Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File: b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier: N3qGlGvt64wsmrnUexJCZgL1P0AD2t8wYMeZW58yJAY=
Subject key identifier: D7:59:32:B7:44:80:68:61:55:D3:1F:98:F0:56:7E:2E:B9:DD:9C:6D
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 019A522C79F3E049931CC859AE012A7E0D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number: 151B
Signing time: Wed 05 Nov 2025 04:00:37 +0000
Manifest this update: Wed 05 Nov 2025 04:00:37 +0000
Manifest next update: Thu 06 Nov 2025 04:00:37 +0000
Files and hashes: 1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: 88MAILEctQyYYUwxHvHYSXljDqS/2wsBaiCW530rduE=)
2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:79:f3:e0:49:93:1c:c8:59:ae:01:2a:7e:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Nov 5 04:00:37 2025 GMT
Not After : Nov 6 04:00:37 2025 GMT
Subject: CN=d75932b74480686155d31f98f0567e2eb9dd9c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:7e:8f:d1:24:dc:9a:42:13:6d:87:1e:cd:
ab:e4:95:9d:7e:8f:2f:38:9b:32:7b:f3:87:e7:65:
99:e9:54:f5:f4:5c:c6:73:a1:59:69:2c:cb:8f:6b:
2f:ae:ab:b5:ae:13:b1:f9:9b:41:a4:40:38:13:b9:
69:20:66:b8:db:54:19:91:f7:1a:d4:40:8d:74:9f:
77:9b:41:84:91:84:8c:96:d6:5d:88:e6:b2:48:40:
d4:5e:51:3b:fc:e6:db:68:a1:32:d1:c6:06:11:3f:
ca:4c:14:bb:3b:b2:f2:13:4b:79:13:2d:3f:49:f5:
9c:00:cc:86:e1:42:09:eb:fa:d5:d8:f0:2a:e6:90:
5c:06:1f:d7:cf:e7:52:ce:ef:bf:ba:3c:43:29:0b:
f2:4e:9c:0b:f7:20:39:18:eb:e6:2c:ab:59:cc:99:
d8:cc:ad:b3:ca:86:4f:f9:ff:e0:45:a2:d8:ff:4d:
a6:3d:72:c7:a1:90:31:68:f8:35:cb:28:69:b4:3e:
ff:7c:ef:e3:d6:83:15:b2:c4:60:d6:24:f8:48:6e:
60:94:c7:93:1f:73:f7:f3:e8:2a:52:5d:6e:2d:17:
ea:c5:7e:55:85:fc:8e:b6:da:12:9e:23:87:ae:b4:
1c:07:e1:4d:5c:10:8b:22:da:f9:3f:d5:a6:06:ca:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:32:B7:44:80:68:61:55:D3:1F:98:F0:56:7E:2E:B9:DD:9C:6D
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:de:f5:9f:9e:da:92:58:cb:88:f0:63:93:10:5a:21:38:
cd:a7:b0:ff:e8:cb:ca:f4:4a:1f:8a:18:77:ea:66:79:ee:c5:
fa:61:3b:3f:8f:3d:63:94:f6:6d:23:15:ac:27:4b:41:7c:ca:
64:c9:f4:0e:42:9d:0e:79:01:f7:06:14:36:12:c1:c1:4b:2e:
ac:6b:d4:31:5b:31:5a:05:7c:15:18:51:a1:7a:be:cd:c9:48:
75:11:b1:82:f1:38:c6:71:36:9a:6b:e9:03:3f:14:dc:5f:30:
e9:fe:80:41:3a:52:08:05:1b:bf:1a:11:93:01:81:1f:fd:7e:
0f:5d:29:35:8b:32:5f:28:9c:28:56:f5:35:4c:f5:e4:f8:b9:
d9:52:ae:ed:9c:09:63:b0:41:db:01:85:ae:74:67:8e:ce:ea:
41:5f:a2:ca:8f:be:40:f8:72:09:ba:88:09:e4:99:56:68:9f:
79:aa:e4:98:a8:2f:d2:f4:1f:26:00:1f:50:71:cd:6d:68:8f:
79:28:c8:f4:61:dc:6f:ec:eb:12:99:37:75:de:dd:97:79:4a:
29:60:9b:9e:30:40:41:e7:1c:1d:e9:cc:e1:db:0b:21:2f:a0:
f0:d0:bb:82:16:f3:29:15:2f:79:55:99:98:7f:1e:e7:40:75:
0a:5d:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:17 2025 by rpki-client