Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: fZJIIZ6jk3JUr30xXtKO2BJONE9n9OUalHRVe5dIwR4=
Subject key identifier: 6E:BB:56:5B:10:70:C9:11:BB:18:B5:B2:F7:77:32:F2:08:38:93:C5
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019A4C97C15BA9F7351F6234824D776EB477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 02:00:05 +0000
Manifest this update: Tue 04 Nov 2025 02:00:05 +0000
Manifest next update: Wed 05 Nov 2025 02:00:05 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: Mgj+PT7oUWcqFTIuLzvTxeVQasH3ghB8zLi3R4p2b5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:c1:5b:a9:f7:35:1f:62:34:82:4d:77:6e:b4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Nov 4 02:00:05 2025 GMT
Not After : Nov 5 02:00:05 2025 GMT
Subject: CN=6ebb565b1070c911bb18b5b2f77732f2083893c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:ae:12:8c:19:56:ea:9f:99:05:c2:a0:48:
68:23:1f:b2:f1:be:32:d7:9a:b1:2b:a7:d0:00:1c:
44:c2:92:91:30:31:b6:53:7c:82:48:75:da:34:3a:
c1:e8:d1:54:b1:03:d0:55:f7:ce:02:6f:3d:f7:0b:
21:87:63:6b:ae:27:d5:03:44:0d:57:e4:85:c8:62:
bf:02:a0:c6:e2:14:10:e3:66:56:09:04:e9:85:5d:
b2:f9:3b:e1:b4:11:b9:5f:ec:3e:58:33:b0:b3:8b:
36:8e:44:10:fd:85:3c:01:f8:bc:58:25:ec:12:5e:
1c:b9:a0:41:21:7e:7b:ff:75:b7:72:61:50:76:ec:
43:88:db:73:55:cd:83:ba:47:b2:34:3d:17:34:57:
4f:59:77:6d:01:5c:43:0b:43:e0:df:b7:24:3f:15:
86:ae:fd:62:60:f7:b5:0d:c8:1d:93:4f:41:a7:f5:
ef:cd:0a:fa:8c:28:2f:cb:56:90:bd:f3:d5:d8:41:
a9:35:fa:9d:60:c3:4d:23:04:f3:0f:7e:52:2c:17:
4e:94:7e:d7:11:e1:db:74:b1:96:7c:5d:bc:75:8d:
ce:1e:f4:0a:a1:b1:76:69:81:fc:6b:14:4f:f8:11:
4a:30:2e:f4:c0:d8:e7:d9:4f:4c:d4:83:65:5f:b0:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:56:5B:10:70:C9:11:BB:18:B5:B2:F7:77:32:F2:08:38:93:C5
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:bc:28:51:c8:51:83:bf:c1:98:b6:5b:cb:57:45:73:4e:
3b:1f:c4:cc:48:7c:d9:7f:66:1f:63:8f:f5:e1:33:b7:1f:cb:
3a:24:62:a9:25:17:be:7d:00:f6:ad:a7:30:da:83:f1:dc:71:
d1:47:fe:18:1a:2b:f5:61:07:ee:e3:f9:78:22:6d:1e:e2:93:
12:42:01:94:06:a7:1a:f7:db:b4:ea:52:08:f0:e0:ed:be:c8:
a1:c6:e1:17:7f:25:87:21:08:1b:4b:3d:11:6f:2f:83:c1:d4:
36:05:eb:47:d5:ef:4a:27:88:7d:75:1b:5e:ce:15:18:b4:67:
3f:72:e9:a8:72:a2:11:91:0e:f6:27:a5:1c:8a:fd:4d:80:2c:
15:4f:f7:31:86:26:14:cf:33:59:5f:14:64:6a:5f:ef:13:ce:
70:b6:05:0f:d4:e7:3c:de:a0:cf:a7:6e:dc:1c:da:67:76:4e:
4d:11:63:2a:18:f2:c7:ae:e7:b0:2d:bd:c5:21:08:b8:2e:73:
ee:37:d5:76:87:5b:e6:c7:f2:6e:61:4b:e7:cb:fc:88:e6:14:
26:bb:f6:a9:cf:8a:6e:9f:33:8e:fb:0e:54:5f:52:07:6f:bc:
ed:42:0f:81:f4:d5:22:29:f0:7e:dc:53:26:20:e2:8a:3f:27:
18:d2:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:50 2025 by rpki-client