Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: N5wWEhue2s8mm8FeEV4kgh0bW6pQ6QyJ3/51J3egFlY=
Subject key identifier: E8:F0:C5:F1:31:17:10:93:D2:75:AC:68:F4:CA:C9:E6:E5:B0:A1:7F
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 0198D5F1CCD0BC95B4DCDA7701E3898382DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 151D
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: mrt+pNYjFwdhZNYACNuWojw1V2/2/UD1++pVbZASK/w=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cc:d0:bc:95:b4:dc:da:77:01:e3:89:83:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=e8f0c5f131171093d275ac68f4cac9e6e5b0a17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:88:1d:80:5e:89:01:cb:61:3d:e4:b9:b7:
2c:59:d7:85:a2:e8:90:83:02:d7:d8:69:fd:4b:f9:
3f:d0:c2:4a:c3:46:a8:2a:be:e9:a3:df:41:d9:64:
85:01:27:e8:b9:c4:13:dd:f7:b6:7a:92:ef:07:ae:
03:f7:52:67:4b:0a:61:05:c2:73:f7:c5:5a:b3:bd:
b0:a8:8a:26:62:ff:e5:90:b3:b2:1b:b7:0b:cc:90:
84:f3:74:da:a1:49:f4:9e:e2:2c:a2:76:2b:32:35:
38:32:ee:d3:43:be:8a:60:8c:4f:60:51:29:dc:26:
df:10:36:0f:95:b2:7a:6b:e7:ed:66:16:6c:87:fa:
9f:a8:96:cf:c5:54:92:2e:51:00:5c:b2:1b:5d:37:
8c:25:9c:41:cf:70:da:52:14:9f:b7:db:78:08:1c:
99:93:60:19:02:b2:2c:83:c1:b1:f1:7e:90:61:9d:
52:32:6d:57:ba:e5:84:e2:a9:8c:fc:5f:d5:1c:6e:
cb:43:04:6e:d9:57:f7:d3:7b:88:d9:b9:a3:fc:cc:
20:34:e4:44:61:6e:e0:e4:62:ec:51:6a:b0:50:0c:
ec:b1:51:72:e5:19:44:bd:9c:f6:a4:b9:f6:03:c9:
f2:d1:d0:4b:c6:3a:68:25:05:73:b8:c6:87:a4:0c:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:C5:F1:31:17:10:93:D2:75:AC:68:F4:CA:C9:E6:E5:B0:A1:7F
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0c:1c:bd:65:42:50:94:e8:d4:31:54:25:fc:d2:a2:24:eb:
61:5e:7a:09:3e:91:d4:c1:63:1a:df:dd:05:5c:80:41:e6:94:
22:54:fe:83:4e:b3:8f:bd:d3:0e:32:85:0c:19:ad:d7:0d:a1:
8a:b1:b2:df:af:ee:3a:c3:4a:54:40:c8:ac:83:0f:82:02:7e:
60:1f:ba:d7:dd:09:14:76:33:85:18:58:8e:21:83:7a:70:f0:
63:ea:1f:ad:15:8a:14:ea:bb:6c:50:8e:e7:5a:d1:2b:41:09:
00:38:02:da:05:ca:73:f7:bf:46:06:2d:8d:4e:86:e6:c0:a6:
cf:aa:9f:7d:ec:05:d6:15:96:84:f7:70:34:bb:7b:df:91:52:
35:70:87:55:90:f2:17:00:1c:e9:51:4e:f1:eb:14:cb:22:b0:
5e:03:37:c8:e7:54:e1:89:cd:a7:a0:0a:09:83:d0:b4:f9:97:
5c:a6:60:60:2b:ed:0c:44:00:d3:e4:dd:a0:ff:24:85:f9:06:
d7:7c:51:0d:e0:4e:b4:fa:4e:14:d9:8b:77:80:2b:44:89:8f:
1b:f9:68:69:5b:8b:d5:56:15:73:38:15:45:b3:6c:68:2a:b1:
ec:f1:2b:e3:a8:88:63:cd:ac:31:a1:cf:6b:02:ab:9c:1c:8f:
8e:a9:d0:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8czQvJW03Np3AeOJg4LaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk
NmNkMGUwHhcNMjUwODIzMDgwMDUwWhcNMjUwODI0MDgwMDUwWjAzMTEwLwYDVQQD
EyhlOGYwYzVmMTMxMTcxMDkzZDI3NWFjNjhmNGNhYzllNmU1YjBhMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr+IHYBeiQHLYT3kubcsWdeFouiQ
gwLX2Gn9S/k/0MJKw0aoKr7po99B2WSFASfoucQT3fe2epLvB64D91JnSwphBcJz
98Vas72wqIomYv/lkLOyG7cLzJCE83TaoUn0nuIsonYrMjU4Mu7TQ76KYIxPYFEp
3CbfEDYPlbJ6a+ftZhZsh/qfqJbPxVSSLlEAXLIbXTeMJZxBz3DaUhSft9t4CByZ
k2AZArIsg8Gx8X6QYZ1SMm1XuuWE4qmM/F/VHG7LQwRu2Vf303uI2bmj/MwgNORE
YW7g5GLsUWqwUAzssVFy5RlEvZz2pLn2A8ny0dBLxjpoJQVzuMaHpAw03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjwxfExFxCT0nWsaPTKyeblsKF/MB8GA1UdIwQY
MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt
OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi
LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgwcvWVC
UJTo1DFUJfzSoiTrYV56CT6R1MFjGt/dBVyAQeaUIlT+g06zj73TDjKFDBmt1w2h
irGy36/uOsNKVEDIrIMPggJ+YB+6190JFHYzhRhYjiGDenDwY+ofrRWKFOq7bFCO
51rRK0EJADgC2gXKc/e/RgYtjU6G5sCmz6qffewF1hWWhPdwNLt735FSNXCHVZDy
FwAc6VFO8esUyyKwXgM3yOdU4YnNp6AKCYPQtPmXXKZgYCvtDEQA0+TdoP8khfkG
13xRDeBOtPpOFNmLd4ArRImPG/loaVuL1VYVczgVRbNsaCqx7PEr46iIY82sMaHP
awKrnByPjqnQrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:55 2025 by rpki-client