Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File: b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier: weVle8/jXIOHJFXBBKYEVgLKLi1TdC0TT8VZrjAWUg4=
Subject key identifier: 15:2E:70:60:A2:69:D4:EA:EE:B9:D7:2C:04:C2:20:28:BF:36:9E:C5
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 019A71136A87BEC0EE6C93F6B493229EC110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number: 152B
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: CL7byjNI6SyV6BGMmAWPy10+Mvj/R+hNyvhQvKr159g=)
2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6a:87:be:c0:ee:6c:93:f6:b4:93:22:9e:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=152e7060a269d4eaeeb9d72c04c22028bf369ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:03:50:60:18:f4:c0:65:77:bd:2a:69:6d:
50:ab:ef:8d:66:30:49:7e:2e:40:2e:e3:d7:e3:f5:
b5:bf:cd:56:35:09:14:96:b8:fc:dc:fc:d5:91:3b:
52:1e:b1:a7:01:9c:e8:d7:5d:21:0c:9f:73:30:58:
52:2c:0a:a5:0d:4e:3c:5d:e6:ba:7f:64:41:d1:5d:
4c:1d:c8:85:1f:1f:88:84:2e:27:e6:e8:98:2a:83:
bb:0a:10:a3:df:90:0d:b0:27:6d:d4:1a:7a:18:1d:
49:3d:0b:f2:67:28:82:e5:d5:c5:f6:28:2a:41:83:
ff:df:c9:bd:45:ce:9f:2a:b2:b3:04:6a:ce:55:af:
69:33:15:8b:19:bc:65:aa:74:3e:7d:cc:de:ab:5e:
cb:6c:01:77:92:50:d6:ad:42:34:9a:ac:4e:93:8b:
07:5a:ba:d3:e4:15:a0:11:c3:74:35:97:d4:b1:16:
27:73:47:05:00:9d:17:9f:e8:76:79:63:f8:6e:6e:
e4:6d:9d:e9:94:97:d8:92:5c:7e:78:df:01:21:ea:
c7:ca:1b:63:54:72:cb:5b:d8:ce:1c:ff:2d:cd:66:
58:f0:90:91:18:91:b6:f0:13:d9:57:34:b3:82:d6:
49:e9:e0:f1:cc:2d:35:71:23:24:77:82:6f:4f:81:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2E:70:60:A2:69:D4:EA:EE:B9:D7:2C:04:C2:20:28:BF:36:9E:C5
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:c6:46:ff:43:f8:38:3d:0c:da:f7:40:ef:6c:97:6c:46:
89:59:5f:f4:29:4b:b8:82:c8:c0:8e:1c:d1:c6:48:8b:54:ff:
d6:98:36:7c:6e:8a:07:f6:a6:83:39:1c:11:0b:cf:bf:4d:a9:
41:4e:6d:85:d5:4b:28:7a:b6:d3:64:86:4d:16:a1:77:b3:e0:
15:90:dd:f2:08:ee:23:16:2f:15:38:9b:97:93:74:a7:d8:2e:
15:11:24:95:19:7c:fc:ec:52:ae:2c:72:7e:a2:e2:4b:02:59:
8b:69:8c:ef:54:7c:30:45:39:d9:8c:bc:5f:d6:68:5c:9f:6e:
35:4f:90:a2:ef:14:57:fe:9d:98:6d:ea:05:0c:80:8c:f0:f7:
e0:d4:0e:db:f0:35:76:24:d5:ea:e0:58:ac:2c:4f:ac:9f:8f:
39:4c:4e:6d:d6:ea:49:76:5d:6c:67:97:33:2a:10:ff:b7:e9:
f9:26:b1:73:c5:5a:fc:32:71:00:42:a6:15:71:18:0c:f2:fb:
f3:9c:05:32:d8:a6:c3:2c:3f:0e:d1:84:c4:98:5b:1e:6f:ee:
d8:ca:7c:6f:b7:ac:32:49:41:87:30:5b:97:e2:19:50:97:dc:
d1:83:7f:24:55:b5:64:2c:7e:f8:af:be:6a:c7:b8:b2:3d:42:
99:ac:6e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE2qHvsDubJP2tJMinsEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNGRiYmMwNjk2NjlmMmU3ZTg4MjJmNjM5OGY2YjM2YzQ0
OTM0NWMwHhcNMjUxMTExMDQwMTI4WhcNMjUxMTEyMDQwMTI4WjAzMTEwLwYDVQQD
EygxNTJlNzA2MGEyNjlkNGVhZWViOWQ3MmMwNGMyMjAyOGJmMzY5ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jsDUGAY9MBld70qaW1Qq++NZjBJ
fi5ALuPX4/W1v81WNQkUlrj83PzVkTtSHrGnAZzo110hDJ9zMFhSLAqlDU48Xea6
f2RB0V1MHciFHx+IhC4n5uiYKoO7ChCj35ANsCdt1Bp6GB1JPQvyZyiC5dXF9igq
QYP/38m9Rc6fKrKzBGrOVa9pMxWLGbxlqnQ+fczeq17LbAF3klDWrUI0mqxOk4sH
WrrT5BWgEcN0NZfUsRYnc0cFAJ0Xn+h2eWP4bm7kbZ3plJfYklx+eN8BIerHyhtj
VHLLW9jOHP8tzWZY8JCRGJG28BPZVzSzgtZJ6eDxzC01cSMkd4JvT4E0dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUucGCiadTq7rnXLATCICi/Np7FMB8GA1UdIwQY
MBaAFG9Nu8BpZp8ufogi9jmPazbESTRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNzM0MzYtMjI1MS00OWI0LWIzNTct
OTg0Yzk1N2EzNTNlLzEvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lNzM0MzYtMjI1MS00OWI0LWIzNTctOTg0Yzk1N2EzNTNl
LzEvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhzGRv9D
+Dg9DNr3QO9sl2xGiVlf9ClLuILIwI4c0cZIi1T/1pg2fG6KB/amgzkcEQvPv02p
QU5thdVLKHq202SGTRahd7PgFZDd8gjuIxYvFTibl5N0p9guFREklRl8/OxSrixy
fqLiSwJZi2mM71R8MEU52Yy8X9ZoXJ9uNU+Qou8UV/6dmG3qBQyAjPD34NQO2/A1
diTV6uBYrCxPrJ+POUxObdbqSXZdbGeXMyoQ/7fp+Saxc8Va/DJxAEKmFXEYDPL7
85wFMtimwyw/DtGExJhbHm/u2Mp8b7esMklBhzBbl+IZUJfc0YN/JFW1ZCx++K++
ase4sj1Cmaxu3A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:17 2025 by rpki-client