Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: 97a/5ZjI26MW6ZHyugwq7GPyR0PgvAhOOQpebDYqSXM=
Subject key identifier: E6:F3:2F:0F:71:1D:D8:88:14:02:A4:FA:89:46:DE:AA:09:B8:AE:31
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 0197B8212557B007BAE7BA3A0445248CD2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 019D
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: uVYLVVrdfgZxjrCRERWf+RBTUwYIyHxuN5ZdvhVgTSg=)
2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:25:57:b0:07:ba:e7:ba:3a:04:45:24:8c:d2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=e6f32f0f711dd8881402a4fa8946deaa09b8ae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:45:75:28:1b:c2:59:e0:3a:75:96:54:6f:
fa:bd:40:7f:9b:fb:d4:bc:b3:0e:49:18:c5:b0:1d:
ad:91:c9:56:7f:2f:a0:b5:54:ab:7a:da:ba:5c:89:
be:50:15:1c:ff:39:8e:33:23:37:98:e6:8f:cf:5a:
fc:05:40:18:31:b0:20:0e:a1:cb:73:cc:64:62:b8:
c2:36:ed:2b:cf:3b:07:c2:5c:f3:f9:dc:fe:c1:5a:
6b:fe:d1:c5:3f:7c:3d:19:11:ba:c6:1a:d3:52:cb:
83:d3:a8:bb:b3:5f:7a:9a:f2:de:17:3a:80:82:f5:
62:fc:66:78:c1:af:ae:77:23:1d:1e:b8:1c:be:e0:
5a:82:1a:68:79:e5:b2:2f:ba:e5:a1:e0:6d:50:61:
90:77:ab:cd:48:04:25:85:56:01:de:8b:b9:69:eb:
1a:30:b6:89:3e:33:d1:70:df:42:6f:6b:5d:f2:ce:
18:8e:21:a5:e8:29:06:e0:f5:c5:b4:03:db:55:ce:
46:0f:b4:84:db:80:3f:29:f4:ab:24:33:12:5f:18:
09:91:1e:28:87:d8:57:44:a0:d3:62:df:8a:48:b7:
9e:08:24:ab:e3:af:52:97:dc:24:ce:23:de:98:50:
e3:7b:59:ca:24:0e:d4:65:87:81:8d:8a:9c:81:8b:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F3:2F:0F:71:1D:D8:88:14:02:A4:FA:89:46:DE:AA:09:B8:AE:31
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cf:0d:b3:d9:a7:f3:0d:40:7e:a3:f7:d8:5e:c7:f3:a9:17:
bb:e8:ee:28:31:46:c4:f2:70:8a:b4:29:7c:3d:b9:2e:61:7d:
a4:ed:4c:02:00:11:04:55:4c:0e:40:56:84:9c:d2:10:bd:31:
d3:60:1b:06:5e:d8:f5:1e:76:3f:31:38:4d:49:75:c9:88:5a:
47:63:47:ce:48:2d:91:85:e4:64:cd:55:a5:32:39:7b:ad:26:
45:93:bb:75:4d:b9:3b:fc:1b:33:6e:b1:b4:1f:57:7c:17:77:
8d:74:ab:1f:f2:a3:fa:cf:55:a4:12:47:c3:94:83:fb:c9:3c:
32:db:eb:41:05:67:a5:c8:20:34:4b:96:2e:a3:0b:97:fb:fc:
2e:e3:eb:bd:e2:98:76:0b:1a:af:45:5e:7a:83:88:cf:27:9d:
79:75:5c:14:98:d9:00:00:05:fb:f2:fb:af:ca:c8:a2:30:9e:
7d:09:b6:ef:0a:a1:0e:8c:21:02:31:6c:b9:f1:86:47:fc:71:
27:47:f5:69:32:13:8a:11:10:13:97:d9:df:7d:e7:33:60:48:
8b:58:09:c7:53:a5:c0:87:d4:37:6a:cf:83:8e:e2:a7:78:40:
54:38:bd:a8:ca:3a:a5:16:31:b3:e0:a2:92:de:64:8f:01:30:
9c:93:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:27 2025 by rpki-client