Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: krU4hjtlNRaV6B7kzUDlPa/ylMy8mWlkXn2sgIj+d9c=
Subject key identifier: CA:FA:06:9B:0A:BF:AC:B1:7D:0A:25:6E:82:CB:C8:53:9C:48:F8:EB
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 0198748770B501FC3898A8E52B0C24CA1E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 09F7
Signing time: Mon 04 Aug 2025 10:01:29 +0000
Manifest this update: Mon 04 Aug 2025 10:01:29 +0000
Manifest next update: Tue 05 Aug 2025 10:01:29 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: /bg+L6L36d6OwMZVXjrB5MxOxfggUwuET3Yiiznj4ys=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:70:b5:01:fc:38:98:a8:e5:2b:0c:24:ca:1e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Aug 4 10:01:29 2025 GMT
Not After : Aug 5 10:01:29 2025 GMT
Subject: CN=cafa069b0abfacb17d0a256e82cbc8539c48f8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:10:26:a8:b9:7f:7b:65:92:dc:47:bd:1a:
a2:19:43:f3:93:0b:c2:28:2d:98:f0:c4:36:eb:a6:
27:24:95:0b:81:50:4a:c7:38:1c:65:0d:8c:ae:cf:
c4:c5:88:1d:73:83:81:8b:61:1b:c7:5e:98:bd:ca:
a4:34:8b:16:57:91:7b:4b:35:65:26:7d:33:c2:e8:
e0:1f:04:04:bb:c5:8a:dc:77:44:e0:94:f3:af:04:
3c:af:b6:06:90:31:93:7a:15:c7:35:b1:e7:89:78:
ea:dc:e6:e7:7a:28:2d:9d:cb:71:29:b2:a4:4a:13:
1e:b0:f2:28:f2:24:85:2a:1c:63:70:9d:62:33:3d:
f0:b0:76:cd:70:b4:28:3f:57:81:68:e0:69:0a:78:
c2:a5:b4:91:a3:d2:f3:15:f9:67:03:f8:31:63:88:
1a:2a:d1:66:f3:20:b7:59:de:ad:bb:5d:75:21:c4:
d8:99:2e:8a:25:08:17:63:86:2e:29:29:6b:56:b9:
83:1a:06:42:0a:ac:57:6d:87:01:f1:0d:31:05:2f:
85:e8:a0:06:48:e7:13:c4:43:e7:ef:57:79:de:2f:
5f:07:63:bc:c3:e6:9f:e4:99:a5:2b:24:f4:13:c9:
91:63:39:80:0b:cf:86:b6:0a:82:ec:4b:63:90:1c:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:06:9B:0A:BF:AC:B1:7D:0A:25:6E:82:CB:C8:53:9C:48:F8:EB
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:16:68:78:26:5c:2b:34:bb:6d:d1:20:4b:15:f9:be:53:5a:
7a:8a:6e:d6:2d:63:35:2e:1d:7a:80:26:bc:a4:58:9e:ee:0a:
27:18:02:b9:08:b3:01:2d:26:0f:61:95:af:bf:01:cc:58:63:
4c:fd:62:a5:40:50:f8:ad:a0:86:78:fe:d3:15:f9:1a:48:10:
d8:19:d9:4f:bc:f4:02:0d:74:79:a1:e8:a0:02:eb:71:7c:36:
09:85:f3:d0:06:3d:8d:31:17:45:fb:a8:05:ec:d7:ce:58:6a:
d8:62:fc:21:67:31:5d:18:8a:f8:1a:c2:4a:6d:39:60:bb:34:
d3:71:fa:39:21:92:5c:a2:f6:6a:db:fa:10:c3:2a:34:be:50:
16:77:93:54:36:d3:e5:28:de:a0:65:bf:df:66:66:3a:31:37:
08:f9:8e:68:00:3b:08:dd:b9:d5:c6:75:e8:4b:d2:d4:f9:01:
cb:1e:4c:88:24:b1:7d:95:78:34:7a:a4:c3:ff:e9:5f:bb:3d:
04:fb:9a:e9:46:93:2d:89:9c:7d:f3:7e:94:e6:7d:a4:8b:48:
50:27:86:a9:cf:0a:58:de:e9:d6:dc:6c:37:ca:69:8c:6e:c8:
6d:fb:ce:b1:d3:51:4f:bb:58:75:b5:d7:f7:49:e9:1a:c7:e1:
29:ca:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:21 2025 by rpki-client