Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: g0C37uDExVVonile162oRtSpCRfkFBcN3YG11IpLfHg=
Subject key identifier: BD:84:18:40:4C:F5:78:DA:C1:AF:E9:6C:57:12:EC:66:AC:6F:43:5E
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 01987C0A1B1C868171AF99DB2E3EA88D1314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 02EC
Signing time: Tue 05 Aug 2025 21:01:33 +0000
Manifest this update: Tue 05 Aug 2025 21:01:33 +0000
Manifest next update: Wed 06 Aug 2025 21:01:33 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: t8O/jgFx2E//Xqod5NgLKkLXy+KNZOtNcZ4gnXwidn0=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:1b:1c:86:81:71:af:99:db:2e:3e:a8:8d:13:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Aug 5 21:01:33 2025 GMT
Not After : Aug 6 21:01:33 2025 GMT
Subject: CN=bd8418404cf578dac1afe96c5712ec66ac6f435e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:21:6f:c7:27:e9:41:31:7d:99:cd:52:c5:
4c:05:5c:41:75:be:cb:64:03:dd:cd:5e:2c:24:9a:
e9:30:d1:8e:13:9f:1f:2f:d3:83:03:e1:05:32:06:
72:97:94:cd:85:a2:34:7e:6c:2d:cc:d9:7b:46:65:
08:ea:8f:44:2c:22:58:d6:ae:79:69:eb:94:9a:5e:
f4:08:98:68:05:c0:80:ed:e5:8b:e9:f5:64:3d:ee:
b3:68:31:f7:60:33:31:61:19:40:ef:c0:bf:e4:90:
bf:c1:9e:9b:ce:0e:ba:06:0f:21:e8:e0:ce:31:21:
33:64:33:ff:83:40:3c:05:ea:d2:d0:96:14:22:f0:
d9:7d:85:b3:a8:3f:4c:31:dd:94:c6:5e:80:8b:ef:
0c:db:df:7c:28:8d:7b:9e:0f:b7:b2:29:ad:29:51:
7a:66:35:5c:da:e5:32:de:d2:6a:6c:e0:8c:a0:d3:
60:ac:66:e2:8b:f5:63:f8:9b:cf:ff:a6:f9:e4:94:
02:37:7c:fd:49:49:ab:ee:3b:04:66:f8:c2:97:e7:
ed:52:00:62:4a:bb:ca:3a:0e:0b:10:cc:63:9f:1b:
b4:55:2e:27:9e:ca:86:54:da:65:90:db:5c:b4:ce:
4b:10:a3:fc:2a:7f:51:49:e2:8d:63:9c:66:52:7e:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:18:40:4C:F5:78:DA:C1:AF:E9:6C:57:12:EC:66:AC:6F:43:5E
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:a2:34:fb:7e:74:dd:06:15:10:c7:70:3b:38:4d:77:a3:
87:7d:ed:a5:6a:9e:32:3d:8c:60:8a:02:a6:18:4b:31:58:6f:
b8:61:98:31:90:df:a7:b9:21:52:98:01:b4:2b:50:bf:b1:30:
11:6d:22:fc:cb:df:f5:a6:07:50:82:93:9e:f2:a8:cb:07:d8:
94:aa:db:0c:53:f3:da:67:d7:46:ac:e2:c0:66:b7:34:17:09:
1e:fd:7f:5b:b8:c4:a8:a6:2a:51:4a:6e:ea:14:c1:ee:e2:1d:
22:26:92:2b:12:9e:b1:96:38:5f:eb:a1:03:e3:e3:11:ec:49:
e8:b3:d7:38:06:ab:60:0b:5a:48:ca:9f:d8:c0:c2:7b:ec:46:
95:f3:99:f5:b1:eb:5a:6b:7e:a6:37:69:38:fe:44:aa:ae:d4:
8b:39:9b:cd:b7:20:27:ea:a0:bf:1c:8c:67:ac:85:8e:f5:8e:
57:e0:91:58:b0:af:7e:3a:40:87:a0:e3:5e:a0:f5:a4:f9:c1:
08:5b:ba:2e:c5:37:a5:42:f6:e4:16:f7:e9:49:37:0e:96:12:
9f:33:4f:eb:86:a4:9d:0c:a9:d5:58:61:b1:b1:24:fd:ff:b6:
3b:a4:a0:e6:ca:4e:e3:fc:68:4b:f6:cc:bb:49:ba:7d:8e:c6:
43:28:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:21 2025 by rpki-client