Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: 0N06A4P8+FmrwNKg5O7y41Msok8aOMncx2UKv/AuYXk=
Subject key identifier: 8A:B5:47:69:B8:A2:E8:BD:37:98:BF:BE:E5:17:26:DA:01:F9:23:11
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 0197B93431E56FA7D10546E3D75E4A41958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0996
Signing time: Sun 29 Jun 2025 01:01:34 +0000
Manifest this update: Sun 29 Jun 2025 01:01:34 +0000
Manifest next update: Mon 30 Jun 2025 01:01:34 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: lpeKMNXvMwThD+K97NBzmx10exK6FxJrh2HbOBlaG7Y=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:31:e5:6f:a7:d1:05:46:e3:d7:5e:4a:41:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jun 29 01:01:34 2025 GMT
Not After : Jun 30 01:01:34 2025 GMT
Subject: CN=8ab54769b8a2e8bd3798bfbee51726da01f92311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:a6:b7:51:99:b2:18:68:c8:57:4b:2b:d8:
0f:a4:09:5e:a6:7d:c2:c1:26:13:c2:9b:f8:1b:e0:
2b:22:2e:2e:f5:65:d7:ad:8d:83:e7:56:8b:d1:57:
24:cb:45:16:2b:f1:6f:80:f8:db:66:cc:3d:bb:e3:
4b:d0:bb:9e:a5:0e:6c:b8:ca:59:0d:a5:88:0d:02:
4d:df:bd:2e:7d:cc:cd:51:c6:d5:56:ba:e9:46:28:
c9:2a:cb:40:0a:33:0f:59:d6:86:bf:5f:d9:6d:03:
60:7f:7e:e0:3b:ca:5a:ff:24:88:d1:f0:2c:db:1b:
cd:e4:49:f7:3c:47:6b:e3:55:44:43:58:79:e5:3e:
bb:0e:13:27:dc:04:2b:20:d3:e0:e1:dc:dc:6d:fe:
82:26:eb:2c:09:fe:d8:d6:9c:65:45:f7:72:55:17:
52:72:89:ac:db:17:36:b5:bc:04:5b:b2:74:28:59:
fd:16:02:2c:59:08:d1:20:e6:ac:7a:b4:e5:14:97:
02:97:3c:6f:4c:de:c8:53:e6:cf:70:98:ef:38:f0:
ba:30:7b:f9:be:14:0c:ce:24:ed:06:28:c7:5f:9c:
05:e0:db:fa:8d:03:06:3a:dd:9e:8d:34:d9:6d:45:
8d:fe:6d:9c:91:ff:10:d4:ec:73:11:71:92:1f:dd:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:47:69:B8:A2:E8:BD:37:98:BF:BE:E5:17:26:DA:01:F9:23:11
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:c7:78:c2:21:71:b0:ac:e7:5c:33:63:83:21:a5:43:cb:
f0:d9:5d:5d:7f:f5:e6:26:56:d8:44:16:31:2f:ac:76:24:6d:
ab:e6:31:70:6a:65:b6:88:b9:ba:1a:d4:37:50:d4:93:1b:8b:
e7:08:e1:df:d7:ce:6b:60:8f:8a:20:73:3f:ea:36:d4:ec:fb:
2b:cc:26:9e:6c:3f:d2:40:2f:1e:5b:f4:a6:c0:60:f8:a5:e4:
43:0a:81:bf:77:be:b8:20:95:ee:88:b6:c9:93:87:b4:4f:d5:
91:54:74:6f:4d:7e:0a:5b:49:63:ee:b6:08:de:a8:86:d8:5f:
c9:1f:ab:74:4e:90:31:df:1e:bf:c0:ed:33:9d:c4:27:ff:bd:
c5:23:f1:9b:70:b7:b2:1f:5d:a4:83:03:45:89:f7:dd:e1:69:
b3:7e:8f:24:66:79:59:f2:2f:36:9b:2b:e6:35:f0:59:e4:ec:
4c:4c:6c:50:19:54:88:2a:fe:05:22:6b:f8:e6:86:24:9a:8d:
c6:a7:90:00:29:d9:ee:11:21:4b:b7:7c:33:cb:6d:2d:c7:ed:
e4:8f:c5:36:d7:49:26:12:33:5c:d6:00:59:cb:92:f5:dd:6d:
f7:e4:8e:12:dc:4e:01:09:d0:3c:ba:2b:2c:a9:33:ca:63:70:
46:4b:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:21 2025 by rpki-client