Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: Pzl2Rqqp3GL+gcLzfBCww1LUpEHA4g73SJMRiHRTDfE=
Subject key identifier: 4D:12:34:07:DB:EB:D6:A2:98:92:7D:BD:99:B6:C0:01:13:73:6A:3B
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 01992CD939D3682A8874C040B41234388533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 025E
Signing time: Tue 09 Sep 2025 05:00:57 +0000
Manifest this update: Tue 09 Sep 2025 05:00:57 +0000
Manifest next update: Wed 10 Sep 2025 05:00:57 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: qajMmvVAVJxwvl3A2HDFv5ORmpjzAV7JnB7r3oeZgxc=)
2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:39:d3:68:2a:88:74:c0:40:b4:12:34:38:85:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Sep 9 05:00:57 2025 GMT
Not After : Sep 10 05:00:57 2025 GMT
Subject: CN=4d123407dbebd6a298927dbd99b6c00113736a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:48:b0:29:dc:cd:0f:9e:74:b4:2d:a6:6c:
e1:80:3f:1e:7d:53:4c:2f:db:f7:91:90:a8:b0:ff:
ca:72:59:38:91:c3:d4:6a:f7:cc:47:87:77:79:09:
3a:cc:0d:a4:be:e4:6d:17:27:49:09:01:0a:f2:49:
1b:ed:9b:c4:18:3b:fa:8b:97:95:aa:42:1c:a2:05:
5c:fd:f2:d6:cb:58:68:93:15:06:e7:26:3c:aa:24:
6f:86:65:87:0f:48:7e:36:1d:14:50:4c:87:f8:4c:
e5:a9:17:3c:5b:2f:ce:7e:7e:a9:e9:3e:e5:e0:c1:
ee:72:3a:f1:17:dd:60:57:7d:eb:f9:7f:0a:22:3e:
17:15:56:9f:25:15:4a:b5:4a:d8:b6:9b:d7:7f:d8:
00:96:54:7f:24:ce:c6:a6:6f:17:f6:51:60:99:a3:
bf:83:64:41:1a:3f:c5:45:13:ff:ac:13:37:ff:f8:
f2:f4:b3:40:cc:2f:99:64:6f:e0:b9:9f:43:0a:06:
a7:f0:07:37:15:61:47:1c:e0:11:b5:c5:81:4f:92:
e2:0a:09:ee:ca:da:f3:f1:eb:45:7c:4f:1a:3d:da:
ee:75:81:2f:9b:27:49:46:7b:a9:84:c3:79:aa:d4:
6a:89:ac:dc:4a:7e:6f:3a:3a:9b:7f:91:63:61:4a:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:34:07:DB:EB:D6:A2:98:92:7D:BD:99:B6:C0:01:13:73:6A:3B
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:d3:fd:e2:ef:ae:21:08:f9:5c:5e:fe:ee:37:50:39:83:
ef:63:0d:7b:13:04:ba:95:30:b6:8f:e9:2e:a6:96:df:d2:e8:
52:59:18:48:97:d5:ee:37:8f:76:10:d3:f4:54:e6:38:47:6a:
fa:ea:51:cf:51:e9:88:69:f9:c9:33:51:ba:ae:0a:38:d9:5f:
08:05:9f:28:4f:24:06:0b:2f:ed:ec:02:11:f9:7a:9b:d6:6c:
a8:f0:6d:78:e9:a0:fc:7b:d2:96:2f:c8:dc:42:b8:97:30:bd:
d9:5f:21:04:27:cf:5a:5c:8b:c2:4a:b8:8e:ba:8d:8a:fe:6e:
e5:40:46:16:30:34:d2:c5:e0:b3:75:8b:5b:84:3d:d1:a5:ad:
d5:4f:76:04:61:7a:e0:20:59:17:8d:d2:62:d4:ef:65:d9:27:
b5:5a:b1:a4:d6:53:5a:63:4a:50:eb:21:bb:4c:52:f2:4b:e5:
04:ec:1f:32:98:4a:e7:e6:3d:ef:f6:ee:81:7f:9c:3f:b9:4e:
fc:d2:9d:04:3b:85:3b:c3:e8:51:4b:b7:ec:23:7b:9f:4c:25:
b0:12:e8:2c:5a:b2:e5:fa:06:6e:ca:31:90:82:31:e2:be:a6:
27:22:cb:66:e3:0a:8f:10:d6:4c:62:be:b5:35:e5:b8:47:a8:
f7:2f:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:55:21 2025 by rpki-client