Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: ZBNO/Z0VCDNKbzoshgG+xjjzfFeAxf89YozH1YcNxdA=
Subject key identifier: 2C:43:1A:D2:88:68:22:7C:2C:7F:94:C2:A3:6B:C0:60:3F:D5:AC:0B
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 0196A3F7A3DFBB43A5EA012BB9349E7D077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 13FA
Signing time: Tue 06 May 2025 05:00:37 +0000
Manifest this update: Tue 06 May 2025 05:00:37 +0000
Manifest next update: Wed 07 May 2025 05:00:37 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: 8PtUVKm6LcDc5EoYxhv548+ZWw/xrwt22fHkG2vqnxk=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:a3:df:bb:43:a5:ea:01:2b:b9:34:9e:7d:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: May 6 05:00:37 2025 GMT
Not After : May 7 05:00:37 2025 GMT
Subject: CN=2c431ad28868227c2c7f94c2a36bc0603fd5ac0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:4d:0a:05:5a:1b:f4:97:52:2a:e3:35:26:
99:2e:09:6a:12:93:1e:ba:04:c3:40:83:31:ba:d5:
41:a8:e3:69:f4:05:31:e9:6f:4c:00:34:5e:76:6a:
cf:8f:bc:42:6d:44:13:27:73:d4:d3:cc:a4:91:8c:
12:2a:8a:fe:c1:b2:bc:e8:68:d4:b1:3c:e4:b5:76:
5f:4e:d1:be:5e:2c:38:6a:8e:27:a6:ec:6b:45:b5:
7e:08:91:be:55:5d:44:27:90:c9:11:99:c1:9d:73:
b6:dc:a7:62:b1:be:c9:7a:42:43:0c:e8:d4:8b:d7:
3f:30:1f:9b:e2:bd:03:61:a5:5e:90:50:58:f3:83:
a4:a2:86:4c:f9:b2:15:95:8c:5f:30:34:5c:7a:b0:
a9:e1:2b:98:cf:bc:00:63:28:7c:35:00:14:d9:47:
5b:5a:c0:5c:4b:b3:c1:a2:f0:81:7a:4b:19:63:83:
86:5f:07:7d:67:60:a1:7c:4d:29:3a:2d:0d:97:20:
f0:7a:63:68:fe:d6:68:06:a7:16:e2:c9:fe:85:ab:
0d:1e:e1:96:8e:d5:33:e5:70:cf:77:e9:d2:2a:a9:
5c:b3:7b:32:50:48:63:76:a3:76:fa:36:99:6a:b4:
7c:84:8a:c8:52:80:23:f1:45:09:35:de:98:59:4b:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:1A:D2:88:68:22:7C:2C:7F:94:C2:A3:6B:C0:60:3F:D5:AC:0B
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:03:6f:9e:da:61:ef:f2:8c:22:58:3d:33:28:10:69:8e:06:
15:dc:b8:38:9f:36:11:65:ae:8a:d6:85:c7:a5:25:3b:3b:d5:
c0:25:11:0b:fb:48:7e:24:95:2c:1a:14:76:5c:bd:d5:64:af:
8c:ce:93:bc:94:4b:3a:a9:22:bb:30:2f:f2:d0:f1:86:24:06:
24:51:62:89:05:28:b6:26:bf:12:48:91:a3:c0:45:34:1e:32:
c1:f5:8e:b4:fd:98:93:b3:50:91:88:25:7f:e1:1b:f8:d2:e7:
75:c2:64:92:97:9b:94:b1:c5:58:9a:93:f7:f8:75:e3:55:f4:
07:77:48:e0:00:bf:11:0b:15:a4:81:1a:63:e2:3e:24:e6:a1:
88:6a:44:f4:92:6e:6e:d4:69:3a:19:c3:3e:81:8e:55:27:f7:
e0:db:99:db:28:e0:46:45:a9:d2:03:39:b0:34:01:28:ad:5a:
e4:df:57:65:20:51:7d:0f:8d:3a:3b:20:c7:81:3c:5e:39:27:
b8:23:61:38:3f:4c:bd:27:5e:97:a3:46:71:ec:66:81:5c:fe:
7e:91:78:7a:4a:4c:0b:3d:8a:82:da:5b:b8:3b:9a:06:a0:a3:
ea:37:4f:33:64:f3:2e:e6:c3:51:25:b9:56:82:bc:07:dc:a8:
9c:97:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:40:57 2025 by rpki-client