
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File: b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier: MJ1OzlCtcj+jBNyAUPPjg71rGo/QB5jR5R6Yw0a8fCY=
Subject key identifier: 94:41:A7:82:28:98:77:64:92:A0:BC:FF:DD:14:86:7B:0B:42:A1:9D
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 019922FA911D6A9C71706A8769388C01BD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number: 147E
Signing time: Sun 07 Sep 2025 07:01:10 +0000
Manifest this update: Sun 07 Sep 2025 07:01:10 +0000
Manifest next update: Mon 08 Sep 2025 07:01:10 +0000
Files and hashes: 1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: kG6BksICOKPn6h64O2DJnTV3Oe2uLaiTdfclNLIq6RE=)
2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:91:1d:6a:9c:71:70:6a:87:69:38:8c:01:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Sep 7 07:01:10 2025 GMT
Not After : Sep 8 07:01:10 2025 GMT
Subject: CN=9441a7822898776492a0bcffdd14867b0b42a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:f5:67:2e:da:0f:ab:bc:c7:78:18:8d:cc:
1f:4a:ef:19:72:e0:78:6a:11:5f:21:0d:37:15:06:
d2:8a:30:02:03:07:25:c0:08:15:ea:80:b6:99:6a:
bb:63:37:fc:37:b3:bc:81:74:5e:2c:48:e5:3e:03:
53:5c:e5:6a:b8:d4:d5:0f:32:47:ae:20:25:04:aa:
09:25:d4:08:de:f0:67:17:62:13:68:82:a0:b2:63:
7d:e5:3e:19:b5:07:97:96:27:f3:bb:9d:2f:2c:1c:
0a:29:37:c2:1d:a9:22:b6:fc:d6:de:92:35:4b:73:
79:69:e5:c5:67:8b:03:f5:fd:69:6c:61:6f:9d:b3:
51:e6:3c:01:d1:1f:db:fa:fc:19:bc:ea:cf:2f:a7:
78:9d:06:c8:67:1d:43:4a:01:c7:cf:e5:05:ef:69:
2f:42:d6:44:5b:55:18:88:ff:aa:5c:c6:bc:96:2c:
0b:93:01:9c:28:fd:a8:52:2e:85:be:07:b5:1f:df:
c0:01:25:7f:b5:92:ca:d5:9b:fe:fc:12:48:29:87:
80:d9:a0:a5:ab:ba:4a:a9:a3:37:ce:40:cd:0a:e2:
07:2b:4e:59:5e:f1:c4:41:07:33:82:eb:a3:74:4a:
fa:ca:fe:62:20:96:e9:f8:51:fc:85:5d:18:f1:1b:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:A7:82:28:98:77:64:92:A0:BC:FF:DD:14:86:7B:0B:42:A1:9D
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:50:e1:4d:00:96:85:d8:7c:3b:0f:7a:52:1d:5f:8e:bd:
f7:2d:71:9b:f4:93:cb:f4:83:ff:3d:fc:63:f9:10:ed:4d:30:
5d:34:6d:2f:07:d6:5a:b3:23:3f:b7:64:0a:25:29:4b:e6:27:
9f:54:b7:6c:3c:fb:d0:56:3a:01:8b:0a:66:a4:42:d1:d3:cb:
d9:14:99:5c:74:9c:7b:f8:4e:c7:72:f0:07:db:68:91:c2:f9:
f8:a4:16:90:d8:7d:f4:7f:79:46:f9:85:2c:e4:46:55:4b:f4:
a6:cb:e7:40:26:2d:0a:0a:42:7f:46:b9:68:25:35:fd:d7:a7:
a2:bc:dd:da:05:34:4d:d1:22:20:a2:26:bd:eb:3d:9f:17:a7:
ff:7c:27:61:ef:00:52:b1:f7:1e:0a:13:05:a7:77:c3:39:83:
74:6e:ac:ad:7f:6c:6f:b1:67:46:50:0d:82:82:f7:e9:18:f8:
45:70:fc:46:54:67:a6:1f:0c:cb:f9:bd:9c:8e:d0:67:45:36:
cc:dd:b3:77:61:e4:bd:4f:8a:30:f6:4b:3e:f6:b5:2b:69:b9:
0e:4b:11:d2:19:99:db:e4:ca:c6:43:6c:d7:c5:0d:1f:7b:ff:
4e:4b:0b:bb:90:ba:43:37:29:f4:27:cb:ed:4f:78:86:e8:a5:
0d:55:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:03 2025 by rpki-client