b1:3d:2b:e3:d1:c5:09:
30:e4:3c:00:46:c5:31:3c:0d:a8:c6:72:ab:07:35:1a:9e:f9:
b2:11:e4:a4:3d:c7:5e:e2:0c:92:0b:03:57:0d:29:2d:1c:1e:
e7:ca:54:a1:84:5a:5e:19:3c:19:52:c5:32:9a:86:50:e9:cd:
c6:9c:48:bd:bb:9c:b1:35:18:de:64:a5:d4:ea:dc:93:a8:d0:
56:69:fc:01:fa:25:92:01:08:6e:bb:49:74:fe:79:e2:df:e5:
18:4f:4f:ce:21:1a:e8:5d:ef:44:57:ba:e5:a4:39:47:b0:bc:
77:fa:7b:d4:c2:8e:c7:e0:0b:95:23:74:8e:cc:6c:56:3c:06:
59:ae:fb:9a:dc:9c:a7:04:e0:a2:dd:34:30:ec:5c:ad:b9:31:
ac:61:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:08 2025 by rpki-client