Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier: 0rvKFMftZHI3r+iISUtqwSOUySFTRdcVKCmRUG9GBRg=
Subject key identifier: 95:33:32:A1:74:0F:0D:54:FA:C6:C6:9A:0B:8A:58:16:0D:92:36:FD
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial: 01984A413B7D9E0AC9CDC1E384E520550610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: EdWFIgsmox4Homdb6SIZTSBoN+uapBlfdxkbqRydOTQ=)
2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3b:7d:9e:0a:c9:cd:c1:e3:84:e5:20:55:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=953332a1740f0d54fac6c69a0b8a58160d9236fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:89:51:21:86:af:df:ce:57:d2:3e:b3:91:
8d:b7:d9:58:ba:33:4d:33:a2:98:f3:e2:6c:20:ca:
56:d7:0f:75:62:f2:b3:47:2e:74:28:a0:51:a8:ab:
c9:20:ec:08:6f:64:1d:f4:41:3a:c0:bd:aa:06:c2:
89:e9:81:93:c4:83:0a:34:8e:40:94:1c:1b:cc:3f:
97:13:d3:73:c7:d6:23:74:83:1e:8b:00:91:11:9d:
1e:f7:ef:9c:df:e2:2f:bd:fe:ea:3d:ac:74:3d:e1:
12:20:d4:f9:e8:44:6f:a6:05:7c:5e:9d:ef:2a:93:
ac:b9:40:cc:6e:6a:0e:05:de:2f:3d:ba:58:49:bd:
cf:a8:56:77:93:df:9a:95:8a:73:f3:f4:2e:af:c5:
e7:af:77:c2:28:80:a7:02:8b:bb:e0:7a:2c:77:8c:
1c:f9:40:94:d5:dd:86:2d:bb:44:34:bb:e7:14:e5:
be:7e:19:64:05:9f:04:7c:de:6b:b5:f1:29:92:9d:
44:4d:2a:48:f7:49:e6:e7:f4:e8:cb:05:02:5e:3d:
ce:41:6d:52:31:d2:59:0e:8c:89:b9:8e:b1:c7:e1:
8b:06:fa:7c:a6:92:de:20:4a:a6:5e:71:89:1a:a7:
95:df:67:9a:96:9d:81:fa:30:58:c7:e0:5a:a7:52:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:33:32:A1:74:0F:0D:54:FA:C6:C6:9A:0B:8A:58:16:0D:92:36:FD
X509v3 Authority Key Identifier:
keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:cc:33:74:aa:c4:dd:13:b2:fd:c6:1e:20:9b:c5:ea:83:
27:cd:9a:f3:9a:03:58:1e:41:71:a2:59:c9:ea:70:8a:6d:e0:
39:28:10:04:36:57:48:bd:f1:06:21:b0:fc:bc:6a:ec:cf:c3:
4f:59:12:ee:29:97:ac:11:d0:30:7b:52:d1:2b:7d:25:97:e4:
fe:dc:61:38:93:ad:e2:5e:a4:4f:0a:65:32:8f:e8:27:1a:3b:
de:4c:de:47:10:f2:92:2a:04:17:ed:b8:6a:ed:36:df:71:38:
3b:67:9b:f9:ac:ca:e2:9d:fc:5d:16:2d:ce:84:53:83:01:ce:
8a:d3:df:10:1f:3a:00:4c:08:a3:5a:fb:83:b9:bc:a6:23:1f:
a0:7c:bb:13:34:a8:ca:b2:5c:69:6d:ac:99:da:ed:9a:5e:cc:
10:2d:93:99:8d:c2:02:b5:73:2a:6c:17:46:b7:a2:61:f2:6f:
d7:97:e2:84:d5:d3:51:29:1b:cc:91:7f:66:c4:1b:8e:07:7f:
17:14:26:a9:18:84:89:07:cd:a7:7b:f5:13:20:4a:0f:46:53:
aa:3c:51:5b:01:8c:47:48:be:9a:ba:44:12:88:1f:0c:11:81:
0b:0a:eb:fb:29:21:04:8d:5f:9b:e1:83:a3:9f:23:94:fc:7c:
b9:12:24:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQTt9ngrJzcHjhOUgVQYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl
YTlmODgwHhcNMjUwNzI3MDUwMDQ1WhcNMjUwNzI4MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg5NTMzMzJhMTc0MGYwZDU0ZmFjNmM2OWEwYjhhNTgxNjBkOTIzNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOuJUSGGr9/OV9I+s5GNt9lYujNN
M6KY8+JsIMpW1w91YvKzRy50KKBRqKvJIOwIb2Qd9EE6wL2qBsKJ6YGTxIMKNI5A
lBwbzD+XE9Nzx9YjdIMeiwCREZ0e9++c3+Ivvf7qPax0PeESINT56ERvpgV8Xp3v
KpOsuUDMbmoOBd4vPbpYSb3PqFZ3k9+alYpz8/Qur8Xnr3fCKICnAou74Hosd4wc
+UCU1d2GLbtENLvnFOW+fhlkBZ8EfN5rtfEpkp1ETSpI90nm5/ToywUCXj3OQW1S
MdJZDoyJuY6xx+GLBvp8ppLeIEqmXnGJGqeV32ealp2B+jBYx+Bap1KQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUzMqF0Dw1U+sbGmguKWBYNkjb9MB8GA1UdIwQY
MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt
NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw
LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR7MM3Sq
xN0Tsv3GHiCbxeqDJ82a85oDWB5BcaJZyepwim3gOSgQBDZXSL3xBiGw/Lxq7M/D
T1kS7imXrBHQMHtS0St9JZfk/txhOJOt4l6kTwplMo/oJxo73kzeRxDykioEF+24
au0233E4O2eb+azK4p38XRYtzoRTgwHOitPfEB86AEwIo1r7g7m8piMfoHy7EzSo
yrJcaW2smdrtml7MEC2TmY3CArVzKmwXRreiYfJv15fihNXTUSkbzJF/ZsQbjgd/
FxQmqRiEiQfNp3v1EyBKD0ZTqjxRWwGMR0i+mrpEEogfDBGBCwrr+ykhBI1fm+GD
o58jlPx8uRIkXA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:11 2025 by rpki-client