Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: kCfl/CZPe+9f3LWUTUqyAFevVbMhQ3Wx/qfv5t0wq1k=
Subject key identifier: A6:6C:6F:70:8A:22:4E:AC:F2:74:48:35:93:40:57:E0:A0:83:90:1B
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019A4EF42F9D559A44CE3987668016DE58EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 0533
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: MdFYXGvemgNF79KvOddxn8/IWdEB6XqRigkDYLkbD8A=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2f:9d:55:9a:44:ce:39:87:66:80:16:de:58:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=a66c6f708a224eacf2744835934057e0a083901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:be:2d:38:23:ec:df:e9:dc:a5:9a:b7:78:
13:3a:3f:30:0a:26:27:b4:df:ba:d4:d5:d7:2f:c0:
02:b7:a6:7f:05:c1:69:5f:16:56:22:4e:26:46:f1:
3b:34:3f:20:1a:1c:32:54:44:cd:d6:5b:46:bf:b5:
d3:95:2a:b5:14:7c:e8:d3:1a:8c:1e:cc:55:b2:79:
20:b0:a4:89:2c:a9:f4:8d:e2:d6:c6:87:6f:da:96:
b6:0b:46:c2:27:24:d1:f6:b9:5c:ea:74:2a:7b:d5:
56:6f:0d:fe:00:b7:fc:1c:14:f9:7b:92:18:11:e3:
7e:a5:54:2f:fa:21:9b:8f:7f:25:0c:20:5d:7e:74:
73:52:c0:5c:de:ba:6d:1d:f7:83:b1:89:7a:b0:67:
b6:07:38:49:23:00:f3:7e:14:03:ce:7b:4c:b8:ba:
c7:43:89:46:37:63:94:b8:b6:52:3c:4c:8b:18:d3:
a6:75:53:6b:66:52:c7:d0:bf:62:6b:60:77:32:d0:
a8:13:86:95:7e:a9:76:91:1e:75:59:b5:f0:f7:b2:
a1:8c:61:8f:46:db:29:64:f9:9d:3c:db:e5:5e:af:
d3:5f:ac:c0:75:b0:68:cc:c2:86:5b:65:bc:12:23:
b0:e0:51:4f:32:a7:08:68:9e:a2:fe:81:91:ac:02:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:6F:70:8A:22:4E:AC:F2:74:48:35:93:40:57:E0:A0:83:90:1B
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c4:20:6d:e0:91:ef:c0:ef:7c:e7:51:32:c0:5b:6b:06:82:
29:b4:87:c8:6e:3b:4d:39:0e:94:74:c4:8a:94:99:a6:eb:75:
1e:6b:15:17:b6:65:10:b0:94:25:80:39:e2:6d:ca:e9:10:f6:
2c:2d:06:5d:dd:85:ab:47:6d:5f:3d:c9:9f:b0:de:d0:e7:03:
71:5b:a4:7b:d3:31:21:1b:48:03:c2:16:bd:df:a2:6d:09:ed:
8a:db:af:e2:00:e5:3a:b4:3c:d0:7d:d4:2d:46:3f:4a:f2:13:
6f:0a:3f:73:1c:6c:61:93:e6:51:04:92:ff:e6:61:ad:92:84:
59:4c:b3:1e:4b:90:97:0a:7a:34:f2:46:d3:e4:f1:b6:d7:26:
b8:56:85:a0:79:49:32:2d:03:5a:1a:b4:e8:ff:9e:58:cf:3a:
88:b9:cf:df:f2:fd:89:2e:18:4b:85:7b:da:af:33:50:2b:d0:
56:cf:8f:75:0f:71:9e:74:30:e6:a4:af:d8:2f:c8:ed:14:7c:
e3:df:13:47:91:b9:fe:69:51:4f:64:d0:19:bb:56:4e:b7:b4:
96:5a:68:8e:a2:11:c7:3d:6c:de:49:d0:09:66:db:ed:3c:6a:
35:d8:60:2c:d0:47:12:94:f7:f3:bb:fd:c3:d9:da:56:f5:df:
44:06:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:29 2025 by rpki-client