Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: F1Np6ZNax/MhM2XRPxsVyZbBYK3QT4EQajyo22vZK5Q=
Subject key identifier: 6B:8E:E9:3A:EB:FE:D4:7C:06:B9:E7:7E:54:66:3F:D0:14:DC:2D:28
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019A209C3FD295E01FCE50FC02E1FC60FF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 13:01:42 +0000
Manifest this update: Sun 26 Oct 2025 13:01:42 +0000
Manifest next update: Mon 27 Oct 2025 13:01:42 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: XtdBRHxHKNLHlyXPuEOeMaFZge+iDY8v6KYQRAFG07Y=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:3f:d2:95:e0:1f:ce:50:fc:02:e1:fc:60:ff:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Oct 26 13:01:42 2025 GMT
Not After : Oct 27 13:01:42 2025 GMT
Subject: CN=6b8ee93aebfed47c06b9e77e54663fd014dc2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:06:94:71:ef:cf:bb:29:b4:37:2b:58:14:
3c:87:61:91:37:bf:f7:f1:72:1a:fd:dc:a4:a8:5a:
fb:cd:5d:e2:31:98:a3:8a:15:27:ec:60:61:a4:73:
b8:e3:2d:70:18:d7:e1:f1:84:9d:d7:d1:63:f1:db:
b8:2a:f7:8d:b4:e6:fa:1d:ea:85:5d:da:df:4c:ba:
1a:96:41:be:19:ec:8d:b5:3c:3c:8e:23:30:71:bf:
26:d8:94:14:ff:6d:a3:43:1e:e3:0d:0b:f7:01:0f:
18:15:60:ac:0f:95:7b:84:fb:8c:67:af:09:c8:76:
4b:17:2b:b3:46:f0:0a:4a:06:b8:ad:66:02:17:dd:
71:f0:7d:28:77:4a:90:e4:2a:6d:00:58:d5:b5:7b:
71:89:d1:df:25:a9:d9:66:09:a3:4d:e4:13:97:ea:
f2:28:03:51:3f:68:de:b8:af:f0:ab:11:2e:e4:db:
b9:3e:cf:71:e5:d0:f7:3c:8d:bd:9e:ab:4f:8e:40:
08:ac:d5:d9:52:de:b4:1f:09:5a:d7:d2:ce:79:77:
57:38:36:ee:90:ab:19:62:d5:77:93:9f:50:b1:a9:
34:53:21:6e:ae:29:ad:88:16:45:f7:56:42:2c:70:
0e:05:69:7a:b4:1e:99:3e:80:99:b1:ce:57:31:b9:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:E9:3A:EB:FE:D4:7C:06:B9:E7:7E:54:66:3F:D0:14:DC:2D:28
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c9:f4:d4:0c:60:85:f4:5d:95:a0:69:83:12:5d:8c:c3:ea:
74:90:b8:af:22:d2:72:d0:5b:a1:4e:bd:22:1d:20:ea:e4:aa:
88:1e:8b:71:c7:0a:b4:0a:d4:1c:26:39:4e:d9:bc:81:28:f5:
6e:39:06:4a:e6:58:c5:52:97:6b:9c:a8:41:7f:2a:7b:4f:99:
ae:01:87:0d:9e:37:ba:d8:20:ed:86:ba:c7:35:11:98:0c:12:
fb:fe:db:ab:d5:b0:b4:84:2c:54:9b:8f:0f:bc:1d:93:5e:59:
ba:00:77:1f:2f:12:53:eb:3e:a9:cc:6e:b3:d9:5c:30:80:16:
ed:c2:75:34:db:62:c3:a5:5a:db:3c:98:d4:c3:7a:c1:66:12:
82:a9:34:90:3e:93:6f:c7:5a:7d:f8:c1:47:e5:e9:25:67:c7:
e4:fb:4a:09:68:08:2c:63:8d:b0:0c:72:73:61:f6:b7:6d:b1:
d2:2a:ef:22:ed:0f:34:fe:1b:18:48:7d:0f:7b:a3:31:5e:54:
75:14:73:00:c5:6a:f2:51:6f:33:f7:84:2f:ce:a2:21:ec:cc:
a0:d8:96:2a:e5:58:97:c8:95:7a:43:ed:55:b2:cd:f3:76:3c:
cb:56:66:91:f0:59:97:0b:86:ff:20:7d:62:c1:6f:83:8b:3e:
fa:e0:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:24:41 2025 by rpki-client