Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: ms1K5WAwLmpU2HtxIP5KNCVqH9+vbwUgG6u4WI4jCks=
Subject key identifier: 31:86:0B:4B:27:CC:D2:3C:E2:5E:B2:09:2A:BC:79:90:D9:24:B0:E6
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0198D65F0A0455B8008E2BA1D804200581AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: /7rfxN3riP+9CFvu5xFIQDuf9/EHs/3SLd0XPCGvGPE=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0a:04:55:b8:00:8e:2b:a1:d8:04:20:05:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=31860b4b27ccd23ce25eb2092abc7990d924b0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:73:1b:d9:4e:39:fe:a5:e9:53:eb:81:c2:
0c:eb:c6:4e:48:8c:7f:c0:c0:ec:4a:ab:8c:05:9c:
b7:98:c7:ac:ac:4c:49:a8:81:bc:6a:55:c1:4d:aa:
8b:11:1c:db:ce:ee:83:82:a0:77:5b:e1:6f:95:04:
55:52:40:d1:b3:fe:c1:5a:10:59:51:fc:fd:f8:80:
65:73:37:21:9f:9f:c4:03:f1:1a:dc:f2:91:95:5f:
38:13:b8:6c:b2:ac:4d:38:cf:1a:43:e4:4f:36:ff:
0e:60:93:a1:c4:13:56:6e:17:30:f2:d5:55:72:77:
71:07:dc:b0:ca:2b:6d:93:4a:11:f4:32:df:12:89:
f8:04:cb:f1:09:ae:e6:46:ef:f6:c7:3d:38:3a:e6:
90:29:7a:95:c2:4c:b3:5b:0f:dd:d3:6e:22:e1:1f:
2a:75:07:eb:25:18:20:97:84:6e:35:be:5c:f3:98:
8d:5d:f6:13:f6:ca:b5:61:74:29:bc:aa:7a:36:b2:
ce:d8:12:aa:b3:2e:04:6c:c0:29:3c:65:52:41:e3:
c6:6b:6a:f2:3c:22:10:66:51:34:2b:6e:47:f9:75:
81:e5:2e:cd:ed:2d:d4:77:b1:93:24:52:40:07:06:
86:30:b9:17:af:94:94:07:c3:29:5c:a6:ee:ae:01:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:0B:4B:27:CC:D2:3C:E2:5E:B2:09:2A:BC:79:90:D9:24:B0:E6
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:db:59:a2:33:5b:1d:3b:c0:cc:25:c7:a8:b3:0e:e5:23:80:
c0:66:6d:dc:74:95:75:42:25:74:c1:c4:3a:d8:62:80:b9:80:
52:49:68:8c:95:9a:43:86:d1:53:11:5d:44:52:a6:bb:9d:bf:
e3:e7:5f:28:6e:72:65:c9:b5:99:3e:66:e3:4b:e4:76:90:8a:
64:47:64:21:9b:3e:ef:04:37:00:c1:c4:6b:04:57:ff:97:e2:
8c:ea:09:b3:31:d2:24:fc:c0:59:2d:a1:d2:43:ed:9e:bf:45:
95:71:66:54:19:32:1b:3f:f7:0f:87:c0:84:d6:ef:6e:f0:94:
bb:7d:d0:1e:a7:e1:86:28:0b:d4:e6:15:76:f0:c7:ee:f4:eb:
e7:eb:37:33:ba:4f:17:23:f1:1a:e2:9c:73:97:47:10:07:81:
c1:4b:8d:eb:c6:d2:03:a9:29:c0:c6:1f:cf:2d:3d:be:22:db:
fd:cf:c5:1c:91:62:cb:ea:fc:6f:b9:41:cb:c9:6e:6e:ef:21:
40:00:06:a6:3e:97:58:0e:f5:2a:49:c0:f0:c1:af:ca:00:30:
7c:0a:81:09:35:06:73:b4:ba:f5:ab:68:88:79:7e:47:10:41:
2b:79:8a:34:13:cf:99:44:17:dd:e3:16:44:62:a4:85:b6:df:
1b:31:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:06 2025 by rpki-client