Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: XAt8B2hnARJSWAzJIhDFLdDveTWCF/fncVE584b0AEE=
Subject key identifier: 86:C8:B7:55:73:3C:91:5B:C9:CD:A3:41:8D:B6:8E:19:36:E4:F2:1D
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 019A4F61F73C85869FF2ACC3DF6C677CBA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1663
Signing time: Tue 04 Nov 2025 15:00:11 +0000
Manifest this update: Tue 04 Nov 2025 15:00:11 +0000
Manifest next update: Wed 05 Nov 2025 15:00:11 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: PweTBJecw+S2QPOEEtouu+k3Lj97Bct5xqTbYYnaTjk=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f7:3c:85:86:9f:f2:ac:c3:df:6c:67:7c:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Nov 4 15:00:11 2025 GMT
Not After : Nov 5 15:00:11 2025 GMT
Subject: CN=86c8b755733c915bc9cda3418db68e1936e4f21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:79:14:cc:21:e3:00:ac:57:ce:ea:56:b2:
26:2b:3f:78:af:d9:33:aa:1b:30:25:f3:a7:db:73:
4e:9a:b6:9f:81:1f:10:4d:eb:a1:25:1a:07:db:89:
f1:27:9f:87:ad:e8:10:54:29:38:a0:3e:6d:54:70:
93:63:47:66:c5:69:5d:59:39:f4:b8:30:06:38:cf:
d1:dc:63:dc:08:66:70:b7:e9:ca:2d:cf:03:f8:b5:
23:39:f9:e0:bc:fa:4b:2d:da:49:8d:dc:f1:df:63:
d6:48:ac:6b:d8:04:c7:aa:1c:7d:a5:da:bd:aa:76:
51:da:e2:c0:c2:3a:d6:b5:57:ca:c8:f6:b0:cb:82:
0d:c4:b7:8f:63:0f:8f:b6:55:e1:b0:f8:a7:54:99:
7c:61:94:d1:c3:0c:44:b0:1a:c3:33:80:03:d3:88:
d9:7a:ab:4f:6d:00:84:a5:20:d4:62:e4:46:1d:f5:
91:80:63:1e:d2:fe:5b:96:5a:60:a5:d5:72:cb:f6:
49:91:f7:5b:3e:d4:4b:2b:cd:93:ff:39:0b:69:49:
cd:44:fa:c6:2a:19:45:0d:ad:76:f8:6d:5d:90:63:
51:7a:fb:b5:7d:a0:7e:e5:61:62:54:5c:61:2c:5a:
47:55:96:e8:94:5a:c3:18:2c:e8:8e:26:4e:be:84:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:B7:55:73:3C:91:5B:C9:CD:A3:41:8D:B6:8E:19:36:E4:F2:1D
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:74:87:6c:06:26:da:1a:06:a9:8a:bb:85:3b:de:4c:d1:
32:b6:c7:f8:38:7f:98:46:58:e1:e9:32:01:b6:f5:8c:45:e2:
db:e1:39:0c:3f:7e:b4:7a:48:cd:91:7f:8b:12:cb:57:02:fa:
dc:c5:1f:08:ff:9e:b5:8c:b1:11:77:01:6e:65:c5:d5:9f:bd:
4f:df:ee:94:fc:2f:71:2f:f7:e8:c3:16:7d:83:60:ab:93:76:
ec:62:30:d5:6a:d8:13:7d:1f:18:aa:85:9c:c0:6c:6e:d0:71:
d7:98:99:a1:5d:45:65:69:57:9d:4f:d8:e6:12:4d:1e:a2:03:
51:b5:61:7e:af:2e:89:08:7c:a3:dd:c4:e5:fa:99:14:74:cc:
72:5c:ce:b8:8f:b7:fc:4b:35:56:3a:da:66:bd:58:8c:6a:e6:
f6:c5:e3:4f:d2:6f:3d:7d:1e:d7:14:8e:27:08:b4:5a:cf:04:
73:a0:b9:20:94:a8:5c:79:8b:5a:96:b1:d4:0b:6c:e1:13:25:
e9:b1:3a:9a:2a:69:46:6c:f0:1d:1f:11:16:bf:2f:48:ac:86:
f5:27:36:f8:22:0c:67:01:92:3a:38:f3:c5:1d:2a:69:55:0a:
4d:80:a8:ee:0c:3c:3c:6e:9e:ec:5c:62:be:cd:81:33:32:db:
e3:b2:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:16 2025 by rpki-client