Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File: _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier: X3fzLvu2Edu0gPXdUivzHmAdO7CMyGimpD4d1TXPdc8=
Subject key identifier: 20:E8:DC:6C:E4:29:D3:3E:D2:F8:0A:9D:FB:5C:D8:F6:C2:8D:B2:8A
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial: 0199FAD7EE9F4B3BBB0480E44542A7BE7DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:19 +0000
Manifest this update: Sun 19 Oct 2025 05:01:19 +0000
Manifest next update: Mon 20 Oct 2025 05:01:19 +0000
Files and hashes: 1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: KS6Y6AFeIZL1/AF3LZLIt2y1/u/3XnjOnLZf2MU4rUY=)
2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ee:9f:4b:3b:bb:04:80:e4:45:42:a7:be:7d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Validity
Not Before: Oct 19 05:01:19 2025 GMT
Not After : Oct 20 05:01:19 2025 GMT
Subject: CN=20e8dc6ce429d33ed2f80a9dfb5cd8f6c28db28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:87:b4:ce:0f:38:0d:fb:c1:8f:51:f0:61:
a1:66:71:f3:31:20:8b:f3:1d:7d:01:64:ef:cf:39:
1e:7a:cb:5a:f5:45:c3:27:a3:99:f7:6e:a9:92:c1:
63:5f:27:3f:ae:e1:47:c6:3d:ad:95:c2:8a:7a:47:
c0:dc:71:b2:cf:bd:4a:09:47:37:d8:96:8b:c1:fc:
86:28:75:ab:cd:1a:29:a4:4a:4f:a4:af:51:9c:ad:
c4:94:fd:fd:ab:42:f9:ad:85:11:c4:41:d4:d0:bf:
d8:fb:be:7f:84:fc:78:85:96:c7:5b:2f:e7:6b:44:
02:00:76:81:b7:e1:d3:ac:79:33:51:4f:6b:37:e1:
1a:09:67:d8:a2:b2:56:1f:fa:d3:25:2e:6e:7e:8d:
50:37:cd:97:14:6f:a5:1b:44:f0:1d:6c:2a:68:d8:
7a:6e:75:b5:69:07:a6:c9:97:ff:a7:5a:88:65:57:
2c:d9:e4:92:db:e3:cd:82:4e:78:80:82:bb:d7:25:
cd:3a:87:97:12:74:e4:74:6f:32:27:91:a1:41:03:
3b:72:cb:31:30:68:08:e6:d7:8a:9d:b8:e5:3c:2c:
ea:22:8c:42:01:b6:70:9c:54:20:2d:59:c6:1f:6e:
f9:1a:54:d4:7d:08:4c:2a:3b:a1:26:9f:89:6a:1d:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:DC:6C:E4:29:D3:3E:D2:F8:0A:9D:FB:5C:D8:F6:C2:8D:B2:8A
X509v3 Authority Key Identifier:
keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:6f:f9:6d:3e:53:ad:b9:51:d6:24:70:d3:96:6f:a0:70:
77:6e:ee:8d:a5:67:9a:18:34:ed:83:3b:a0:6f:ed:ec:c6:b4:
1c:ce:78:06:b7:88:52:f0:7d:27:3d:03:2d:67:85:3c:02:c4:
c3:66:3f:87:8d:5e:ac:b6:65:88:3b:97:f9:06:03:ef:82:b6:
cc:65:da:89:27:66:46:8d:46:80:ad:34:ba:24:ce:0a:4e:b2:
76:d9:37:1a:23:53:10:a0:9f:0c:48:e7:e1:30:c8:23:4e:84:
1a:d9:d4:d2:a8:1a:73:43:b4:93:74:5f:ae:35:ff:6f:11:a0:
f1:c6:4b:86:7e:e6:3a:7f:9c:d0:ee:9a:cf:f7:cd:dc:7c:0a:
3e:82:6f:36:f1:a8:4b:c5:96:38:11:4b:b9:67:2e:a0:00:0d:
30:f9:e9:a0:94:84:65:c8:6c:fd:23:1f:3e:4a:c9:8a:90:0b:
4c:23:8e:ff:7c:88:fc:57:e3:2a:78:83:49:80:e5:4e:72:73:
7b:22:1c:1c:ae:cd:df:f1:7f:c1:e1:cf:0e:3f:17:2d:4b:80:
ee:9a:e8:31:52:7c:34:fd:ca:02:33:97:ad:70:02:e6:37:d2:
cc:43:37:62:6d:d8:69:fb:53:ef:37:f2:dc:31:99:3f:21:b3:
99:6b:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:27 2025 by rpki-client