Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: kQO41f13t9/JgnuD99MYq/TU0gWITbVsQVdQ+Ud0yf0=
Subject key identifier: BF:1A:E9:17:06:BC:4B:4A:36:9E:80:80:1B:75:2C:7D:4A:A0:71:15
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 01977C430854967D918168CAD3AED2BC79AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 017E
Signing time: Tue 17 Jun 2025 05:00:57 +0000
Manifest this update: Tue 17 Jun 2025 05:00:57 +0000
Manifest next update: Wed 18 Jun 2025 05:00:57 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: aTICSBYcYtW2hqn4r9AJnHQpNT3lGLV1ciWUVDy9Ifg=)
2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:43:08:54:96:7d:91:81:68:ca:d3:ae:d2:bc:79:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Jun 17 05:00:57 2025 GMT
Not After : Jun 18 05:00:57 2025 GMT
Subject: CN=bf1ae91706bc4b4a369e80801b752c7d4aa07115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:4e:b1:fa:3e:bb:e6:c1:a8:4a:22:be:d9:
9e:fd:d4:fe:26:f6:98:85:1d:9b:84:39:3b:f6:75:
52:19:41:27:c2:a4:a5:61:40:f9:68:83:cf:ea:30:
bb:c8:2c:fa:db:d4:36:fc:27:b4:ee:30:2b:65:fb:
ba:23:8b:c9:47:7d:4d:b4:19:8d:a8:93:f2:6f:18:
20:13:11:09:f8:36:5d:b5:ba:2e:32:1a:f0:ee:14:
6b:0f:04:79:17:12:c7:bd:42:a7:71:f4:e7:0d:dc:
c6:4a:1f:3a:36:28:65:2e:1f:7f:d4:67:a1:42:3a:
d2:17:76:b3:6c:7c:a8:45:df:a6:c6:8a:c9:ea:19:
ac:f1:b8:6e:bf:31:f9:4b:54:f7:b6:e5:ce:19:79:
58:33:d4:e8:da:1c:e5:c5:de:e9:45:66:b8:00:44:
02:b4:08:70:18:d7:00:b6:b6:35:d2:1a:f1:b6:7b:
12:1d:02:e0:cd:bf:e2:7e:33:79:a0:cd:d8:9e:ac:
06:90:b9:42:3a:17:ab:0c:67:1f:7b:17:0e:ab:be:
0e:e7:f7:c8:42:f0:89:18:0b:67:b3:78:9c:ac:5a:
cf:9d:bb:8f:5e:57:34:c6:ab:b6:5d:84:2f:87:71:
e5:6c:be:3d:d1:c0:ac:51:e2:76:84:85:2a:61:9f:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:E9:17:06:BC:4B:4A:36:9E:80:80:1B:75:2C:7D:4A:A0:71:15
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:41:b1:9c:fc:85:9c:8b:4c:b7:c9:36:51:0e:6c:6e:e8:e7:
e2:81:48:d0:e1:82:0f:94:77:ee:bf:0f:1f:5c:99:9d:98:25:
6e:21:bd:f5:7d:3d:26:16:0c:14:9b:4d:00:01:b9:8d:5f:18:
92:80:70:5d:a3:60:3b:73:f8:07:7b:b0:67:6a:c8:79:bc:e0:
74:40:3c:9b:df:6c:7f:88:6a:d2:cc:40:8f:93:1c:bb:e6:d0:
b3:fd:b9:92:2b:36:77:a8:22:77:d1:8a:ba:e8:8b:25:74:7f:
53:7d:72:c7:e5:11:2d:c0:2e:73:de:7c:f9:d3:5f:00:52:4b:
42:f2:05:b0:ca:ec:f8:d8:70:f1:5c:56:16:72:b7:cb:fe:bd:
48:9d:c3:de:74:6b:e7:f1:e2:ca:c1:86:65:0f:68:23:e0:76:
fe:8d:97:cd:33:fd:c7:56:67:6f:15:ed:38:ab:cf:e9:39:0d:
58:0b:9c:ea:b6:cc:7b:02:5f:dd:98:52:22:ec:c1:6d:42:fc:
5d:0a:5b:8d:df:ca:25:66:61:11:e6:b9:ec:a1:f5:41:40:7a:
a8:1f:bf:86:83:6e:8d:3b:f2:f9:79:7b:ff:b9:cd:03:49:03:
34:c1:b7:f6:8e:4a:bf:a6:e0:8f:03:87:3c:a4:ef:a2:de:d6:
b9:40:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:53 2025 by rpki-client