Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: ofDr5WJsqcEw06wmuuvfQ/XMF7tXMJ4TjhrcZlQ+oAU=
Subject key identifier: 68:34:36:F6:A9:43:5F:74:69:E6:31:6E:D7:D7:20:FB:F1:1B:DB:E7
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019847780D8708BBED78DD91FD2D8B5A5D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:01:46 +0000
Manifest this update: Sat 26 Jul 2025 16:01:46 +0000
Manifest next update: Sun 27 Jul 2025 16:01:46 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: UwQjqyCXV1wYb5UGA1zNEwGiFbSpzEnQt9K3pTTAZXI=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:0d:87:08:bb:ed:78:dd:91:fd:2d:8b:5a:5d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jul 26 16:01:46 2025 GMT
Not After : Jul 27 16:01:46 2025 GMT
Subject: CN=683436f6a9435f7469e6316ed7d720fbf11bdbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:48:b1:2a:05:3c:1e:c9:66:bf:c6:c2:d4:
73:d2:5c:c1:66:cb:19:39:57:33:f5:bb:e5:c3:33:
ff:b7:18:e1:be:a8:b6:2b:06:39:c4:d4:d9:c8:74:
e9:0d:b1:a0:4c:1e:9d:a4:27:7f:fc:91:61:e1:8a:
42:f8:1a:74:af:4a:3e:25:45:3d:47:13:98:c7:66:
cb:a0:56:91:0c:2c:76:c7:2b:c1:3e:79:7d:9e:54:
99:65:7d:e3:63:61:29:48:a7:bf:ae:65:0f:d4:37:
6e:76:0a:7c:e8:07:80:94:f7:c8:eb:4a:50:46:f9:
3d:76:90:77:52:7a:4e:9d:6c:9d:9e:a8:d5:02:ff:
45:f2:be:75:b2:fa:68:4d:8c:71:3d:4e:c6:53:30:
6a:ad:e6:61:dd:4c:41:72:60:8d:9f:e6:fe:18:1b:
62:30:56:b5:2b:8e:17:1c:bf:23:45:60:43:0b:9f:
5b:34:e9:36:3e:37:cd:56:51:61:dc:1f:70:8a:99:
1f:9d:f3:24:9b:d5:df:58:8d:26:66:3a:74:e4:3f:
ee:b3:2f:10:0b:e7:e9:ee:35:39:78:f3:03:0b:74:
23:a9:58:69:e2:d4:38:aa:b3:f5:83:bb:4f:a4:18:
b4:fe:44:ce:93:53:cd:e7:98:8c:01:6e:5e:1f:e0:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:36:F6:A9:43:5F:74:69:E6:31:6E:D7:D7:20:FB:F1:1B:DB:E7
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:94:96:b1:a6:28:da:c7:d6:06:40:37:24:89:17:ff:c6:
4e:4e:46:ef:86:ce:77:f9:1d:df:e2:5d:53:82:47:e1:1c:be:
a7:5f:5b:40:98:a8:e6:9a:36:3d:8b:3c:e0:48:fc:d4:b7:39:
27:03:17:1b:20:9e:f3:6a:e5:81:08:51:f4:ab:6b:2f:50:b1:
c4:69:30:5e:46:54:94:bc:a1:93:dc:96:3e:87:ab:ec:f7:da:
01:77:b9:4c:a3:76:ec:12:18:0a:16:1b:17:45:4e:1b:58:95:
da:ef:f0:35:06:c0:42:e7:9c:e4:f9:ac:aa:5b:73:4f:87:23:
2c:18:a1:5f:69:dd:22:88:5e:a3:24:86:90:d6:4b:e9:97:38:
24:db:54:fb:19:aa:33:b0:e7:c2:85:01:e9:24:5d:82:c7:a4:
d1:f2:e7:bf:bc:6a:f2:23:ef:a5:0c:cc:1a:92:79:c2:c7:60:
5b:da:cd:9c:70:d2:a5:ec:62:8f:3e:e6:6c:1e:2a:ad:8d:51:
eb:5a:ed:95:c5:cd:ae:57:cd:6e:be:0a:4d:26:44:44:ab:d3:
d6:af:2c:16:c2:d7:7a:c6:67:14:9d:50:3c:17:0f:3c:a6:7d:
7b:51:1f:fe:4d:aa:63:99:52:77:1e:e2:2f:2f:dd:b2:6a:73:
3e:f9:5a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeA2HCLvteN2R/S2LWl2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjY1M2JiZDE3MDRjNDdiYWRhNjJhYjZjZTM1MDIzMDdm
MjQ0YjYwHhcNMjUwNzI2MTYwMTQ2WhcNMjUwNzI3MTYwMTQ2WjAzMTEwLwYDVQQD
Eyg2ODM0MzZmNmE5NDM1Zjc0NjllNjMxNmVkN2Q3MjBmYmYxMWJkYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqctIsSoFPB7JZr/GwtRz0lzBZssZ
OVcz9bvlwzP/txjhvqi2KwY5xNTZyHTpDbGgTB6dpCd//JFh4YpC+Bp0r0o+JUU9
RxOYx2bLoFaRDCx2xyvBPnl9nlSZZX3jY2EpSKe/rmUP1Ddudgp86AeAlPfI60pQ
Rvk9dpB3UnpOnWydnqjVAv9F8r51svpoTYxxPU7GUzBqreZh3UxBcmCNn+b+GBti
MFa1K44XHL8jRWBDC59bNOk2PjfNVlFh3B9wipkfnfMkm9XfWI0mZjp05D/usy8Q
C+fp7jU5ePMDC3QjqVhp4tQ4qrP1g7tPpBi0/kTOk1PN55iMAW5eH+BbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg0NvapQ190aeYxbtfXIPvxG9vnMB8GA1UdIwQY
MBaAFNu2U7vRcExHutpiq2zjUCMH8kS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5Mjkt
YTk4MGJlZDMzYWIwLzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5MjktYTk4MGJlZDMzYWIw
LzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIeUlrGm
KNrH1gZANySJF//GTk5G74bOd/kd3+JdU4JH4Ry+p19bQJio5po2PYs84Ej81Lc5
JwMXGyCe82rlgQhR9KtrL1CxxGkwXkZUlLyhk9yWPoer7PfaAXe5TKN27BIYChYb
F0VOG1iV2u/wNQbAQuec5PmsqltzT4cjLBihX2ndIoheoySGkNZL6Zc4JNtU+xmq
M7DnwoUB6SRdgsek0fLnv7xq8iPvpQzMGpJ5wsdgW9rNnHDSpexijz7mbB4qrY1R
61rtlcXNrlfNbr4KTSZERKvT1q8sFsLXesZnFJ1QPBcPPKZ9e1Ef/k2qY5lSdx7i
Ly/dsmpzPvlavQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:24 2025 by rpki-client