Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: YBh9o7dLk2UoNg0THz/r9bZF+Ao0E2B743XjKOlonQw=
Subject key identifier: 43:4D:F8:0F:7A:46:1A:DE:8A:5B:A9:FB:03:E6:3D:50:90:C3:50:57
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019A4D7441C7993870B103E04BDC6EC6FB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 03DD
Signing time: Tue 04 Nov 2025 06:00:55 +0000
Manifest this update: Tue 04 Nov 2025 06:00:55 +0000
Manifest next update: Wed 05 Nov 2025 06:00:55 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: Zz9qZXVYpZ4YJzfuIalkxc/j8Z9a7FL4fkBHYA8bQpA=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:41:c7:99:38:70:b1:03:e0:4b:dc:6e:c6:fb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Nov 4 06:00:55 2025 GMT
Not After : Nov 5 06:00:55 2025 GMT
Subject: CN=434df80f7a461ade8a5ba9fb03e63d5090c35057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:11:39:bf:1b:51:b7:d9:17:56:c2:b9:5b:
83:55:9f:fa:2b:cb:10:d2:f6:2c:58:d8:93:db:9f:
50:d0:8d:3f:3a:3d:84:81:b2:f6:fb:81:99:ff:8b:
d2:50:e0:6c:ec:a9:c3:a0:45:79:c9:78:5f:ff:f1:
c9:54:dc:96:ae:aa:ef:9b:9a:56:b7:d3:92:06:30:
b2:63:e3:50:9b:7b:17:af:78:30:2f:65:ac:7d:d2:
bc:b4:5d:55:a3:e2:a6:a3:95:a1:95:9a:e6:8e:a6:
3d:ac:f9:2b:3c:37:d2:18:3f:2d:a2:37:04:c2:1f:
42:4c:47:ed:ad:c5:ae:13:86:02:4d:1e:23:04:77:
ae:89:e6:28:3c:ce:85:5b:b4:f2:68:b6:81:78:81:
3c:ef:b4:3c:62:97:12:78:eb:f1:15:47:44:50:d1:
ed:46:eb:1a:5a:8d:ef:8f:52:65:a4:b7:47:14:d6:
25:2f:56:1e:27:40:88:e9:da:bf:20:07:2c:22:c2:
30:da:9f:a6:0e:8c:74:ba:4c:eb:73:4c:a0:96:9e:
d2:ca:85:55:c2:77:d0:ef:11:86:e9:ba:72:27:5c:
89:9f:12:75:e5:9a:a9:a0:86:bf:c5:f8:2c:40:5c:
23:28:6b:aa:e2:e8:cd:28:34:96:85:ca:ae:28:5f:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:F8:0F:7A:46:1A:DE:8A:5B:A9:FB:03:E6:3D:50:90:C3:50:57
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:c6:29:18:e0:5c:c0:ad:0b:e7:88:49:76:4b:e1:5f:1a:
55:c3:ba:f5:23:b4:99:13:9b:1a:8d:12:f7:13:c9:86:f4:83:
ad:f5:53:fb:e5:3d:8e:c4:77:ba:9f:83:c4:31:58:45:b4:8b:
4b:02:4b:c1:67:52:59:05:bd:62:12:0f:4d:a5:2c:39:56:27:
c5:cb:96:75:97:18:ce:0a:d4:8c:36:28:a9:aa:3e:e0:ab:c4:
59:04:96:c1:57:49:a2:65:7a:73:3b:e0:00:10:4f:85:5e:c9:
ab:88:66:c9:25:a5:89:68:4c:c2:c3:c9:6d:52:b4:13:37:f2:
bf:b9:59:a2:8f:35:98:19:4d:23:62:55:be:35:29:84:35:88:
91:5d:25:5c:a2:2c:bc:c4:29:6e:84:27:71:19:86:2a:2f:50:
5a:b1:e6:d4:c7:89:88:38:5f:ef:cd:f1:4c:d2:50:46:49:b6:
43:5c:5e:36:dd:2e:8d:4d:5b:07:7e:ea:92:d4:61:4b:8f:a0:
41:c4:99:4f:5e:42:a8:13:8c:96:96:1d:3e:29:5a:4c:ce:99:
1e:5d:90:79:81:aa:e0:3b:a1:54:d0:1f:ba:04:3a:8b:2a:a2:
10:b0:60:38:2d:c1:c1:1a:77:11:22:12:ed:dc:2f:e5:14:52:
80:ee:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:57 2025 by rpki-client