Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: jKgLTGPyq54U0keclT5Fpvac2nq6v7+RkWFt6c0Y4As=
Subject key identifier: 1D:61:A3:10:E3:0E:4C:36:01:A6:AB:06:4E:4D:7F:91:C6:45:10:6A
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 01992DECB4747DF2C64B5FB9AF1488DDBAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0A57
Signing time: Tue 09 Sep 2025 10:01:51 +0000
Manifest this update: Tue 09 Sep 2025 10:01:51 +0000
Manifest next update: Wed 10 Sep 2025 10:01:51 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: ROMaoARX+6ZdwVIi0yDZ427I3q/JrDglB+l16DrAmmY=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:b4:74:7d:f2:c6:4b:5f:b9:af:14:88:dd:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Sep 9 10:01:51 2025 GMT
Not After : Sep 10 10:01:51 2025 GMT
Subject: CN=1d61a310e30e4c3601a6ab064e4d7f91c645106a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:67:44:eb:88:51:e1:72:f2:1a:ef:19:83:
19:06:f3:ae:56:46:eb:8f:2c:7b:59:45:6e:0b:30:
0f:64:3e:a9:a7:43:ba:92:33:7c:a4:99:47:12:8c:
89:1d:00:28:f0:87:f3:2f:b2:cc:bf:2b:dd:92:d7:
e9:5b:7e:86:ff:46:0b:ec:9c:a9:42:59:f6:d4:fc:
71:3d:ab:3c:0b:3a:a8:d3:fb:bb:3b:c6:b7:b0:2b:
f5:bc:cc:c7:1a:cb:3c:b8:6a:bc:4b:f0:8e:99:e7:
e7:bd:08:88:a2:de:6b:63:09:1d:a6:5a:e2:d3:90:
04:d9:87:1d:a6:5a:af:dd:fe:7d:20:a8:01:f9:c6:
cb:62:5c:81:a2:49:bf:8d:a8:df:19:39:37:e0:13:
82:4c:97:b5:20:e6:7a:57:c3:13:e1:78:33:af:fe:
16:ac:bb:c0:e9:2b:15:7e:a7:6a:71:ec:12:69:fa:
36:93:e5:4b:50:4c:8f:6c:fa:f9:e8:92:9f:df:41:
c1:26:4b:4e:26:1e:79:27:35:3e:35:40:11:6d:29:
61:4d:97:67:cb:d7:2f:83:58:a5:b3:70:67:f2:f1:
51:9a:82:65:87:35:ce:87:24:58:d1:e8:8f:c5:0f:
84:93:bd:c7:21:a6:ec:23:d4:d1:ef:18:13:34:8b:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:A3:10:E3:0E:4C:36:01:A6:AB:06:4E:4D:7F:91:C6:45:10:6A
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a8:3f:92:b9:a7:90:3a:87:b9:b7:c6:53:de:97:8b:85:3c:
68:ea:b8:ba:f2:b2:4d:e5:eb:82:33:25:39:c7:80:26:ef:23:
b9:55:fd:04:71:1b:56:2d:70:6b:cb:5f:c1:53:39:77:e1:c2:
0e:31:bd:0a:0d:af:13:56:93:57:58:6f:48:e6:28:5c:3f:2d:
52:5c:fd:aa:cd:f7:5c:59:2b:0f:18:24:d0:45:94:fe:57:a4:
5e:ab:e8:9e:7f:3b:38:e4:54:74:4e:64:b6:a0:0a:c7:fb:ba:
88:09:40:41:ca:f3:63:23:49:8d:26:93:aa:77:42:41:ee:ba:
04:91:2e:e1:77:af:93:aa:ef:93:19:a0:91:cd:24:a6:17:f2:
51:c5:cd:fc:b0:17:c3:35:49:a1:25:fb:0c:cb:73:6f:30:30:
23:8b:41:2e:fe:d2:da:af:bd:2a:67:18:5c:10:1f:ac:fd:64:
c8:8a:84:fa:56:b4:e4:ac:bc:f8:06:5f:da:8a:93:ba:e7:3a:
75:f8:1f:c7:36:8f:e9:73:14:19:e6:7c:82:b0:91:e3:7a:8d:
41:19:be:a0:3f:53:04:8e:84:29:f9:b4:ce:5d:88:6f:ed:2e:
b0:09:31:55:d8:0d:30:e4:ab:5f:7e:d7:7c:0c:8a:e7:5a:10:
b7:a3:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:41:20 2025 by rpki-client