Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: NYSix/ot0vARIxSJYHBmmBUiGaS/34XVzEs5ffrDCdw=
Subject key identifier: D6:74:13:9F:8A:26:26:56:54:46:6C:92:FE:DE:97:5C:C5:DB:B8:60
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 01993313DEE67E77F78741C894814B27C2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 10:02:44 +0000
Manifest this update: Wed 10 Sep 2025 10:02:44 +0000
Manifest next update: Thu 11 Sep 2025 10:02:44 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: XLVEQgmvgc2++uUp58HxgJm+vrv/0IT6OMxJy4hXQbw=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:de:e6:7e:77:f7:87:41:c8:94:81:4b:27:c2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Sep 10 10:02:44 2025 GMT
Not After : Sep 11 10:02:44 2025 GMT
Subject: CN=d674139f8a26265654466c92fede975cc5dbb860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:63:9c:4a:80:de:c2:ec:b0:e5:39:4d:af:
3e:b7:78:d5:2a:f4:78:e6:f6:61:ba:69:e2:cf:46:
e5:95:8e:a3:d3:64:cb:aa:a1:c6:35:e9:b0:ee:9c:
5e:20:76:b0:44:10:15:0c:8f:ef:21:56:73:ca:d1:
c1:c3:83:07:bf:45:fd:62:12:88:85:f9:23:74:5a:
62:aa:fa:6e:ea:37:9f:d7:63:66:fb:4d:85:71:38:
6f:14:24:48:fe:ab:47:58:55:88:9c:80:ed:1c:ec:
42:43:98:59:82:be:78:82:1e:d8:ff:2d:ff:d3:08:
2a:a1:a1:9d:d9:d7:d0:cc:cf:01:bf:fe:49:56:cd:
da:e9:90:a5:2c:0f:38:99:28:dd:7f:79:72:ff:6e:
21:af:8c:0e:21:80:13:05:b7:e4:f0:b0:bd:6e:73:
bb:b8:70:e8:2b:bf:8b:1d:01:bf:15:5b:62:ad:c9:
b7:77:59:fa:f5:16:f1:ff:4c:7c:5c:d8:d0:75:a8:
bb:1f:57:35:2d:14:69:e1:5d:1d:37:3c:4b:82:d2:
8f:f4:86:05:35:4c:35:55:ad:7e:4b:33:2f:09:2f:
73:f7:eb:0a:63:10:c6:36:be:21:95:cd:9c:25:23:
f2:d1:20:a9:3e:96:73:d1:36:7d:76:b2:50:4e:a5:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:13:9F:8A:26:26:56:54:46:6C:92:FE:DE:97:5C:C5:DB:B8:60
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fd:75:d7:93:f8:4b:7c:27:a5:ba:50:2d:44:da:a6:be:d0:
4d:92:3b:6d:1a:7d:af:e1:3f:bb:34:4c:56:39:7a:28:af:e0:
00:ca:a1:67:b1:fd:59:d3:d5:91:a9:1e:5f:8c:30:84:9e:a2:
03:86:63:8f:4d:9b:4b:a4:74:15:d9:93:65:ca:8c:44:86:72:
99:61:ee:78:2a:57:86:02:66:27:cb:f0:bd:46:0a:cb:c4:20:
8e:78:ec:8f:ed:1c:b3:a5:e6:85:74:e2:7b:5a:9e:d1:34:69:
cf:11:b4:d6:6d:b9:f9:89:31:d7:ab:84:3c:aa:67:fd:32:2e:
f3:f8:4e:b5:6c:e4:78:b3:f5:f1:10:cc:d3:51:53:6e:d0:27:
46:12:53:b8:b2:e4:1f:19:94:da:5f:f3:f9:bd:59:77:f9:57:
03:c4:f0:75:62:29:d4:fb:6b:91:be:e5:46:08:2e:25:29:83:
66:01:8d:a7:8e:38:17:0c:52:6e:7d:df:28:8d:66:be:42:7b:
2b:ff:8d:ea:30:32:99:84:33:73:bd:ad:e2:7a:af:a0:48:6e:
36:56:8e:df:33:ea:d2:34:7c:bb:a3:3e:73:bf:f4:58:56:45:
a7:c7:c0:00:2a:6b:b5:71:72:29:b6:9e:8d:21:83:f0:ab:25:
47:43:27:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzE97mfnf3h0HIlIFLJ8LGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjY1M2JiZDE3MDRjNDdiYWRhNjJhYjZjZTM1MDIzMDdm
MjQ0YjYwHhcNMjUwOTEwMTAwMjQ0WhcNMjUwOTExMTAwMjQ0WjAzMTEwLwYDVQQD
EyhkNjc0MTM5ZjhhMjYyNjU2NTQ0NjZjOTJmZWRlOTc1Y2M1ZGJiODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthpjnEqA3sLssOU5Ta8+t3jVKvR4
5vZhumniz0bllY6j02TLqqHGNemw7pxeIHawRBAVDI/vIVZzytHBw4MHv0X9YhKI
hfkjdFpiqvpu6jef12Nm+02FcThvFCRI/qtHWFWInIDtHOxCQ5hZgr54gh7Y/y3/
0wgqoaGd2dfQzM8Bv/5JVs3a6ZClLA84mSjdf3ly/24hr4wOIYATBbfk8LC9bnO7
uHDoK7+LHQG/FVtircm3d1n69Rbx/0x8XNjQdai7H1c1LRRp4V0dNzxLgtKP9IYF
NUw1Va1+SzMvCS9z9+sKYxDGNr4hlc2cJSPy0SCpPpZz0TZ9drJQTqUvLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ0E5+KJiZWVEZskv7el1zF27hgMB8GA1UdIwQY
MBaAFNu2U7vRcExHutpiq2zjUCMH8kS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5Mjkt
YTk4MGJlZDMzYWIwLzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5MjktYTk4MGJlZDMzYWIw
LzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv1115P4
S3wnpbpQLUTapr7QTZI7bRp9r+E/uzRMVjl6KK/gAMqhZ7H9WdPVkakeX4wwhJ6i
A4Zjj02bS6R0FdmTZcqMRIZymWHueCpXhgJmJ8vwvUYKy8Qgjnjsj+0cs6XmhXTi
e1qe0TRpzxG01m25+Ykx16uEPKpn/TIu8/hOtWzkeLP18RDM01FTbtAnRhJTuLLk
HxmU2l/z+b1Zd/lXA8TwdWIp1Ptrkb7lRgguJSmDZgGNp444FwxSbn3fKI1mvkJ7
K/+N6jAymYQzc72t4nqvoEhuNlaO3zPq0jR8u6M+c7/0WFZFp8fAACprtXFyKbae
jSGD8KslR0MnSA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:17:47 2025 by rpki-client