Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: 9v1hr+NEvLMSTYEFkaYakU+AzH4GkTR5fO8OYffhA0A=
Subject key identifier: 76:3C:93:CB:95:33:C9:D3:4A:6B:1F:F6:0B:69:3A:A7:78:97:E2:4A
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019A4DAACC8263AAA148A32971E8D6D473A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0AEC
Signing time: Tue 04 Nov 2025 07:00:30 +0000
Manifest this update: Tue 04 Nov 2025 07:00:30 +0000
Manifest next update: Wed 05 Nov 2025 07:00:30 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: lIt7637b0SwVzg7MbrHa5L81C1yYgkMCa1UcR1OrGCo=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cc:82:63:aa:a1:48:a3:29:71:e8:d6:d4:73:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Nov 4 07:00:30 2025 GMT
Not After : Nov 5 07:00:30 2025 GMT
Subject: CN=763c93cb9533c9d34a6b1ff60b693aa77897e24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:ba:a2:04:1b:e3:15:c9:be:34:f0:2a:f3:
b5:db:7f:8b:9f:40:bd:80:db:4f:87:bb:ee:06:61:
b7:16:24:01:84:9b:4d:8c:4c:1f:92:f4:06:e1:b5:
6b:ca:4f:47:20:bf:09:bb:1d:67:d6:ab:72:ac:f9:
bf:73:1d:7b:26:8c:7b:d5:46:26:af:7f:f0:4e:82:
82:71:6f:0e:4f:18:00:3a:69:33:7b:cb:ee:05:8e:
74:2f:1a:d2:d9:05:76:25:f1:66:16:f4:11:4d:98:
da:94:c2:c0:9d:01:a7:d8:7c:23:ad:46:20:1a:0e:
91:47:9c:b2:49:18:0a:c0:9b:b1:8f:2e:36:5d:37:
f3:65:fc:db:cf:79:0c:f3:9d:fb:4a:e7:c4:44:d7:
e4:6f:1d:0d:71:47:23:d9:fe:6e:04:cf:e6:c4:ae:
47:f0:54:cb:6c:fb:c9:b6:3f:d3:85:29:be:fe:3b:
fb:dd:f3:24:0e:ee:53:34:d1:4e:2a:1f:37:38:d7:
5d:c1:83:9c:c1:3c:79:64:18:25:35:58:0d:36:36:
50:54:73:92:25:9a:b1:f2:cb:c2:ab:2f:7b:c7:bf:
c0:b6:47:e0:42:02:75:50:bd:6f:1f:9b:eb:be:32:
d9:df:74:22:47:d8:f0:7a:27:35:76:1a:f2:4c:74:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:93:CB:95:33:C9:D3:4A:6B:1F:F6:0B:69:3A:A7:78:97:E2:4A
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0d:3b:60:9a:f1:8c:5c:96:68:0e:74:df:78:eb:e7:7c:ca:
d8:c7:a1:17:49:92:28:77:5f:71:ce:48:33:7a:75:69:da:a6:
c7:bf:42:2b:a1:15:b2:4e:90:f0:59:ec:8f:ae:f0:8b:f1:62:
df:a5:bb:73:cf:c3:4a:9f:39:af:1b:d8:99:04:9d:59:ed:56:
d0:62:16:63:b6:0e:5f:f6:60:ad:31:36:7c:4c:0e:17:31:86:
8c:e8:e1:a0:30:06:66:1e:39:83:0f:f2:02:7f:18:83:cd:2f:
85:d8:e1:96:c2:d1:01:7b:05:f8:19:6d:d4:d3:64:88:4f:a0:
d5:90:b2:4b:da:a1:e1:90:1a:95:20:14:b1:aa:77:0a:3a:70:
7c:1e:de:46:40:37:de:0c:3e:d4:51:1e:bb:a2:ea:3d:f1:d7:
97:0a:0b:0d:98:68:c3:3b:32:8c:21:b3:34:62:1c:68:35:e2:
83:d4:5c:6e:92:35:13:19:21:22:45:ac:c3:59:3f:4d:1a:cc:
52:8c:b9:b2:17:b1:4a:4d:29:8d:2b:9a:c3:7a:a9:0f:0c:71:
3d:1f:b5:3d:24:21:04:bc:e8:89:94:ae:d3:2a:5c:75:70:7e:
1f:2f:fe:94:9e:16:96:96:81:b1:75:ac:1b:3d:3b:73:69:1f:
62:d4:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:28 2025 by rpki-client