Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: FHH1DACFPLtYixZLM36tem/UiYvpEct68pkIbUHdsBY=
Subject key identifier: 7A:D5:F5:B3:E5:5A:8C:2B:D6:BB:6C:DD:95:BC:02:68:E1:A3:50:B9
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 0199FB7C86247C01F926145644DD1DFA4447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 15B5
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: tHEkUn1o7mC+rk+VIc81O9zC7NzMoblq2jlQm/XOMDk=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:24:7c:01:f9:26:14:56:44:dd:1d:fa:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=7ad5f5b3e55a8c2bd6bb6cdd95bc0268e1a350b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:5f:98:47:d4:7b:08:6f:89:f9:09:dd:16:
84:27:e4:05:93:ff:4b:96:f3:56:01:4a:98:dd:16:
fc:ac:53:c3:c4:1c:29:18:ca:d7:01:44:9e:ba:7d:
4c:71:77:f9:b3:c6:42:d8:98:d5:7e:82:89:9d:a3:
d7:cb:19:81:4d:7f:5a:f9:b1:97:ff:e7:19:e9:e6:
d9:f3:64:e4:07:d6:e7:13:95:d7:dd:b6:5b:3d:2d:
fe:91:38:20:20:16:6b:eb:27:37:87:d8:2a:f3:c7:
b3:96:98:4a:37:5b:22:2b:d3:48:81:09:17:6f:36:
85:c8:be:4d:13:96:a7:4c:09:68:7f:11:dc:2a:4b:
33:08:07:5a:ca:62:a9:b6:09:2b:f2:77:1d:e4:43:
77:c3:b7:57:4f:03:2e:d8:00:e0:1b:ab:41:9e:1c:
24:3c:b4:d6:0a:ff:01:cf:04:da:bc:c9:18:5a:09:
06:10:69:3b:ee:80:71:41:3b:93:a1:7f:f7:f2:f8:
34:ea:e5:ac:65:f4:9e:b7:51:d0:e7:a2:ba:38:71:
cc:24:30:8c:26:a6:37:b0:a8:08:df:8e:0f:f3:c0:
13:e1:24:b7:7a:68:f7:bf:b6:d5:18:09:3a:6c:8e:
39:ea:68:b3:5c:66:6b:03:00:5b:05:7f:30:c6:be:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:F5:B3:E5:5A:8C:2B:D6:BB:6C:DD:95:BC:02:68:E1:A3:50:B9
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:27:f0:56:7a:56:93:61:c5:71:b8:f4:05:70:18:19:6a:5a:
71:1a:76:1b:24:14:82:74:95:3e:97:58:ef:dc:bf:b6:7c:56:
5f:d1:f1:3e:14:01:d2:75:1b:e1:70:26:11:20:b2:e8:c3:ce:
f9:f6:b1:08:8c:ee:2a:f8:01:34:e1:c2:7d:9b:ce:21:0c:bd:
6a:bc:76:f9:70:97:db:f9:f3:25:db:e1:0c:13:3a:70:bb:2e:
dd:16:83:ec:41:0b:b6:83:d1:6c:bc:ca:f7:40:7b:f1:8e:b0:
c1:7e:ac:70:a4:7b:c3:7b:b3:67:6d:50:04:f6:0b:7c:e8:03:
a3:ac:b6:78:d9:bf:09:85:24:4c:c0:d1:6c:7f:36:26:a2:cb:
e1:97:82:19:c3:df:14:a6:63:ab:37:b4:dd:50:c5:30:36:2a:
18:e2:d7:68:02:62:db:2d:30:15:29:06:ce:24:c0:f4:cd:f5:
06:49:3d:e5:63:2f:6a:76:cd:b8:9e:c3:86:fd:97:ce:fb:7f:
45:44:da:c3:8d:70:3f:1d:49:ab:cf:d0:5b:1f:f4:e2:5d:6e:
1c:7b:ba:d0:c8:a3:13:00:23:7c:7b:d0:33:8f:4f:08:d4:b3:
29:16:c6:2f:fa:46:ea:d3:24:90:7d:42:55:13:c0:7d:d6:03:
c5:92:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:41 2025 by rpki-client