Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: dWcStEUytM3eSdYu0g/LelwVxGuXSxPEqDyWz2Zg9tY=
Subject key identifier: 49:58:6E:72:9C:68:63:74:31:9C:DC:D9:63:77:DA:69:45:B8:72:05
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 0199FD34037281DF1C924B28A7AA97A1705E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 084D
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: oGTzI4vxgYGiiVFttVYPGHl3zIOsZkE2a0bxMdj6G9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:03:72:81:df:1c:92:4b:28:a7:aa:97:a1:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=49586e729c686374319cdcd96377da6945b87205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:22:2e:2c:b9:84:63:37:83:09:68:38:9c:
a1:3b:20:fc:a1:f7:e5:21:39:72:4e:5d:44:5d:9c:
b7:2f:f8:12:f9:bb:5b:f6:c3:34:1a:d5:8a:5b:dd:
ee:8f:37:14:6d:54:59:c9:04:7c:2a:39:32:e7:32:
89:07:d5:7a:8a:3a:2e:77:27:09:46:53:c8:c2:be:
6a:ed:aa:a0:f1:e1:32:a4:d8:29:64:4a:f1:bd:a5:
01:08:59:e3:b8:c2:59:25:c1:e6:93:0d:90:48:38:
dc:0b:7e:0a:ce:1d:7b:d2:0d:3d:33:2f:55:6e:6b:
7d:13:3a:cf:1b:e5:ae:7a:70:38:1f:8e:bd:07:3e:
b8:f7:7a:16:98:36:e1:cb:db:27:c7:31:a1:76:09:
cb:74:5c:aa:4c:72:2c:50:0e:78:42:91:70:b0:ce:
f4:66:f0:19:9e:57:a2:d1:e5:53:b1:94:a5:ac:b9:
8c:0b:15:c6:66:c7:d5:f7:f6:f2:4e:a4:3e:6f:c8:
c4:90:16:75:d9:b5:02:89:2c:c3:80:cd:57:8d:06:
79:bf:a9:f7:82:d0:bc:02:bf:de:f8:48:67:3b:4e:
32:d8:70:21:6f:5a:32:a7:8c:c7:4b:4c:46:4a:ec:
0b:a8:0c:ad:e1:32:57:fc:45:74:40:e4:ad:6b:41:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:6E:72:9C:68:63:74:31:9C:DC:D9:63:77:DA:69:45:B8:72:05
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:34:88:f1:90:e5:dd:3a:a5:0a:ee:9f:b6:e8:a9:71:0e:05:
35:91:4f:20:c9:73:4b:0d:5f:88:1e:0f:95:58:2a:9b:57:1d:
d7:16:6d:85:b4:0c:4a:f4:74:d8:78:50:5d:4c:8e:ef:e6:5e:
dc:2d:90:1b:45:fb:49:cc:e1:62:ee:5d:ed:86:69:ee:01:7c:
c4:00:a5:42:96:ab:ef:7c:34:a0:c4:a4:38:51:d2:3f:fa:c7:
bc:3e:ce:45:67:16:e5:36:6c:8c:83:91:d5:21:ab:60:67:40:
5e:5e:69:56:ab:47:59:d5:29:78:67:67:35:df:31:0e:52:3b:
34:12:59:63:34:a1:ad:6f:f9:49:11:d7:f0:71:ca:b3:37:a5:
6e:80:07:c3:e1:6b:01:9e:f4:92:11:1f:67:9a:0b:e9:85:9e:
7a:30:ac:55:fc:df:2c:eb:5d:2c:61:cb:4a:84:61:4d:fa:65:
30:85:93:32:4e:2f:c1:de:79:fe:19:1b:95:3f:c7:f6:bf:7a:
5c:23:dd:a2:5a:30:84:80:52:ac:18:b0:d9:f8:a3:ef:21:11:
1f:ba:86:c5:53:f9:ee:23:25:df:82:00:99:41:86:a6:3a:c2:
b3:b5:24:1b:5f:18:8f:dc:e1:74:fc:8d:97:62:86:a7:e5:d2:
8a:d8:23:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NANygd8ckksop6qXoXBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1
NmZkYTYwHhcNMjUxMDE5MTYwMTA4WhcNMjUxMDIwMTYwMTA4WjAzMTEwLwYDVQQD
Eyg0OTU4NmU3MjljNjg2Mzc0MzE5Y2RjZDk2Mzc3ZGE2OTQ1Yjg3MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50iLiy5hGM3gwloOJyhOyD8offl
ITlyTl1EXZy3L/gS+btb9sM0GtWKW93ujzcUbVRZyQR8Kjky5zKJB9V6ijoudycJ
RlPIwr5q7aqg8eEypNgpZErxvaUBCFnjuMJZJcHmkw2QSDjcC34Kzh170g09My9V
bmt9EzrPG+WuenA4H469Bz6493oWmDbhy9snxzGhdgnLdFyqTHIsUA54QpFwsM70
ZvAZnlei0eVTsZSlrLmMCxXGZsfV9/byTqQ+b8jEkBZ12bUCiSzDgM1XjQZ5v6n3
gtC8Ar/e+EhnO04y2HAhb1oyp4zHS0xGSuwLqAyt4TJX/EV0QOSta0FROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElYbnKcaGN0MZzc2WN32mlFuHIFMB8GA1UdIwQY
MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt
ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh
LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDSI8ZDl
3TqlCu6ftuipcQ4FNZFPIMlzSw1fiB4PlVgqm1cd1xZthbQMSvR02HhQXUyO7+Ze
3C2QG0X7SczhYu5d7YZp7gF8xAClQpar73w0oMSkOFHSP/rHvD7ORWcW5TZsjIOR
1SGrYGdAXl5pVqtHWdUpeGdnNd8xDlI7NBJZYzShrW/5SRHX8HHKszelboAHw+Fr
AZ70khEfZ5oL6YWeejCsVfzfLOtdLGHLSoRhTfplMIWTMk4vwd55/hkblT/H9r96
XCPdolowhIBSrBiw2fij7yERH7qGxVP57iMl34IAmUGGpjrCs7UkG18Yj9zhdPyN
l2KGp+XSitgjug==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:20 2025 by rpki-client