Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: 5covlnwjzZEhJNVD9c99zw3Le5mbN4cOmNqKteB2QDo=
Subject key identifier: 9F:73:BC:E5:15:76:47:AB:A3:57:A2:62:6B:4A:72:61:97:FA:19:13
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 019A4DE1F06D70BEF889C3085C8D8653C794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 1191
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: 0L//+GeYM5hxi6DLkv+x6Ah+v5N0GPVZ/nllH+nG/Vs=)
2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f0:6d:70:be:f8:89:c3:08:5c:8d:86:53:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=9f73bce5157647aba357a2626b4a726197fa1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:b9:55:a3:a1:c7:5d:a2:a6:38:f9:8b:f1:
7b:97:ea:b6:31:e3:57:4e:9a:9b:b7:6e:3c:ef:f1:
9d:eb:94:af:e4:b5:ff:8d:1b:cd:de:4f:0d:4f:9e:
66:5a:1e:9c:73:73:3e:e0:94:c7:bb:9f:9b:51:1e:
fc:c5:ef:45:c6:a5:dd:52:82:9c:0c:04:dc:28:d7:
f3:aa:f2:d0:a7:55:9c:ce:43:75:ae:c1:9f:95:e6:
87:04:fb:ab:b3:da:09:b1:db:9a:db:d1:78:12:3c:
a0:8b:88:32:d4:66:66:1d:ce:e2:89:46:c4:d9:f6:
9f:aa:df:f1:7d:21:5a:e2:2c:31:ac:cf:b3:24:58:
d3:20:ee:6f:cf:a8:47:55:72:b0:ae:fe:e9:74:70:
b8:dc:d4:e8:d3:66:72:f6:a2:62:09:5c:dc:e4:c0:
a5:f0:7b:22:43:65:9f:56:e1:f7:bb:47:87:3e:bb:
a2:6d:65:56:01:f3:04:39:8f:67:94:7d:10:14:1c:
a2:6c:11:65:26:35:ae:d0:2e:05:ec:37:7c:83:41:
78:b9:24:62:5c:04:cb:26:53:21:ae:29:d5:5a:74:
6d:c2:a6:d0:00:42:c5:50:9a:b6:34:d1:3b:c0:60:
8d:69:de:74:13:b9:28:cb:28:21:a0:8a:e0:15:73:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:73:BC:E5:15:76:47:AB:A3:57:A2:62:6B:4A:72:61:97:FA:19:13
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f0:51:bb:5a:a6:39:59:61:b2:19:f1:69:97:7c:58:09:0f:
b0:f1:71:18:19:d0:6f:24:d2:ea:09:a6:1a:38:a8:07:64:d4:
ba:1a:b7:42:73:65:6c:97:21:4b:d9:72:f0:ec:ba:04:b6:d2:
1d:c4:b1:00:d1:25:2d:bf:04:3b:af:84:e3:57:69:16:b5:db:
3b:86:4a:c6:d6:ea:de:a2:12:69:ad:3b:d8:03:17:a5:67:19:
94:89:15:ec:27:c0:88:15:ed:fe:eb:c3:76:75:40:8c:88:55:
8a:f8:50:5f:00:f5:32:17:48:8f:55:69:f8:9d:43:c7:61:ca:
75:e6:e3:fe:9f:f2:fe:56:06:4c:55:1e:b1:bd:1e:da:17:5d:
b9:44:cb:36:a8:f1:c2:24:ce:ad:46:b5:58:af:7c:4a:dd:8b:
2f:e3:3d:3d:31:18:ce:7a:46:74:fe:38:89:de:8f:55:e1:fd:
95:17:15:6a:bf:c8:59:c7:18:03:a8:25:90:45:00:33:5e:19:
7d:87:b3:53:75:bd:e7:a9:b9:6a:4f:43:b6:6b:b2:7f:95:2a:
3a:6e:45:bb:18:2d:e5:2f:8c:98:cd:4e:1a:b0:17:20:cb:3d:
f0:33:dd:e3:f0:9c:37:c5:f4:9a:06:17:2d:6c:23:f2:45:18:
4e:d9:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:56 2025 by rpki-client