Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: NIRd2A+XXiG5/UL3CFE3oVteTutRiObLBoIjPIUHvpg=
Subject key identifier: B8:F2:2E:75:99:8D:E7:70:35:62:30:A1:4A:E1:49:A3:63:54:85:60
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 0198D5BC11FCDC1DAB1B9A6FD53FFE762285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 07B4
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: jtavCuPqyhmUBSM5R/A3Od0gzcFLsS9BLQgbYXIf2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:11:fc:dc:1d:ab:1b:9a:6f:d5:3f:fe:76:22:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=b8f22e75998de770356230a14ae149a363548560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:6c:30:e8:30:83:87:86:d0:ca:25:9e:c8:
a9:d4:b0:6e:d8:0b:13:2f:e3:ba:da:e4:d9:34:e2:
2d:6c:66:5a:61:a0:81:fc:65:b7:1d:a6:17:1c:b9:
3c:c1:9d:dd:b3:b7:55:cc:60:9c:8b:a3:5d:fb:03:
0d:9a:06:8d:09:8a:a9:17:c5:4d:7b:31:87:29:94:
12:d3:8f:e1:89:84:4e:e4:d2:ac:05:62:40:7b:63:
40:db:0a:1c:00:72:64:f7:1f:25:d6:77:3f:8d:1d:
e2:ab:d5:12:43:9e:ac:33:75:0e:1d:f1:4f:10:cd:
76:4b:be:46:14:0e:57:bb:bf:61:50:cf:e5:86:ea:
c9:74:a3:3b:0e:c6:17:e4:45:d2:35:a5:51:7f:28:
47:1e:a0:80:1f:f8:5e:f0:3e:ad:18:54:93:85:ed:
da:40:6a:b4:9a:b1:bc:15:2f:bd:2c:ba:b9:95:33:
af:29:66:83:a9:af:03:f7:dc:61:0c:f5:37:48:20:
85:73:63:f9:41:30:24:b3:c9:f9:ed:c5:0d:ac:27:
f1:37:c6:5a:4c:f8:80:18:59:5c:ff:6b:db:eb:45:
90:0b:06:7f:a9:c4:a1:b8:1e:31:7a:cf:2f:d8:cc:
d8:23:49:b1:e3:82:30:72:fd:8b:73:4b:65:7e:bf:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:2E:75:99:8D:E7:70:35:62:30:A1:4A:E1:49:A3:63:54:85:60
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:de:4a:e2:d0:92:93:a0:05:39:62:08:36:87:88:de:87:
45:9a:f7:e0:72:ac:4e:83:27:5b:ec:1b:f4:4e:9c:56:7e:db:
2d:ef:d2:53:ec:45:37:60:d1:8a:6e:32:1d:96:f1:17:8c:e7:
d1:c3:10:3f:5e:b4:d4:e0:c0:ba:7e:76:bb:42:8b:d7:46:6c:
60:a1:7b:b8:1c:82:fc:3c:d9:e9:dd:95:e8:87:7c:00:3a:02:
90:85:08:1d:79:01:91:a8:7a:f1:63:5a:6f:c5:af:5a:61:48:
8b:b1:79:8a:f9:ad:f4:bd:8d:d9:2d:74:4e:5a:a6:96:1c:e9:
1e:ef:7b:f9:4e:a1:00:10:ab:1c:71:e9:3d:54:84:73:bc:72:
50:1b:73:3f:0a:85:96:38:44:2f:a0:68:6e:c5:35:35:4c:76:
fe:4b:77:26:86:6b:1a:56:c3:46:a6:77:57:7e:83:6b:ba:7f:
d4:b0:0d:97:07:69:85:f2:16:94:d1:bf:eb:db:ef:93:72:e4:
9e:62:c8:5b:79:c7:6f:44:43:9d:b9:0e:84:ea:96:0c:a2:46:
ae:4e:0e:70:b6:b8:71:c2:77:a7:f9:9f:7b:51:c3:e4:0e:7c:
63:7a:ef:a9:7b:fc:2e:8c:19:4d:0d:2a:94:97:12:f7:ae:80:
85:be:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:42 2025 by rpki-client