Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: sUwd/DuWhnfU5I3F5/mCUT2selvqxqU1SQkQ7Vpql2c=
Subject key identifier: FC:28:12:A7:C8:2F:3F:B6:DC:61:75:1E:BE:09:29:67:F6:5A:26:DC
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019A1D631476B0DAF1EB622A511CBCC19AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0AD3
Signing time: Sat 25 Oct 2025 22:00:23 +0000
Manifest this update: Sat 25 Oct 2025 22:00:23 +0000
Manifest next update: Sun 26 Oct 2025 22:00:23 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: GcTO1XDz7QGQLuz87t1ZQj4jYwCbA+Zv5PsxdCe97Ss=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:14:76:b0:da:f1:eb:62:2a:51:1c:bc:c1:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Oct 25 22:00:23 2025 GMT
Not After : Oct 26 22:00:23 2025 GMT
Subject: CN=fc2812a7c82f3fb6dc61751ebe092967f65a26dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:16:d8:5b:7b:4b:36:1b:00:4f:ed:77:6e:
37:8c:c1:dc:9e:cf:7c:5f:06:21:0e:d6:1a:13:a9:
b0:b9:c6:e9:d4:1d:ff:57:54:cb:1e:86:57:82:d0:
29:4c:9c:0e:a0:45:08:80:de:13:e4:6a:e9:17:38:
d6:f1:8f:a5:0a:4b:6e:d1:d8:1e:86:48:3f:d1:36:
1d:ac:86:0e:87:c2:b6:c1:d7:33:da:e9:9e:f3:d2:
81:b3:ec:66:da:d1:e0:8c:d6:f6:1c:53:dc:8e:86:
79:60:4c:c5:21:88:39:b0:06:c3:d3:86:f1:6e:16:
4e:61:15:ab:8b:25:18:6a:33:89:43:41:fc:19:99:
11:61:25:02:2a:03:6d:05:ca:e1:7a:ae:0a:40:88:
74:0a:60:86:99:ef:e8:9c:e9:76:54:31:f7:4a:fd:
f2:f4:26:19:d7:91:12:a8:84:32:c5:c6:10:8a:ba:
82:ce:23:58:f6:9c:60:ca:0e:38:a7:09:3b:2f:52:
7c:7a:d5:49:87:30:fc:d7:47:b5:31:85:2c:e9:5a:
cb:e5:76:41:67:d9:a8:cb:59:25:c1:d5:20:81:de:
40:3c:19:a7:ff:e7:31:d1:87:bb:3e:ff:df:3b:a2:
91:64:1e:99:a8:14:6c:96:2c:7e:eb:90:7b:f7:e2:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:12:A7:C8:2F:3F:B6:DC:61:75:1E:BE:09:29:67:F6:5A:26:DC
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:c4:70:d3:de:9f:f8:7c:f8:a7:77:ec:f8:ad:89:68:e6:
bb:d8:72:a9:f3:82:1f:cc:4b:04:ec:cb:7a:38:97:09:b1:db:
f5:eb:6b:ea:a1:87:e5:06:04:2e:c5:e5:12:bb:d4:6f:72:93:
81:b3:66:b6:2b:48:c8:48:7c:6f:f3:3b:d3:06:4a:f2:4a:5b:
46:ef:d5:4d:cc:97:d9:65:03:43:3e:57:a8:b4:c7:b4:38:28:
1e:4d:ac:a5:5e:54:a4:e6:89:0b:24:c3:e3:cd:86:72:e2:d3:
76:ad:74:61:7b:b9:6c:96:9b:7c:17:1a:1a:ef:75:d7:a7:cf:
2f:81:5a:f5:67:1e:a2:65:46:7a:73:ed:5c:a8:07:da:3b:a1:
10:10:93:a2:de:7d:ab:36:18:ea:46:2b:02:bf:51:9d:2c:db:
3f:2b:06:b5:d5:fd:51:ac:22:f7:0c:d2:d6:37:ef:e8:70:64:
69:c6:df:15:71:c8:c6:91:a8:ca:8f:cf:fd:79:89:58:a9:ed:
3f:a5:4e:36:1a:6c:d2:bc:57:b1:5b:54:f3:11:59:a9:c7:36:
48:af:e6:6c:ad:2c:22:b4:00:4d:eb:59:1c:c1:49:e6:7e:99:
80:99:b5:96:5d:51:19:2c:9d:a5:e9:39:37:fc:41:a0:00:87:
44:08:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:11:43 2025 by rpki-client