Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: ee/hep+x0199h7sb5gESNWjCAEmZa0i2rlLGZkqnpP8=
Subject key identifier: AB:4E:41:B3:08:47:92:16:5D:AB:0D:C8:A4:7E:2E:D9:A0:B0:08:33
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 0197789CF62E04CD3AB13FD356E2A1BB6FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 12:00:41 +0000
Manifest this update: Mon 16 Jun 2025 12:00:41 +0000
Manifest next update: Tue 17 Jun 2025 12:00:41 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: aYqZUR0hUQ1rRWaKwsFlc79rOgUkpa/oTW3pBhMztB8=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:f6:2e:04:cd:3a:b1:3f:d3:56:e2:a1:bb:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jun 16 12:00:41 2025 GMT
Not After : Jun 17 12:00:41 2025 GMT
Subject: CN=ab4e41b3084792165dab0dc8a47e2ed9a0b00833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:c3:3a:c3:8a:ef:e1:63:22:61:cc:82:aa:
50:71:cb:7d:56:40:4d:1c:c7:2a:3d:ed:eb:a4:83:
1c:03:2c:2c:9b:23:33:25:4d:e2:5c:85:ae:3f:48:
a7:b6:8d:cd:1c:b6:1f:db:f1:60:1f:91:f0:ba:b8:
c5:ea:8b:a7:9a:f3:68:7d:93:84:80:c5:5b:8a:be:
1e:74:cd:f3:05:f5:95:27:57:8a:05:fa:cb:be:80:
c4:7a:a8:6e:72:fb:fc:d0:36:16:9b:6b:86:09:05:
1a:a9:9b:93:f4:e0:e5:d8:fa:d4:da:1a:6d:da:ca:
4f:06:f3:3e:7e:db:0a:e2:a3:bd:d9:6e:61:32:d6:
80:c8:d2:d1:28:a2:e5:11:7a:43:01:49:2d:00:b9:
28:af:a9:c0:91:99:3f:9a:53:36:a2:c7:c8:b1:a0:
96:a4:a4:b1:d2:05:ba:05:fa:e3:eb:ca:21:70:fd:
c8:8a:79:02:0a:a5:68:7b:42:45:4b:d9:bd:db:a8:
7a:25:af:9e:76:04:df:b4:db:f8:45:83:24:dc:d7:
fe:d2:36:91:80:42:65:2c:c3:8d:b1:bb:2b:d4:65:
65:45:c3:ab:01:d3:18:58:85:ae:0b:45:aa:ac:58:
03:17:d1:6b:cc:ac:37:84:de:35:cc:68:38:fa:8a:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:41:B3:08:47:92:16:5D:AB:0D:C8:A4:7E:2E:D9:A0:B0:08:33
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:97:13:d1:9b:c8:33:19:e6:ff:a3:9e:3a:19:b0:f5:83:
72:67:82:63:88:6c:fe:ac:c1:09:10:66:69:20:a9:7f:e6:ea:
f6:4c:b0:ef:db:73:0e:1a:75:71:f3:5f:22:cf:c2:dd:84:58:
1e:7d:da:ca:4f:97:fe:1a:ca:5c:47:c7:b9:38:f8:a4:16:f4:
3c:80:33:fd:3c:0e:7e:7e:a2:c1:f3:31:24:91:36:16:e5:48:
fc:d7:6c:06:6c:e2:c2:69:98:3e:b8:f8:b1:87:8c:b0:79:13:
6c:29:13:21:e5:8a:3d:d7:71:51:3b:39:48:af:70:fc:df:4d:
a3:30:4e:7b:af:0f:98:20:97:cc:5c:31:37:ba:9f:e9:7c:9a:
e5:fe:c4:70:63:39:8a:28:dc:75:de:45:95:60:49:ae:5c:33:
4a:e7:d7:12:d7:97:95:45:38:35:c4:e6:ec:64:6d:3b:36:2c:
2b:19:84:99:e4:6b:04:b3:e6:b6:84:8e:c0:c2:e6:3b:1a:1f:
26:05:4d:73:b2:8c:ba:78:c9:65:aa:3e:fc:44:af:56:96:1b:
d5:ca:42:e7:9b:e9:dc:18:39:8a:ca:c0:d1:af:03:f5:ab:21:
73:a3:00:44:79:b2:55:e9:48:09:70:96:30:cb:3e:bd:c8:4a:
bc:fe:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:28:24 2025 by rpki-client