Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
File: b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json)
Hash identifier: 9Tf2L9RMYdTxAtWgKrVZWW7DoZolVaIflYeO1ZY1w4k=
Subject key identifier: B2:29:02:6A:11:84:AD:B3:C8:C3:39:56:0E:DC:5A:98:B5:71:C0:4A
Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
Certificate issuer: /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Certificate serial: 01988B7D589E58E6AEDB11067CDC8223E0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
Manifest number: 0CA2
Signing time: Fri 08 Aug 2025 21:01:44 +0000
Manifest this update: Fri 08 Aug 2025 21:01:44 +0000
Manifest next update: Sat 09 Aug 2025 21:01:44 +0000
Files and hashes: 1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: +rrvqiVFMUNgF7yqmtpYXS6vTdwQ3KYxVT4PxZbN3sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:58:9e:58:e6:ae:db:11:06:7c:dc:82:23:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Validity
Not Before: Aug 8 21:01:44 2025 GMT
Not After : Aug 9 21:01:44 2025 GMT
Subject: CN=b229026a1184adb3c8c339560edc5a98b571c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:b6:ab:96:e9:cf:f0:51:65:9e:f3:11:68:
53:b4:8d:b7:fe:21:79:51:c1:76:55:0e:47:2b:d1:
f2:63:5e:ce:c4:1a:26:93:70:2a:10:d8:3b:aa:ee:
95:82:e8:7b:6b:b6:0c:51:42:fb:9c:e8:b9:ea:74:
74:fa:2c:df:89:c1:c1:33:e1:ac:00:88:31:81:da:
c3:c3:51:d8:f1:d1:e7:89:6a:c7:45:af:a8:3c:66:
51:bf:8f:3e:ff:b9:4f:b2:86:ee:ba:88:ff:f8:e7:
30:82:07:65:41:28:c9:d4:14:3c:32:86:d6:9a:6c:
b7:e3:76:df:43:0d:29:a6:b2:36:df:f6:01:36:3f:
f1:a9:fc:df:3a:86:36:3a:78:f2:a7:c9:a6:89:b4:
25:8b:62:e0:de:d3:60:66:28:36:2c:2a:a9:d9:cc:
53:31:6d:98:5a:20:1b:89:32:4e:2a:7f:e5:0d:0d:
1a:f0:30:33:75:a3:29:1c:e9:57:b2:67:2e:15:b8:
be:6c:30:e8:a5:c8:2d:57:97:87:2a:91:c7:de:0d:
67:70:81:80:73:cd:0b:58:88:3b:46:38:3e:a5:2c:
95:d1:17:6d:01:51:a4:43:0f:0d:ed:d4:cb:e8:ab:
8c:3f:5f:ff:6b:c6:4e:ba:f5:ee:aa:44:20:c2:c7:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:02:6A:11:84:AD:B3:C8:C3:39:56:0E:DC:5A:98:B5:71:C0:4A
X509v3 Authority Key Identifier:
keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dc:03:0f:2b:d8:57:4e:ea:a6:6b:f6:e3:0e:a9:41:32:9e:
90:74:50:29:1c:a5:c7:e0:65:bd:93:35:46:90:ce:da:94:8f:
01:cd:2b:57:68:55:c0:f9:d6:65:90:49:13:ba:a9:c3:9f:b6:
ba:02:5b:ca:2f:41:87:76:4a:eb:3c:cf:8b:d8:8a:3a:01:ae:
6e:cb:c5:fb:e0:ef:b3:ea:19:76:6b:01:d1:e2:79:9c:33:c4:
13:d0:1b:5e:36:45:90:7e:f8:c5:e4:6c:d9:c2:ad:cb:22:41:
c9:d8:b9:8f:f7:c7:b1:67:11:29:37:59:e6:6b:8c:33:c8:49:
f0:02:14:68:68:ef:49:44:cd:4c:9c:6a:43:6f:ef:fa:1c:f5:
ac:9a:98:00:2f:19:6a:fd:53:b4:16:f7:f9:c8:fe:50:0a:a2:
e0:18:f4:72:84:44:e8:e2:57:b1:2f:02:df:62:36:74:64:38:
4b:1d:3d:1e:8a:35:05:d8:8a:07:9d:ea:bd:58:c7:50:24:07:
c0:f4:39:be:08:e0:85:27:b8:1f:52:91:ab:65:53:5d:d1:3e:
f6:77:b3:57:6a:17:ea:0d:34:55:15:3a:a2:ba:4c:14:6c:67:
46:17:55:e1:c0:ec:ad:a1:1d:fb:26:7f:25:6e:f8:05:85:58:
4a:eb:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:42 2025 by rpki-client