Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: sTTO7GuTcavY6eqOMALYQX80njSW4QwHAsvVNvUsaZk=
Subject key identifier: 8F:C2:B0:58:B5:69:47:F5:DC:5F:A4:1B:DF:81:62:B0:A2:7A:99:07
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 019A30E9E6D30988065BBDB280FB58BFC6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 1182
Signing time: Wed 29 Oct 2025 17:00:26 +0000
Manifest this update: Wed 29 Oct 2025 17:00:26 +0000
Manifest next update: Thu 30 Oct 2025 17:00:26 +0000
Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: VnRsMAo9EMFoxXCbhG/zwl05Q4826HRrL8DgpiNgVqw=)
2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:e9:e6:d3:09:88:06:5b:bd:b2:80:fb:58:bf:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Oct 29 17:00:26 2025 GMT
Not After : Oct 30 17:00:26 2025 GMT
Subject: CN=8fc2b058b56947f5dc5fa41bdf8162b0a27a9907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:2a:fc:6a:65:3f:b6:1d:ab:bb:0f:0b:25:
91:3c:76:13:8f:07:9f:ca:36:5f:ea:e3:90:43:c6:
50:b2:8f:20:49:cc:52:b4:e4:04:6d:69:8e:ce:01:
61:bb:47:7a:cf:7a:c2:8c:1a:34:e5:aa:07:c4:9b:
64:e6:a4:49:f3:30:ae:72:09:46:a3:87:c6:b5:49:
63:70:ef:3e:7e:70:73:a7:e2:f7:4e:46:c0:93:f2:
7e:53:df:62:35:15:e5:3b:77:d8:54:44:ba:40:a9:
11:a8:d5:90:43:f9:38:65:46:92:b4:ae:21:8c:65:
c9:e6:e8:fc:36:2e:a2:89:6d:83:c0:ac:43:d6:22:
cf:02:43:ab:8f:9a:72:7d:96:ca:d7:69:29:9a:18:
87:60:77:47:96:2b:84:ca:85:98:00:e0:28:61:7d:
fc:81:1a:c1:58:ce:10:6e:16:51:74:7a:77:5a:e5:
8a:00:5b:75:de:6b:c0:76:a8:8a:6c:f3:30:6f:5d:
f8:40:ae:82:11:5c:fe:6b:97:fc:57:d6:b4:6b:ba:
39:a3:94:e3:78:a4:d5:f3:b6:2c:8d:21:20:cf:1f:
48:fe:bf:d4:31:f1:cc:f3:fe:f4:2a:97:4e:4e:c5:
c0:07:86:f1:03:0d:b1:53:20:26:49:68:b0:c2:b7:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:B0:58:B5:69:47:F5:DC:5F:A4:1B:DF:81:62:B0:A2:7A:99:07
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:72:7d:d5:f5:13:a0:5c:86:95:3a:89:ec:a9:77:c0:b9:
47:18:d0:ab:71:76:8e:4c:2e:93:0d:10:74:2f:9d:7b:d0:4f:
e9:ca:43:f7:dc:8d:70:93:d1:8b:8c:e1:58:f3:96:e8:10:38:
c9:21:be:71:fc:e0:11:5f:cf:54:46:b9:77:04:92:b2:94:0a:
e9:d6:eb:16:4b:71:10:78:a6:22:37:b9:81:27:49:b0:64:3d:
37:41:74:53:31:46:34:fd:1e:4b:d2:65:a0:48:7a:49:64:78:
1a:5e:a7:a3:8a:f8:4f:1e:f8:e7:e4:42:16:66:f0:89:d2:8b:
2e:61:fb:b9:1d:a4:ea:24:d1:b6:21:d1:b6:8a:9c:b0:96:24:
01:63:a8:f7:76:07:5b:e7:f3:97:f8:2e:8f:ee:7a:d4:e5:fa:
30:00:4b:53:c8:c4:5d:54:62:da:1a:48:39:2e:66:0f:23:6e:
12:70:ee:a0:76:b4:f6:a5:ef:a9:56:3e:84:95:65:04:18:cd:
b1:4c:d5:23:aa:e7:2e:a0:de:ef:60:39:f7:f5:6a:4c:8b:af:
a8:c5:12:83:6a:c9:60:28:02:40:09:6a:ae:c5:a6:e7:4a:e3:
fb:04:90:9d:0d:e7:48:bf:30:a8:e1:41:04:17:45:9a:54:d6:
cd:9d:c8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZow6ebTCYgGW72ygPtYv8apMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl
YjEwZmQwHhcNMjUxMDI5MTcwMDI2WhcNMjUxMDMwMTcwMDI2WjAzMTEwLwYDVQQD
Eyg4ZmMyYjA1OGI1Njk0N2Y1ZGM1ZmE0MWJkZjgxNjJiMGEyN2E5OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYMq/GplP7Ydq7sPCyWRPHYTjwef
yjZf6uOQQ8ZQso8gScxStOQEbWmOzgFhu0d6z3rCjBo05aoHxJtk5qRJ8zCucglG
o4fGtUljcO8+fnBzp+L3TkbAk/J+U99iNRXlO3fYVES6QKkRqNWQQ/k4ZUaStK4h
jGXJ5uj8Ni6iiW2DwKxD1iLPAkOrj5pyfZbK12kpmhiHYHdHliuEyoWYAOAoYX38
gRrBWM4QbhZRdHp3WuWKAFt13mvAdqiKbPMwb134QK6CEVz+a5f8V9a0a7o5o5Tj
eKTV87YsjSEgzx9I/r/UMfHM8/70KpdOTsXAB4bxAw2xUyAmSWiwwrd2WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/CsFi1aUf13F+kG9+BYrCiepkHMB8GA1UdIwQY
MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt
NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk
LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4xyfdX1
E6BchpU6ieypd8C5RxjQq3F2jkwukw0QdC+de9BP6cpD99yNcJPRi4zhWPOW6BA4
ySG+cfzgEV/PVEa5dwSSspQK6dbrFktxEHimIje5gSdJsGQ9N0F0UzFGNP0eS9Jl
oEh6SWR4Gl6no4r4Tx745+RCFmbwidKLLmH7uR2k6iTRtiHRtoqcsJYkAWOo93YH
W+fzl/guj+561OX6MABLU8jEXVRi2hpIOS5mDyNuEnDuoHa09qXvqVY+hJVlBBjN
sUzVI6rnLqDe72A59/VqTIuvqMUSg2rJYCgCQAlqrsWm50rj+wSQnQ3nSL8wqOFB
BBdFmlTWzZ3IFw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 21:18:38 2025 by rpki-client