Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File: V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier: cZzWmis0f6jYOeiozPgiFMRlAKKbl4YIW6rrFCX9e6U=
Subject key identifier: 0C:FD:D7:48:0B:EC:6C:4C:4F:6D:01:6F:2C:C9:F2:8C:44:E2:C2:C4
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial: 0199FCC69561554B66DB61CA22754AB53E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number: 10D7
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: gztr7gMNGpmcFlRNEwe80IcPDhzHTX17rQdY0+z+GTI=)
2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:95:61:55:4b:66:db:61:ca:22:75:4a:b5:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=0cfdd7480bec6c4c4f6d016f2cc9f28c44e2c2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:fe:b2:ad:8d:8d:f5:aa:39:da:70:04:ff:
88:a4:3d:bf:27:dd:d5:d9:ba:78:3b:be:2e:0c:f2:
b7:22:63:27:7a:47:33:76:fe:f7:fd:f6:f0:1b:70:
fa:9a:b6:0c:13:f0:a1:02:eb:30:1c:e3:f9:d7:05:
76:71:d6:0c:4a:c3:76:d7:e8:73:c7:83:97:0c:d8:
49:47:b7:22:a5:b0:63:51:b0:fe:08:cc:98:0e:fe:
c7:db:35:a4:d0:61:d1:68:17:40:16:64:a0:3b:98:
ac:56:c3:18:a3:97:3b:fd:dd:d3:68:3f:42:8a:7f:
79:20:a2:05:17:0b:14:6a:c9:d9:6b:27:30:de:7e:
3b:92:2b:20:e0:62:5a:8a:39:93:c0:fd:f9:fa:f9:
ae:8a:4f:ff:da:46:5b:71:5f:6c:12:c0:29:34:f8:
d0:e2:26:0e:a4:7d:df:0a:a9:ca:0a:ee:14:a0:2d:
a7:cf:5f:cc:98:a9:33:26:c9:7a:48:91:0c:24:3c:
d6:1b:37:f3:c8:6f:ea:0c:5e:ea:c5:ed:f6:38:1c:
d2:d6:3e:1a:ae:6d:fe:6a:7d:81:35:2b:30:ec:c4:
f9:ea:5a:32:c6:be:f1:82:f6:d1:1c:d3:4f:2e:9b:
cc:fb:80:20:20:c0:87:59:c3:91:c4:79:e7:17:e3:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:D7:48:0B:EC:6C:4C:4F:6D:01:6F:2C:C9:F2:8C:44:E2:C2:C4
X509v3 Authority Key Identifier:
keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:43:e8:b5:2f:14:8d:02:f3:aa:cc:74:5e:a6:22:1b:a3:f7:
d1:99:e3:cc:c1:fc:bb:7a:fe:44:ae:fe:59:47:e0:8c:00:08:
bb:b9:3c:b1:6e:1c:2d:6b:f6:ec:66:97:fc:24:8e:74:95:1b:
3a:7c:12:34:90:39:36:eb:f1:aa:9f:fb:2f:d5:e4:eb:af:0e:
e1:e0:9f:62:10:af:b4:87:a8:c2:c5:00:1c:c3:b6:77:84:b4:
83:e0:a7:0d:79:31:1c:0f:61:d0:b9:d7:27:b2:33:84:61:73:
d9:6d:71:06:22:f3:f4:99:cc:3c:c4:00:4f:d1:ea:34:23:8b:
64:0e:8a:4b:4f:7d:a4:86:b4:34:5d:fb:b1:bd:19:84:29:80:
c7:f0:e8:2d:65:f0:58:06:bd:35:b8:44:9b:d4:73:92:d3:85:
c0:b7:07:a5:e2:6b:3c:a2:bb:56:35:6f:87:e3:fe:5a:2a:20:
79:4e:73:54:c8:d2:de:15:46:40:cf:e4:f7:20:ef:e0:6a:10:
44:e8:98:ac:c8:e3:a8:ee:86:36:d9:8f:98:19:af:3f:63:1c:
18:38:a6:ce:5d:5a:8e:9f:b2:c1:94:93:52:fa:ba:f4:3a:6b:
10:22:16:e6:c2:70:42:9b:52:45:c7:96:03:4c:b4:13:9f:ea:
c0:4c:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:54 2025 by rpki-client