Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: lz/2GqE+aY7TAE1HsNuqNfi7gqfq2hhUfBJu4CPwNL0=
Subject key identifier: DC:14:1B:6A:04:98:BF:84:B4:2E:AB:87:AE:43:66:5D:C0:88:D9:2A
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019A7301B272854FD8639A3658E4E45C71FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 088A
Signing time: Tue 11 Nov 2025 13:01:22 +0000
Manifest this update: Tue 11 Nov 2025 13:01:22 +0000
Manifest next update: Wed 12 Nov 2025 13:01:22 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: vx60e1mi9m2Yihk7HefRXmzpw9R+P/lpVEkA4Dz4iJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b2:72:85:4f:d8:63:9a:36:58:e4:e4:5c:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Nov 11 13:01:22 2025 GMT
Not After : Nov 12 13:01:22 2025 GMT
Subject: CN=dc141b6a0498bf84b42eab87ae43665dc088d92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:28:94:e7:f7:45:8a:a7:b0:34:13:60:85:
82:1d:d3:b3:35:76:46:ef:7c:6e:6c:9d:1b:aa:e3:
a1:8a:ee:59:66:a6:6a:52:9f:6f:81:2b:33:4e:d9:
da:65:60:ba:a4:8b:63:29:0e:3a:ec:b6:1a:49:56:
b0:9b:f8:00:8e:0f:12:4d:ad:de:fa:23:a7:2f:b8:
e3:d7:54:7d:01:f2:ec:0e:38:cd:f0:8e:70:a8:bc:
b4:a0:7f:ee:2b:6e:2c:59:b7:14:03:b3:9c:d7:dd:
25:9c:e3:97:14:ea:c8:38:64:6f:6e:a6:42:8a:45:
a6:a2:ff:3b:e6:3c:59:82:66:46:00:d5:f6:37:d1:
25:fc:a3:d0:23:34:78:0b:07:30:8a:93:be:39:e5:
25:ec:60:09:22:29:17:51:89:3c:b2:59:85:65:a5:
66:27:02:c0:05:e9:d6:e7:20:36:f8:8f:1c:37:b0:
6b:c8:39:8b:08:e2:2e:a0:7f:ae:77:2f:fe:a3:af:
da:82:c7:c7:aa:12:2c:5a:30:5e:b9:be:5f:61:be:
bb:61:e2:a8:c9:5e:db:13:00:83:82:c7:65:1a:40:
9e:42:ed:b4:9d:e7:27:5d:d6:86:23:db:5a:4a:9f:
a1:8f:2a:a7:9d:f0:df:2a:c2:65:e4:4c:58:f8:b1:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:1B:6A:04:98:BF:84:B4:2E:AB:87:AE:43:66:5D:C0:88:D9:2A
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4c:e3:07:ee:41:a8:96:72:e7:a2:ae:e2:75:56:f1:4d:b6:
83:78:48:95:19:7d:6e:e0:7e:71:7d:8f:1f:1d:5c:3e:5b:a0:
5c:7d:5f:cd:8a:34:e2:58:60:51:cf:18:c1:28:cb:ca:c6:7e:
66:18:0a:bc:6f:dc:d1:fc:77:c8:9e:c9:62:5b:a0:fb:fa:e8:
61:1f:35:34:f3:76:27:68:b5:29:2b:04:01:13:b5:e5:13:43:
50:b1:d8:e5:3b:90:0e:76:cd:95:d0:38:a9:d9:79:61:d1:33:
cb:1e:aa:2f:2e:ae:19:04:5c:40:14:45:bf:42:20:03:b4:ca:
18:da:f9:03:81:0c:f3:ac:9a:a6:84:74:f7:2c:32:e7:cb:8b:
fd:00:75:94:3e:98:95:28:92:5c:dc:a6:47:e2:ce:00:c0:42:
14:3c:44:19:d9:61:bd:f9:73:a4:15:77:6e:91:05:76:bf:52:
01:b7:68:0a:e6:75:06:e7:87:5b:d0:ed:97:09:db:e9:b1:6c:
66:77:37:0c:cd:c5:06:71:63:bb:78:04:ff:7d:77:cc:81:47:
56:57:33:bf:49:49:9a:c6:4d:7d:44:e9:77:be:85:38:a8:82:
c2:92:df:bf:45:3a:a0:99:62:f2:e5:20:d9:7b:90:09:be:42:
d1:21:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:50 2025 by rpki-client