Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
File: 27m8LeNs8jtonzxy6Aq8_kggJsE.mft (raw, json)
Hash identifier: 3ULiof7OHaK+OOr+VF6l9riwbKNOzPd+pTbmJUHvZto=
Subject key identifier: 41:F8:7B:25:19:85:64:9A:A5:5F:E0:2C:F1:49:B4:CE:13:0F:0B:C6
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 019A4F99506B4D49EFDF7F10AEADD945217C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
Manifest number: 12B9
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: 27m8LeNs8jtonzxy6Aq8_kggJsE.crl (hash: kmHwZfjd2VYFT2BwANEU9NmnCQLf2okC5qOv07dFKU0=)
2: ClhEwRnDYw2TQH3RNosMAuvSTaM.roa (hash: zVMUBbJ0ZW19QPyVy2U8+UbE5LuoimUH2oM9U+S3avI=)
3: EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa (hash: rlcHKNxqzbJZK9gtci2o/2aqsd2FZRiITmisyzoxH20=)
4: Tcdkc_pLid4bj31FVcmiyvaPqWk.roa (hash: GaSdD3u1V54qfiVL17STtf24nCmyDEzVmYt0IeL8i0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:50:6b:4d:49:ef:df:7f:10:ae:ad:d9:45:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=41f87b251985649aa55fe02cf149b4ce130f0bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:50:d3:60:b0:1d:b6:2b:b0:27:b0:11:77:
8c:26:7e:96:ed:0f:ad:50:bb:e8:85:b1:bf:1c:45:
a9:94:f7:42:dd:47:c3:02:d5:d4:51:a4:0b:d5:1d:
2d:2d:e7:a7:dc:68:4e:be:49:22:b7:ce:ea:1e:6e:
03:35:22:64:a3:65:38:8d:9f:1b:0b:f2:cc:68:56:
e2:ad:3d:0e:46:22:2b:4d:1f:0b:34:42:1e:d8:42:
26:5f:62:ab:ff:5e:8c:1e:22:ea:47:be:24:fb:ad:
83:05:0a:f0:c2:fc:84:08:4e:20:f1:bc:07:c5:5d:
50:53:60:bb:a4:5e:d5:0d:02:c4:21:7f:5c:60:d7:
f5:7c:a5:11:a3:f1:49:bc:63:b5:29:af:ff:8c:bf:
39:c1:58:4c:17:2b:71:34:04:5d:80:06:02:d8:f8:
ec:f6:ac:f9:72:91:89:64:03:17:18:bf:09:3a:2a:
ad:73:26:a3:aa:32:82:84:c7:f1:53:c8:3e:d8:0d:
e5:e5:8d:c4:81:e6:4f:1f:f0:fc:3b:9b:f9:f0:6f:
b7:4a:7a:9c:84:e0:7b:1c:56:46:8e:bd:59:a9:92:
0a:ac:ec:76:9f:0d:4a:27:22:98:3f:27:69:69:6c:
fd:6e:a5:b6:65:89:5a:02:b6:bd:0b:5c:5a:5c:a4:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:7B:25:19:85:64:9A:A5:5F:E0:2C:F1:49:B4:CE:13:0F:0B:C6
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f5:42:ec:49:71:b3:05:17:f6:c9:4d:89:dd:6d:50:a5:83:
29:05:73:34:62:2e:52:73:75:05:0d:5c:76:e7:e8:2d:a4:a8:
bc:0e:22:73:00:0b:9c:9c:68:bc:bc:03:aa:19:c0:46:fb:e7:
69:6c:b7:3b:04:78:30:4e:9d:3c:04:9f:68:db:ec:76:6c:10:
1b:e6:82:fe:18:c0:89:1d:f7:fa:65:1f:29:13:25:36:ca:e2:
13:03:c2:82:30:82:5e:89:d7:5b:ca:5d:06:10:d5:dc:eb:70:
ad:a6:01:16:13:e8:7b:34:3c:1f:00:6e:34:ed:44:7f:e1:a6:
2d:dc:4a:3f:af:90:c8:fd:2b:5b:71:62:33:99:7f:01:f9:7e:
50:9f:56:0a:64:e0:8e:19:05:69:12:52:67:43:3a:68:1b:89:
ad:b2:39:f7:55:df:60:74:de:77:22:43:93:55:55:08:75:50:
4b:21:44:38:84:86:e5:e7:15:e4:8e:09:33:ee:9c:21:43:1e:
02:cc:65:e9:7c:27:6c:ef:e4:4b:2d:f3:42:c3:94:ca:9d:18:
13:f4:d3:33:47:1a:a5:f2:8f:3a:e1:79:d2:25:bb:a3:e1:71:
3f:cd:8e:b0:a3:0b:15:81:e1:7b:dc:85:a7:b8:19:ce:22:0d:
84:9a:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:14 2025 by rpki-client