Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: Rzcv/mEHMidDRZrQq/tPwhWwQxFQdFN9MUYW7Bq16Ks=
Subject key identifier: D1:87:E1:18:3D:83:B8:15:75:C2:DC:0A:FA:30:0B:FD:AB:B7:A4:A6
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 0198D54DF97982A0A98A30B164E5A5ECD4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 6SeSRdGKeIWKy0ntYEaIePoD/yAy7TH2Meanft9EZ+I=)
2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f9:79:82:a0:a9:8a:30:b1:64:e5:a5:ec:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=d187e1183d83b81575c2dc0afa300bfdabb7a4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:9c:e8:49:08:3f:81:f3:5a:12:86:1a:40:
ea:de:c9:d7:af:c9:f2:34:ad:21:77:18:da:a2:c9:
35:de:d3:48:ff:76:11:a7:a5:d0:37:6a:bf:2a:15:
b7:aa:5f:f0:ea:8a:99:55:e7:94:e2:e3:73:50:8e:
4a:9d:b9:21:96:46:c1:62:eb:be:6e:b2:1e:39:4a:
71:24:b9:76:4c:0b:aa:ba:c3:0c:04:bd:70:d9:82:
b1:6a:e4:db:0f:70:a4:e8:91:37:a4:d1:9e:c3:32:
e9:ca:05:1a:8b:12:e7:73:45:ec:74:0b:f1:d2:ef:
19:f6:4d:7f:a1:d9:7f:76:0a:7a:4b:cf:e6:dc:3f:
35:0b:b4:21:d2:09:d8:bd:b7:f6:d6:11:e0:3c:54:
a1:64:a2:70:cd:d5:3c:5d:e1:3f:5a:c8:2f:fe:bf:
ed:57:0b:9f:c0:a8:1a:fb:f9:fe:de:90:2f:23:7d:
c1:bd:ae:0b:81:dd:05:56:c1:dc:56:04:78:a5:21:
64:c6:07:84:96:1b:5d:61:bc:27:13:c8:f5:11:3e:
f0:a7:78:a5:3f:51:4d:b1:60:64:6a:09:38:18:8d:
ff:63:62:34:3a:b0:f9:ed:25:5b:4b:2c:06:46:c7:
2d:11:5d:3d:20:2f:ba:a6:fc:43:3e:7a:21:3f:53:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:E1:18:3D:83:B8:15:75:C2:DC:0A:FA:30:0B:FD:AB:B7:A4:A6
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:0e:ad:15:4e:2c:31:16:93:d9:ab:8a:6f:f6:09:97:26:
62:dd:e4:f5:4a:2a:03:99:e4:10:45:ad:f6:c2:b6:52:23:61:
e7:85:59:cf:df:96:54:ee:6b:ee:fc:54:d1:05:2d:c5:dd:68:
53:31:7b:75:23:69:a4:11:7e:d7:42:03:af:1e:c9:0d:20:f2:
86:55:55:f9:f5:78:ca:22:43:66:50:53:d3:14:62:2c:5a:56:
29:c9:4a:8e:30:25:a0:5b:c1:28:ed:12:88:8e:de:2e:9b:81:
7e:05:73:45:b8:f0:95:04:67:f6:6a:b6:db:aa:15:6e:4a:b5:
13:54:fc:45:ea:84:a4:66:ad:0e:eb:ba:5d:e0:1b:ce:82:86:
c3:6a:30:48:6a:2f:f8:f6:ac:33:9f:c7:be:a5:30:a2:8e:96:
47:ab:e9:29:5b:69:43:72:2c:bb:02:ff:5d:ea:4b:a2:72:39:
ca:8f:27:8f:75:7c:75:fb:94:7b:6b:57:81:70:7a:dd:02:b2:
74:e0:57:cf:c4:05:1b:37:a0:9f:78:7a:dd:cf:8c:b6:51:3b:
d2:96:dd:f8:2c:86:3e:cf:0f:72:10:50:df:85:d2:b4:35:7a:
7b:64:52:2c:57:b8:32:49:32:32:9a:e5:70:f5:ec:09:de:22:
c7:8c:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:28 2025 by rpki-client