Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: Y9nElzy9sNDUbuBJIu/7+T7T+zWx83I9G2rHlFZdLG4=
Subject key identifier: A0:F9:7F:06:B6:31:F3:18:2F:BE:2B:91:C4:EF:B4:9C:66:1F:00:55
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 0198D7061B76752541CF47B84BAED73C2A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0A2A
Signing time: Sat 23 Aug 2025 13:02:38 +0000
Manifest this update: Sat 23 Aug 2025 13:02:38 +0000
Manifest next update: Sun 24 Aug 2025 13:02:38 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: 34nkbZXgGC+R+UiKOqatE67jAgD7XuaBD5bgGvpAecE=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1b:76:75:25:41:cf:47:b8:4b:ae:d7:3c:2a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Aug 23 13:02:38 2025 GMT
Not After : Aug 24 13:02:38 2025 GMT
Subject: CN=a0f97f06b631f3182fbe2b91c4efb49c661f0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:e2:0c:4d:33:a3:02:ea:29:6d:b9:9d:0d:
7f:66:bd:bd:00:5a:8a:70:59:47:d6:b9:a7:9a:62:
4d:ae:ee:bb:e1:3d:4f:e2:21:79:dd:ab:21:db:42:
4f:62:5d:e6:e9:2f:f3:5d:fb:94:22:0a:f4:1c:4b:
f3:61:75:bf:88:bd:f7:18:a3:a8:62:87:c7:3a:bd:
be:1d:a9:6f:0f:6f:94:e6:96:3d:80:e6:d1:0c:79:
2c:83:30:83:d9:fe:49:dd:b2:a0:b8:db:7f:26:71:
c0:bc:b2:f1:fa:72:10:c3:b0:6e:79:a0:f8:e4:05:
3b:d0:df:9f:08:24:c0:85:ef:fa:6e:1e:87:ce:87:
27:bf:0f:52:c2:74:fd:5b:aa:9d:86:d4:61:ad:bc:
27:12:6d:b5:cc:e2:26:2e:a8:52:dc:75:2f:f5:22:
82:9d:42:c0:ba:9a:d6:55:d0:1e:9a:e9:28:16:ec:
ea:7f:79:54:24:bb:71:0e:53:ef:68:a3:c8:fa:f2:
f6:92:8e:43:8c:76:9e:99:41:93:f2:38:20:bc:ef:
1c:27:37:26:9d:00:a3:24:66:8b:30:b8:b1:09:8c:
06:06:aa:08:9c:43:c6:d5:a9:da:00:a2:2c:bf:01:
2c:34:0a:4c:fd:a8:b5:52:7f:78:04:34:95:80:fc:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:7F:06:B6:31:F3:18:2F:BE:2B:91:C4:EF:B4:9C:66:1F:00:55
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:a3:57:87:e7:27:53:99:3b:e9:2c:67:d8:c3:5f:d8:dc:
30:78:68:33:14:c7:de:35:c9:4b:15:57:c2:7c:ab:57:00:17:
44:ad:2e:c3:7b:77:41:1c:e2:f0:ef:8b:f7:59:f7:4b:aa:3b:
44:8a:9c:8c:26:b6:89:90:9a:d1:5c:12:f1:74:12:31:d4:2a:
ec:af:b7:8d:86:0f:b6:d8:06:f9:bd:6a:d1:b6:61:43:01:45:
d6:51:1a:4b:14:da:3b:86:64:11:76:25:db:8e:f9:87:42:1e:
01:91:96:7f:4e:07:1f:3b:35:89:18:20:02:f3:df:f8:d3:2d:
52:3f:bd:1a:e9:26:34:a7:31:ec:1d:9a:35:ac:6c:94:7f:88:
ea:7e:b7:eb:69:d8:f5:02:e4:f1:e4:ff:eb:e1:db:6d:ee:be:
f3:80:af:46:fc:8d:48:5e:2b:28:12:f8:42:db:1b:96:46:06:
14:d8:58:c8:e5:e5:16:24:06:86:12:f0:4b:91:0f:39:04:b5:
95:66:ef:cd:b4:26:3b:53:a5:9d:db:80:7b:8a:4d:fe:fa:f8:
df:3c:68:22:8a:40:97:9a:7a:09:d3:2d:4f:82:dc:d0:be:66:
37:99:e2:9b:f7:d6:e4:9c:71:c1:ef:e6:a1:73:ab:c8:55:8d:
ad:d2:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:58 2025 by rpki-client