Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: DvaIcQJpgYxfiDp178O8jv0N3M35RSzsDSgwjniAXbs=
Subject key identifier: C5:78:04:91:54:05:A7:89:E2:1F:88:77:F3:B5:10:DA:32:25:3C:DE
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 0198443F07457542DA9F5EE3F2EB4B4E17A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 09DE
Signing time: Sat 26 Jul 2025 01:00:37 +0000
Manifest this update: Sat 26 Jul 2025 01:00:37 +0000
Manifest next update: Sun 27 Jul 2025 01:00:37 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: T9/uCAQu/tLF2nhmin2epvkFBmHfc/wsD3140nVoie0=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:07:45:75:42:da:9f:5e:e3:f2:eb:4b:4e:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jul 26 01:00:37 2025 GMT
Not After : Jul 27 01:00:37 2025 GMT
Subject: CN=c57804915405a789e21f8877f3b510da32253cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:89:ca:8f:d8:ae:a4:03:98:74:b5:d6:a6:
03:58:b1:37:01:77:f0:a1:cf:66:97:07:80:ff:ce:
fb:e3:c0:23:1f:26:83:16:10:d1:52:b9:80:60:ff:
4c:e7:e3:ac:5e:d8:40:70:87:17:0d:d0:6d:89:7e:
fc:ef:f7:f9:56:96:fb:26:93:79:e9:c0:07:92:32:
f8:5e:10:9e:85:e9:e4:9e:8e:dc:ba:7d:eb:64:e9:
73:8c:19:98:7b:23:59:47:70:8a:a3:b1:88:5b:f2:
52:7d:ab:b8:38:b9:79:5f:f9:19:2e:b7:8e:f1:09:
25:df:14:85:46:9d:d4:21:63:91:e8:8b:74:dd:71:
68:f0:2a:a4:b4:5d:ee:02:d9:2e:d7:b8:23:2d:e7:
87:db:9b:09:a5:47:4d:64:2b:fb:2e:da:48:49:de:
90:64:33:00:83:85:87:fc:22:65:a0:a0:bb:13:ed:
34:bf:42:e5:33:81:b7:49:ee:c2:0e:29:35:e5:ea:
4e:96:60:e6:68:ec:03:a8:fe:d3:7d:6c:c2:ac:de:
17:e1:6b:c1:72:27:53:fc:a8:8b:b8:ad:3d:23:41:
1e:9b:e0:d9:66:4a:80:72:fb:f9:89:a6:60:69:83:
f9:c2:ed:c4:50:8b:72:57:51:c9:27:fd:16:04:24:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:78:04:91:54:05:A7:89:E2:1F:88:77:F3:B5:10:DA:32:25:3C:DE
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9f:15:f6:4f:77:81:8c:b8:19:55:74:b1:e1:79:a3:5e:f4:
90:63:f9:63:1e:3b:8b:ca:11:93:21:10:25:9e:9a:49:6a:59:
7f:9e:72:b6:3d:4a:ae:df:66:98:95:cf:4e:5c:ad:7a:db:d3:
ae:2b:ff:64:aa:6f:86:a1:6c:fb:b2:55:b0:67:d1:aa:a1:2d:
3b:35:b8:0a:8e:4f:db:13:2f:d7:a9:8e:24:60:1b:3a:34:b8:
db:67:e9:b7:f2:98:fd:bf:e8:c1:29:61:ed:0e:91:23:11:89:
ad:17:93:bd:57:3c:16:9f:79:6e:52:6f:88:2b:d5:3b:15:62:
ac:5c:cb:10:a1:2d:f3:a3:fe:dd:de:cb:87:68:f9:aa:8c:6d:
38:78:15:28:26:0f:cc:cb:11:08:dc:7c:44:5e:20:3c:8b:8a:
9b:9a:4b:d4:ea:12:b6:dc:ed:a4:17:35:8d:76:13:5e:86:ef:
20:d3:23:58:f0:a4:d7:69:15:8f:7e:87:64:06:f2:02:7f:71:
61:6e:6d:88:79:1c:82:bd:65:d8:b8:28:9e:2d:c1:70:b7:00:
49:1d:53:b1:38:b7:59:fe:17:7c:f1:20:1a:b7:23:74:de:87:
36:c6:4e:37:6b:de:36:57:76:e8:f0:4f:79:2e:ef:d4:7a:e1:
df:14:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:40:43 2025 by rpki-client