Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: TuqgYEHKl7unFTXaklR0c0VwspfDf6+4JmtYnJcJOsw=
Subject key identifier: 25:CF:19:40:B5:34:A4:B9:DC:EA:6F:6D:08:FD:91:E2:CE:28:8B:7B
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 019A5007695D408DBFE3B86F7898608443FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 07F1
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: yvMISLq6rr8ze8V7RpuItVym8TChlk8tBQHcWMiyLE0=)
2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:69:5d:40:8d:bf:e3:b8:6f:78:98:60:84:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=25cf1940b534a4b9dcea6f6d08fd91e2ce288b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:6d:24:16:41:f4:ff:d1:d5:f4:86:8c:f4:
9e:f4:97:17:0f:c8:a7:f5:e9:5a:3e:3d:3d:6b:b7:
f7:77:fd:79:d1:92:ef:a9:fb:69:02:34:a2:ca:d8:
e3:d1:68:5c:66:a4:dd:99:60:00:6b:6c:2d:83:61:
8d:2c:03:7e:6b:1a:3e:28:d4:96:a6:36:a2:67:8c:
d3:6f:d0:95:e8:bb:0d:56:48:9b:c6:a5:b8:a8:08:
61:f6:95:61:57:09:8f:76:46:bf:12:32:bb:00:e4:
99:1b:7b:da:bd:2e:83:4a:fa:c5:76:b1:6a:f3:b4:
8d:42:23:6d:13:d2:53:d5:98:93:bc:1a:db:d1:eb:
eb:38:9f:94:81:49:00:72:14:34:a8:67:95:f5:95:
b1:58:6d:24:c3:68:f3:c5:36:0b:6d:1a:46:4f:12:
74:17:83:bd:83:c5:df:90:6d:bf:fa:e8:81:ed:d4:
6f:7f:da:e8:ee:1f:df:01:33:17:fa:a4:25:19:3b:
ed:b4:17:c1:04:7a:a1:89:ec:1b:57:d1:15:af:ab:
e4:75:df:14:fa:8e:42:74:ab:4d:c1:7b:dc:39:b8:
02:30:49:cf:05:b1:bd:2d:dc:98:75:51:07:45:11:
16:3d:39:f6:95:92:1c:3c:09:22:b1:6f:99:f5:4b:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:19:40:B5:34:A4:B9:DC:EA:6F:6D:08:FD:91:E2:CE:28:8B:7B
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1c:e0:47:48:68:1a:cd:6d:df:a5:b4:2a:48:f1:df:17:f8:
4b:b6:2e:36:8b:06:44:f7:8b:db:40:73:a9:5b:96:4c:5c:96:
41:1d:5c:74:23:f4:fe:77:76:e9:37:27:6b:8f:c1:20:79:95:
da:3e:f8:f9:c7:4d:60:c4:09:88:e0:c4:51:02:15:28:52:bc:
6c:b6:2b:32:87:7d:e8:ab:77:96:bf:12:94:06:f9:6f:4c:48:
50:b0:8a:c9:87:b5:ba:bd:61:a1:78:52:60:c0:ae:1f:70:78:
8b:6d:e7:98:7a:e0:e1:24:4f:c4:6a:59:cf:56:05:1f:d6:8a:
cb:32:96:31:e4:90:75:f0:75:49:e4:aa:62:46:a2:4a:d1:22:
15:3a:0f:5f:fd:8a:a5:ce:16:32:41:b6:1a:06:be:2f:08:26:
be:fb:7e:e4:dd:33:96:20:da:e5:d2:eb:5b:13:0f:3d:e0:ac:
ce:68:a5:22:49:a9:d2:c5:85:55:d2:72:30:d3:a7:72:68:c4:
d6:5a:98:16:4a:7b:d2:56:78:07:1c:52:95:1b:e0:64:9f:d3:
b4:57:05:37:6c:7f:f0:99:2c:77:43:71:be:74:19:0c:89:4a:
54:88:4f:69:92:cd:0f:02:94:3f:38:ac:1d:5f:26:e2:92:e1:
71:7e:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:22 2025 by rpki-client