Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: FqsgpR4E5KU8sw1DCuIwcY9frJF4WYjlnBjBi/Yg4HQ=
Subject key identifier: EB:2A:8D:4C:89:21:2A:84:2F:A1:A5:9F:F7:46:FF:94:91:FF:47:D6
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 0199FD6B52B337907B5947141CA73516F57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 02CA
Signing time: Sun 19 Oct 2025 17:01:33 +0000
Manifest this update: Sun 19 Oct 2025 17:01:33 +0000
Manifest next update: Mon 20 Oct 2025 17:01:33 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: eTgFwuDQfgKSSKy8CO6JudxcnAwC4OcSblZR/7dGf5Y=)
2: uRe0GGNfqE13BEvplg9miN3Ucjs.roa (hash: eB2VTOuH0V/wJjrj+Nidcf+IAzBxD+AoRJS1QznGVgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:52:b3:37:90:7b:59:47:14:1c:a7:35:16:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Oct 19 17:01:33 2025 GMT
Not After : Oct 20 17:01:33 2025 GMT
Subject: CN=eb2a8d4c89212a842fa1a59ff746ff9491ff47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:71:99:f2:9f:83:f6:25:d6:d5:93:76:2d:
36:c9:7a:5d:fe:74:25:c1:61:e5:9a:2d:e2:b1:e1:
b9:9e:eb:e6:12:8e:f6:db:fd:e0:bf:83:15:37:fb:
8d:a4:9d:e3:2f:1f:aa:02:87:8a:8d:2a:c0:b0:5b:
a3:1f:c5:fd:d7:f5:10:75:f8:77:61:54:9b:b9:d2:
c7:8f:2f:10:9c:3c:9e:35:c7:38:36:78:d1:fd:ba:
ca:ce:03:40:14:96:4d:9e:c4:56:cc:97:36:e8:ea:
ca:75:e2:80:e6:ac:9f:14:ea:22:a9:1a:d6:51:35:
89:a1:fc:64:54:97:36:82:12:b8:23:53:bb:ae:ba:
f4:9a:53:78:c9:86:fd:92:9c:a5:b6:64:46:a5:2c:
db:fd:63:70:85:7f:48:36:8f:43:84:28:c4:90:4f:
30:63:4e:02:f7:55:64:b8:09:7b:56:9e:64:a6:2a:
ed:da:6f:d7:63:33:3d:53:69:7e:4a:5a:e7:86:f2:
b1:b1:c4:77:c6:88:e1:43:12:24:80:ca:04:2d:e3:
b7:ac:3d:8f:a9:be:ee:7b:21:85:11:13:26:97:6a:
91:ee:f5:a3:d5:77:e2:1b:8c:ac:df:0d:aa:0e:78:
3c:ac:80:9a:d5:51:0e:84:bb:2e:54:db:47:27:7b:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:8D:4C:89:21:2A:84:2F:A1:A5:9F:F7:46:FF:94:91:FF:47:D6
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:84:27:ce:22:99:db:ee:fb:fe:7e:b1:d7:2e:46:e6:37:3f:
83:50:6c:62:1f:82:3b:91:b9:a3:ea:fd:66:ae:f5:6c:ca:ca:
65:ca:4f:53:d0:db:e5:8a:d6:28:65:51:4a:1c:41:fa:3a:6a:
9e:f5:2f:39:a7:a2:56:78:4e:da:88:6e:28:4d:1c:e7:36:35:
8a:0a:c9:16:55:a6:ad:19:0d:12:11:fa:ea:a9:24:e9:bc:d6:
a7:d5:37:f0:28:4a:b2:aa:8e:d7:12:15:52:c6:3a:75:03:9d:
0b:46:31:78:06:48:72:8d:7c:60:47:59:96:97:46:6b:3c:12:
19:f3:c2:b3:a0:84:22:1f:c6:5f:57:8f:e7:26:ee:39:44:df:
01:58:34:d4:96:62:59:41:e6:dc:93:47:e2:27:27:61:c5:da:
d4:43:79:a2:c0:b2:c7:c9:f7:91:34:0c:1f:58:f2:27:9a:4f:
31:3c:a9:d8:d7:4c:c4:b8:c1:1c:07:2c:65:14:38:d3:d0:45:
d3:05:3c:a4:e9:c0:56:4d:f6:1d:d4:57:1f:ea:bc:d6:bd:09:
af:e5:94:5b:4a:ae:44:e0:db:2f:89:95:2a:8f:46:a4:ee:3f:
fa:f8:7e:df:a2:4e:c2:be:14:22:6c:79:1a:f3:e9:cd:94:4f:
12:1c:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:24 2025 by rpki-client