Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: mzm7LPdnX6oiY5PeLBAxwGzz90Qzjf3ZMryhpwwlNKc=
Subject key identifier: 5E:D6:35:1A:57:BE:3C:40:25:20:E5:E0:05:BA:E8:E6:54:56:B8:75
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 019833B935D8805EB12BBA19A7342705CBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 01DD
Signing time: Tue 22 Jul 2025 20:00:32 +0000
Manifest this update: Tue 22 Jul 2025 20:00:32 +0000
Manifest next update: Wed 23 Jul 2025 20:00:32 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: 0KMutnp6ttvjkS7YatFSyuZAPBHNLtuBiIh1yzvnD4A=)
2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:b9:35:d8:80:5e:b1:2b:ba:19:a7:34:27:05:cb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Jul 22 20:00:32 2025 GMT
Not After : Jul 23 20:00:32 2025 GMT
Subject: CN=5ed6351a57be3c402520e5e005bae8e65456b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:26:2d:2f:f1:eb:2a:9a:c5:3d:ac:f6:d3:
d0:46:ab:4b:f7:a8:15:99:d6:7f:fc:87:f5:fa:36:
7e:d0:27:3a:83:f3:b9:2e:be:29:3b:ad:2d:a9:6f:
9b:93:cc:d6:20:08:4f:8e:27:c4:4f:a4:36:c1:ad:
2a:e5:df:87:4b:9c:96:c4:47:07:07:c3:cd:10:ce:
cc:60:28:06:5d:a9:96:78:29:78:9c:83:1a:3a:e6:
42:36:8a:8d:db:3e:24:97:6c:d4:1c:a4:a3:57:16:
eb:8a:c6:f0:0c:6d:cd:b3:f5:d5:ef:a4:0b:d3:19:
ae:e5:a7:3a:bf:2e:f4:46:8b:25:a1:59:88:fa:0a:
97:b1:f3:19:84:d2:2b:19:da:0c:60:ed:01:4d:db:
ad:7f:a7:68:e5:b4:83:9d:74:33:8b:22:af:98:13:
db:01:74:40:75:82:26:27:55:51:19:fa:a4:dd:48:
c5:80:fc:82:2c:20:aa:e4:55:cf:46:20:c9:9e:5b:
ad:45:dc:5c:9c:7a:96:78:76:92:aa:6f:cc:78:04:
80:24:22:a1:d0:a0:d6:61:75:40:9b:71:55:64:b0:
44:a0:b1:f1:fc:b3:17:1a:cf:4b:ce:fd:b8:89:cb:
6a:16:2e:83:b0:67:84:ac:a6:dc:a8:0a:56:8c:6f:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:35:1A:57:BE:3C:40:25:20:E5:E0:05:BA:E8:E6:54:56:B8:75
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:a1:8a:d0:23:31:c9:0e:e2:93:06:05:38:c6:1b:01:2d:fb:
76:8b:2d:ba:e0:5e:a5:e3:e2:ce:ff:9d:d2:41:17:98:99:98:
09:d0:14:9e:65:49:1a:61:67:a9:65:7c:c6:c1:d2:f8:94:0a:
fe:a5:15:35:f7:66:9c:04:da:15:88:27:8c:15:1d:cf:48:f6:
06:16:be:02:a6:92:1f:d1:22:ce:cc:97:a5:cf:2e:42:1e:11:
70:c8:c3:30:e6:b3:d9:06:59:f5:b1:bc:bd:a1:1d:b9:f2:61:
f3:82:23:ac:ad:0d:b7:1b:30:9f:6a:dc:48:e1:cf:b3:e8:8b:
c6:c5:2c:9c:36:14:ad:29:cb:4e:80:aa:62:ea:da:9c:13:a0:
7d:ee:2b:61:df:6e:6a:78:93:db:1c:9b:23:92:2d:b0:45:d1:
74:d1:42:70:dd:35:3f:e7:ca:dc:0f:ed:ca:2f:e8:a8:6e:ce:
8e:7b:e3:28:f6:f4:03:97:44:19:c5:58:64:bc:aa:30:34:93:
af:06:08:a5:2c:03:57:a3:2e:7b:ac:dc:f5:f9:3d:fe:8a:11:
af:c4:46:ec:0a:a9:f0:d9:e1:6b:48:e1:b5:c0:9c:b0:08:35:
18:8e:86:fc:88:63:e3:f4:be:eb:7e:d3:66:e0:0f:9a:89:fb:
4d:f7:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:07:35 2025 by rpki-client