Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: z+SERcAGXJ+s642M3Uj5FPCqmJ/jgPouRVqSw34Hcio=
Subject key identifier: 59:7D:CA:77:77:F8:7E:F1:21:88:BE:68:C1:1E:72:7F:53:E4:9D:39
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 01983F4F53B48137BBC488452DB892D4B408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 01E3
Signing time: Fri 25 Jul 2025 02:00:19 +0000
Manifest this update: Fri 25 Jul 2025 02:00:19 +0000
Manifest next update: Sat 26 Jul 2025 02:00:19 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: jb37KethxHky/aLm94ydqU+Zli5tbxYzpR75Eoj3Jhg=)
2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:4f:53:b4:81:37:bb:c4:88:45:2d:b8:92:d4:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Jul 25 02:00:19 2025 GMT
Not After : Jul 26 02:00:19 2025 GMT
Subject: CN=597dca7777f87ef12188be68c11e727f53e49d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:42:c6:d4:d7:ea:3e:4b:0d:ee:fb:23:07:
a8:d6:83:e3:ca:36:b9:83:f2:2b:ef:1b:b2:c0:b9:
a2:4c:d5:99:31:57:0e:2b:5c:03:35:73:76:22:0e:
cb:35:74:66:60:7e:e4:79:ae:fb:a6:2b:ec:c3:b7:
93:04:5a:b8:25:ea:c1:31:07:72:7f:7b:d4:3b:25:
eb:50:da:ec:50:86:f1:df:6d:b6:b0:ad:69:04:98:
54:1f:8b:60:24:16:b9:96:43:db:b7:d5:82:44:89:
fb:dd:20:48:7b:8a:f1:45:5a:1a:26:c5:3f:88:0a:
47:73:c5:9f:b6:5d:84:20:ab:8e:a3:0d:db:c6:f1:
58:5d:75:4c:3f:29:97:70:68:e7:f1:2b:a5:62:9a:
bc:34:66:a8:2c:bb:75:db:e1:fa:ea:e8:fd:23:ec:
70:bb:a6:06:c9:30:4d:a0:ae:40:1d:96:3e:1e:b7:
50:4e:49:0a:ee:0a:96:b2:c9:83:df:7f:64:77:cd:
b3:fe:ef:ae:99:d6:ae:e6:7e:e9:58:ff:da:7f:42:
4d:6e:4b:84:1b:0f:82:1e:10:ce:36:8d:7a:94:d9:
33:ac:00:45:0f:e4:fa:c5:26:dc:22:fb:99:5d:fc:
31:9f:fe:21:b8:d9:ae:7b:88:3b:b9:86:40:e9:0d:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:CA:77:77:F8:7E:F1:21:88:BE:68:C1:1E:72:7F:53:E4:9D:39
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4e:c4:c7:93:89:80:b4:f8:51:9a:c1:55:5a:1f:98:ff:1c:
74:9b:43:fe:f6:20:62:b5:36:0b:e3:c9:04:6b:e4:98:07:f2:
78:bd:51:54:4c:81:d0:09:e8:b6:eb:bd:41:93:f9:f7:9a:9c:
7a:fe:90:2e:d1:cc:ba:d5:9a:ae:5a:7a:c5:67:53:a7:50:0a:
91:db:97:ed:80:74:92:77:12:84:db:42:36:c5:c0:16:0b:b6:
6f:60:ae:ef:fa:97:17:93:91:5f:60:d6:8b:a7:4b:c5:e3:71:
90:3b:d6:67:c3:b7:b6:db:d2:65:f8:49:70:9c:f9:2d:a5:e3:
13:ee:cb:5a:1b:c6:c2:8b:c7:f7:8d:22:d9:47:5c:d4:a9:56:
12:0c:45:f4:40:cd:ef:42:ae:19:52:e8:e5:c9:5c:52:4b:1f:
6d:8c:f5:e5:37:c3:6e:d5:02:6e:c8:a2:a5:e0:e6:9b:df:cb:
60:ae:4b:d4:6c:c4:2c:c5:e5:35:26:11:08:45:c8:1e:03:1a:
2a:76:ef:9e:15:76:24:8c:7c:fa:64:3c:10:74:7a:ee:45:ef:
b8:4f:0d:79:75:d0:33:61:e2:1c:58:1c:c5:7b:e6:fe:cb:f8:
f4:c2:f2:ca:c6:15:a3:61:e1:19:2e:6f:07:99:62:e0:3f:dc:
62:97:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:46:31 2025 by rpki-client