Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
File: b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json)
Hash identifier: YDZScOapDhoVBJX2tfmWE+dIoukaw40082r31yKgSpU=
Subject key identifier: 4B:FD:BF:83:C5:E9:AD:AD:41:26:69:75:DD:F0:72:DF:B3:69:9D:90
Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
Certificate issuer: /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Certificate serial: 019A4F623A211B040A45875056F6CEE5CFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
Manifest number: 0D8C
Signing time: Tue 04 Nov 2025 15:00:28 +0000
Manifest this update: Tue 04 Nov 2025 15:00:28 +0000
Manifest next update: Wed 05 Nov 2025 15:00:28 +0000
Files and hashes: 1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: VN5liu9jWDZ9K/SL/Tkt/jkVoeVcQI/Rp2/KCDQjyjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:3a:21:1b:04:0a:45:87:50:56:f6:ce:e5:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Validity
Not Before: Nov 4 15:00:28 2025 GMT
Not After : Nov 5 15:00:28 2025 GMT
Subject: CN=4bfdbf83c5e9adad41266975ddf072dfb3699d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:30:df:36:2e:e6:17:f6:fb:ba:4c:18:91:
e0:b5:9a:22:39:bf:41:9b:d7:38:93:03:b6:df:ec:
31:45:d9:2b:0e:ae:5a:80:6a:f2:a2:dd:72:99:ea:
39:22:b3:69:9b:2b:47:a5:fd:d4:f5:78:65:4d:ed:
52:eb:de:d7:5e:22:6e:fe:5d:fa:fa:1b:39:a8:fc:
48:a4:4f:fd:4e:f0:84:4f:34:35:e8:da:c0:08:fc:
c9:a4:a2:a3:be:bb:24:60:46:40:0c:8c:5e:52:47:
3a:e5:f0:be:ad:95:c2:85:d0:26:d1:53:b3:c0:e6:
ba:ef:42:a7:e2:71:42:06:3e:5f:cd:84:93:d7:6a:
9e:8e:9e:07:f0:da:18:78:0b:4c:a6:56:a0:7b:14:
93:dd:0d:15:bc:37:33:7d:ab:8f:86:6b:46:1b:5a:
10:13:18:57:8f:f9:a8:8b:f6:b6:9c:a0:76:6d:b9:
25:fb:4c:35:cf:13:27:d6:df:b9:00:2c:e7:3a:51:
83:72:b6:99:1e:ce:fe:a2:06:fa:c1:63:df:96:d6:
fd:52:68:66:58:34:3f:12:23:51:3f:ee:d9:6d:e6:
45:0b:7e:29:2f:d3:75:42:86:7f:8e:5e:2d:ef:2b:
f8:e1:52:df:0b:26:01:92:1f:bc:d5:9b:22:30:ea:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:BF:83:C5:E9:AD:AD:41:26:69:75:DD:F0:72:DF:B3:69:9D:90
X509v3 Authority Key Identifier:
keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:28:8b:8e:55:5d:94:01:b5:82:ec:35:c3:5a:20:1f:8b:
4e:68:21:db:72:d8:44:25:2f:0d:e4:dc:0a:5c:66:b8:7c:75:
0f:dd:ec:0e:7d:f4:3f:a0:5b:9a:3d:50:6a:a6:fe:2b:c7:ae:
4e:e6:27:1e:00:d4:26:3b:04:a8:4a:24:aa:b0:be:d3:0e:d7:
1a:90:cf:fd:91:3f:33:25:5f:57:11:91:fd:fb:e2:a5:cf:3d:
2a:14:5e:69:64:bc:ae:cf:2a:01:a0:09:dc:35:7f:00:0b:35:
45:96:9d:fc:87:99:68:80:83:1c:f3:a0:e0:aa:a0:2f:ae:63:
99:a8:4b:12:29:f7:c0:df:c6:43:f9:8e:db:14:38:9e:5a:2e:
33:30:26:41:03:7f:bf:64:a2:30:9d:34:3d:45:e3:ed:62:65:
6e:a4:2d:70:93:49:ac:e3:1e:d3:49:f3:82:88:a4:c0:a1:5d:
fc:44:2c:d5:1c:2a:49:07:60:eb:b3:c1:db:00:5d:8d:d4:7d:
49:32:4b:4d:d8:34:5d:92:a1:7b:53:57:06:dc:1b:89:c7:13:
13:02:ea:8d:19:c0:c0:fc:61:7c:c3:74:e3:47:e4:f2:80:33:
5c:fb:d7:fd:f6:70:e4:8a:6c:a8:96:87:a5:c4:fb:e8:93:9c:
b6:38:89:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYjohGwQKRYdQVvbO5c/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNmVjOTI1OGVmZDAwMjkyMTc4ZmE4MWMyM2NkNzdjMDJh
MWExMTAwHhcNMjUxMTA0MTUwMDI4WhcNMjUxMTA1MTUwMDI4WjAzMTEwLwYDVQQD
Eyg0YmZkYmY4M2M1ZTlhZGFkNDEyNjY5NzVkZGYwNzJkZmIzNjk5ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubkw3zYu5hf2+7pMGJHgtZoiOb9B
m9c4kwO23+wxRdkrDq5agGryot1ymeo5IrNpmytHpf3U9XhlTe1S697XXiJu/l36
+hs5qPxIpE/9TvCETzQ16NrACPzJpKKjvrskYEZADIxeUkc65fC+rZXChdAm0VOz
wOa670Kn4nFCBj5fzYST12qejp4H8NoYeAtMplagexST3Q0VvDczfauPhmtGG1oQ
ExhXj/moi/a2nKB2bbkl+0w1zxMn1t+5ACznOlGDcraZHs7+ogb6wWPfltb9Umhm
WDQ/EiNRP+7ZbeZFC34pL9N1QoZ/jl4t7yv44VLfCyYBkh+81ZsiMOob9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv9v4PF6a2tQSZpdd3wct+zaZ2QMB8GA1UdIwQY
MBaAFG9uySWO/QApIXj6gcI813wCoaEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xNjBkODEtYzcyOC00NjJmLWFhMjYt
YTE1OTM1MDY0YWRkLzEvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xNjBkODEtYzcyOC00NjJmLWFhMjYtYTE1OTM1MDY0YWRk
LzEvYjI3SkpZNzlBQ2toZVBxQndqelhmQUtob1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/0oi45V
XZQBtYLsNcNaIB+LTmgh23LYRCUvDeTcClxmuHx1D93sDn30P6Bbmj1Qaqb+K8eu
TuYnHgDUJjsEqEokqrC+0w7XGpDP/ZE/MyVfVxGR/fvipc89KhReaWS8rs8qAaAJ
3DV/AAs1RZad/IeZaICDHPOg4KqgL65jmahLEin3wN/GQ/mO2xQ4nlouMzAmQQN/
v2SiMJ00PUXj7WJlbqQtcJNJrOMe00nzgoikwKFd/EQs1RwqSQdg67PB2wBdjdR9
STJLTdg0XZKhe1NXBtwbiccTEwLqjRnAwPxhfMN040fk8oAzXPvX/fZw5IpsqJaH
pcT76JOctjiJVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:56 2025 by rpki-client