Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: Brf7rI9w+GJXcLCJ0E7jUetzKFyA80H4f1ry9dflEpc=
Subject key identifier: D2:C1:2F:06:B3:AF:BD:B4:32:1E:7D:B0:FF:C1:05:90:2C:1A:B9:DE
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 0198D65FFB5774CF5C24B06A73C660424482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: OLuLdIfJOw18KE3drak8gAiqk0IKhrDJv9Uv0WPY5VE=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fb:57:74:cf:5c:24:b0:6a:73:c6:60:42:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=d2c12f06b3afbdb4321e7db0ffc105902c1ab9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:3f:d5:c5:25:ff:27:5c:e2:4e:1e:8b:53:
2d:0f:5d:35:c9:98:3a:fc:1a:34:9c:d7:1e:28:91:
b2:09:94:4b:68:f2:37:a2:3e:75:9a:52:17:e6:ab:
74:9b:10:47:b0:ba:dd:d4:82:ab:09:98:ef:e6:2e:
eb:85:29:e0:b7:81:ea:48:af:52:b6:ab:81:a6:a0:
28:4f:6d:16:bd:d6:81:f0:75:c8:40:f4:e3:53:0a:
fc:ca:58:ff:6f:21:8e:e2:a2:6d:b8:14:4b:65:21:
6d:93:16:61:e1:f5:09:80:dd:74:ae:1e:03:ef:8c:
35:93:dc:dd:aa:9b:33:7f:fa:1f:65:77:dc:9a:97:
d2:bc:19:09:2d:49:ce:e9:a0:68:23:2b:7f:ca:3c:
60:ff:f6:47:5c:74:04:af:8e:41:31:aa:29:f7:19:
bf:1a:b6:d1:34:3c:31:40:25:d8:9c:3f:eb:5d:76:
35:82:2b:db:c6:a3:d2:e5:87:7f:d7:77:3f:89:36:
59:8e:19:e3:dd:d1:c6:f7:0c:43:57:11:db:76:4b:
e2:58:15:42:38:6c:3a:05:dc:67:9f:4e:bb:c5:2c:
ad:7d:98:86:ca:74:b0:c3:77:c5:49:45:01:54:5c:
bd:93:8a:a8:15:ea:4b:47:c9:72:23:77:cb:71:07:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:2F:06:B3:AF:BD:B4:32:1E:7D:B0:FF:C1:05:90:2C:1A:B9:DE
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7f:5a:f5:b3:1b:2f:b8:a9:d8:38:de:37:68:b1:8a:8d:46:
ac:4c:3a:0a:42:84:ee:f1:46:72:89:b5:74:8e:1f:52:fe:b0:
72:f2:6f:6b:20:2e:81:93:13:bd:cd:c2:56:8e:96:2a:92:f6:
8e:aa:a0:b9:c6:4e:21:27:63:96:25:9d:82:d2:57:f3:ad:a5:
ae:88:d3:66:7a:5a:2f:d3:1b:d2:86:de:22:2d:c1:3a:12:92:
c9:c2:53:c9:46:e2:8e:44:3d:1c:1b:7b:fb:3f:35:61:c9:1e:
6c:a8:38:b9:42:93:d8:22:c4:97:e8:ba:86:80:e3:92:05:c7:
13:72:65:e7:2f:40:0c:92:62:00:a4:3b:55:b8:d6:cc:b0:73:
9d:15:8e:c6:fb:7d:53:31:25:6a:67:eb:9a:3e:cc:cf:f8:29:
d0:e4:1f:a5:63:0d:c2:76:05:4f:77:23:db:2e:0e:19:ae:c6:
15:e2:3b:61:c8:98:45:7c:d8:3d:5c:a3:2d:ce:8b:44:31:a8:
22:a4:60:3a:54:2c:f5:cb:1c:0d:97:92:83:a9:cf:0f:11:0e:
15:c7:5f:e4:96:81:93:83:f4:b9:7d:13:45:31:52:f0:5e:f6:
96:b8:65:57:1f:51:30:56:9b:e3:c2:b9:4a:81:50:57:82:3b:
5f:51:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:16 2025 by rpki-client