Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: DN8JocE1rh5CmBcXTnjyhqtSxfTTOjpeJNxJwS5b6Rs=
Subject key identifier: 78:31:C6:DE:94:A5:9A:6B:DE:D9:A7:FD:3A:0F:4D:DA:1E:59:CF:69
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019879AF54518ACB95633080E464D06A6190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 10:03:10 +0000
Manifest this update: Tue 05 Aug 2025 10:03:10 +0000
Manifest next update: Wed 06 Aug 2025 10:03:10 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: V129zTAkfY3UapUtbeoB0pvrNIukpKzYUKVEpvlbfsQ=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:54:51:8a:cb:95:63:30:80:e4:64:d0:6a:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Aug 5 10:03:10 2025 GMT
Not After : Aug 6 10:03:10 2025 GMT
Subject: CN=7831c6de94a59a6bded9a7fd3a0f4dda1e59cf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:56:d1:60:ac:54:8d:96:f7:86:6e:e7:d7:
b0:ed:63:5d:36:54:95:67:bf:30:5c:1e:43:87:15:
60:e2:0d:1d:77:fd:94:93:1e:40:a4:00:e9:77:8e:
d5:f8:2f:d0:61:2b:b1:1e:53:b7:7a:fc:6a:2a:63:
60:e2:6e:f4:c4:ae:7a:77:79:65:a2:57:40:4c:f3:
2d:c2:9a:bb:dd:69:dd:17:33:78:ca:f0:35:a0:5c:
08:a0:c1:44:83:47:b9:fe:c8:4d:b9:c6:ed:4c:be:
55:d9:34:0c:19:8f:ee:15:18:f7:17:05:ba:b2:73:
06:d2:be:d2:81:b4:4a:47:8d:28:5f:57:c3:31:09:
34:bd:e3:b0:44:ac:49:5a:8f:8f:dc:4f:7d:a7:36:
7b:a2:20:8c:53:0a:75:0a:c9:88:a1:ab:bf:4d:c6:
d6:c2:7e:8a:54:51:5c:70:5a:84:5b:24:d5:a4:57:
2b:93:c7:48:c2:76:69:93:05:37:20:6e:23:20:4c:
79:80:43:57:08:ac:a1:26:63:d6:91:f4:5f:80:ec:
87:b5:93:69:5f:ed:25:30:49:6a:22:5a:ba:6b:c9:
a5:45:63:b4:1e:a9:dc:44:24:78:fb:1b:7e:34:51:
ba:89:b6:7b:7d:6f:91:01:86:dc:be:da:29:58:07:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:C6:DE:94:A5:9A:6B:DE:D9:A7:FD:3A:0F:4D:DA:1E:59:CF:69
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:4a:aa:60:5d:21:2b:06:47:8f:65:48:d9:a5:f1:03:1d:
f5:97:d0:d5:d2:f0:b5:7b:50:86:06:3c:7d:43:68:66:a0:c2:
38:ab:92:72:c4:2c:f7:66:aa:7f:fc:13:d1:c4:52:4b:c7:e8:
b4:c1:d3:94:a4:bb:59:a1:25:fe:2f:f7:c5:8a:8d:3c:c1:08:
25:23:f1:46:d3:ea:9c:ed:2a:18:ac:73:3f:a1:02:e4:46:35:
79:27:4c:e3:eb:ca:3d:98:5d:4a:8b:2c:17:ef:fe:ac:78:ba:
90:ce:e2:51:aa:c4:8e:c5:39:79:51:14:81:e1:df:a9:e0:5a:
f5:ba:97:58:7a:4a:36:93:d4:b4:ab:02:9c:23:d4:00:b7:cd:
aa:ef:2c:a7:14:3f:ab:0c:8f:fb:3c:2d:05:df:6a:53:f9:32:
c8:e6:55:13:04:2a:e2:9f:27:0b:13:30:0b:2f:28:45:44:14:
83:ea:c5:11:75:a7:13:f5:06:14:cd:74:b2:42:65:87:72:07:
0b:45:b4:fc:57:7b:79:7d:69:b3:4a:f3:09:af:d0:1a:86:66:
0b:ec:fd:ec:ff:5b:9d:3e:6c:56:1e:b2:08:ca:67:c0:8c:6d:
3d:83:97:fd:23:7b:d7:b4:02:09:1e:0b:d5:f6:f3:10:0e:11:
c0:26:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:39 2025 by rpki-client