Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier: bw2UcSOGt3Lv8h1wux+vHZvsvIZQFwYDCl75Lybes1g=
Subject key identifier: 4D:99:AC:DF:0D:EC:D0:83:F6:E1:2C:E2:B9:31:37:7D:80:00:9D:66
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 0199FE7DD3B449BD599026BD872E24DF8468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number: 0AC3
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: llUFcSoFEZ3/Ii/Qf3CfNDHJL5f0ErXqdGxkWr7L0gA=)
2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d3:b4:49:bd:59:90:26:bd:87:2e:24:df:84:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=4d99acdf0decd083f6e12ce2b931377d80009d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:db:f7:b4:01:f2:f7:18:39:b6:c0:55:4f:
59:ea:4f:3c:b3:81:9c:72:06:e6:b4:58:68:fd:1c:
0c:7c:7a:c4:00:2e:0c:9d:31:03:1b:cc:66:f7:05:
cd:b7:3d:a8:bf:d4:d5:0e:71:02:7c:71:26:9f:b9:
59:bc:7e:da:8f:42:9d:25:7e:99:44:4f:69:b5:d3:
fe:47:e2:39:30:ca:eb:78:28:7b:c3:65:4b:e8:5f:
47:2d:27:a8:fe:89:a1:90:2d:76:78:26:b5:ce:61:
de:41:5c:36:0d:f6:2b:58:8c:ec:08:d6:96:ba:f9:
79:b0:fc:eb:32:3b:b8:dd:5d:f7:c9:26:56:e6:2e:
ee:91:17:b8:7f:af:20:77:b2:19:9c:1e:41:e7:84:
9c:7b:be:87:02:a8:55:bb:42:b2:08:c2:bf:5a:99:
01:63:e7:49:99:62:52:bf:9d:95:ad:e3:56:53:d2:
a3:4b:2f:e5:fe:55:d6:0e:2c:f1:6f:ea:ff:54:67:
e1:14:7d:d8:ed:2a:1b:8e:67:fa:56:8a:64:60:e6:
85:4c:55:6f:5f:76:fa:f4:50:68:29:cc:a1:b5:eb:
f3:e0:0f:2e:3a:78:6b:75:e6:d9:fe:31:7b:06:98:
85:9e:cd:57:3e:1e:89:81:b2:f5:d0:4e:a4:5b:7e:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:AC:DF:0D:EC:D0:83:F6:E1:2C:E2:B9:31:37:7D:80:00:9D:66
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:fa:aa:04:df:6c:34:a2:6f:06:02:95:a4:9a:1c:b1:35:
20:ae:c6:16:30:a9:e7:a3:6a:40:1c:50:bb:f8:8e:d8:7a:16:
2d:34:bc:6b:b6:ce:57:28:07:d3:ff:b7:2f:aa:1e:11:61:a5:
6c:27:a9:da:0b:c5:93:26:88:5a:c7:56:32:60:39:da:58:30:
b8:a2:f4:f7:3b:9b:a8:9a:0d:ee:a0:02:ec:bb:b4:eb:83:d6:
4e:ba:bd:09:3b:5f:23:1c:ce:13:6a:23:52:ad:c3:4d:ef:f9:
45:73:f4:36:91:66:54:63:1f:71:15:ac:09:ea:23:62:cc:97:
2e:4d:ab:bc:a7:9d:2b:6a:91:29:86:61:8f:82:72:44:e0:37:
78:ef:cd:9e:90:6b:bf:c3:c0:c4:92:9b:98:2c:64:38:33:bc:
a5:cb:56:d6:ad:b3:c4:d1:9d:23:cc:6f:36:e4:ba:94:49:0b:
32:c9:f7:da:ad:bd:8f:d9:30:2a:97:1e:74:1b:1a:68:8d:9f:
80:58:8a:53:ab:c8:07:88:c1:69:2e:cf:cb:d4:4e:0e:31:f8:
3c:66:c1:51:60:a1:ea:f3:86:30:9e:dc:d2:54:38:f4:d0:9d:
ab:a6:44:6e:a1:f6:a0:3b:f4:df:cf:03:93:60:ce:9d:05:31:
2a:ad:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:19 2025 by rpki-client