Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: 9BZf+VRJQuUm+mwynhuwYuS1stlZY0sTE1mVIG0DivE=
Subject key identifier: 4D:9E:D5:FC:AC:53:86:BD:01:12:5A:BE:71:D7:AC:81:B3:DE:78:63
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 019A4DE2128FB2EBDB13A45B2ABCA3E7FC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 06BD
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: DuVF0KsuavVVe/PgoIY3ZP5ZLNa+y9D957CLKwlXM28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:12:8f:b2:eb:db:13:a4:5b:2a:bc:a3:e7:fc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=4d9ed5fcac5386bd01125abe71d7ac81b3de7863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:91:c0:7d:8f:6e:a2:7f:35:81:0e:c7:fd:
cb:e0:6f:5d:95:be:11:a5:cd:4f:6b:fc:89:0f:b2:
43:13:81:30:16:cf:fd:eb:27:be:48:4c:75:84:31:
aa:51:7f:94:f3:50:95:8a:22:d8:2c:14:46:04:cb:
b0:df:1b:58:2a:27:8b:22:6d:ca:49:22:49:5b:85:
ee:23:08:48:76:fb:83:b4:ea:d8:22:53:09:07:a4:
09:d4:4a:af:8e:10:b2:3d:76:7c:d7:07:be:b2:38:
ce:a4:76:f5:76:10:6c:5e:fe:ea:17:31:f3:c4:d7:
c0:48:87:3b:ad:8d:d9:f7:d8:f7:5f:0c:84:8d:27:
1c:9c:f4:83:75:51:e5:8d:5c:99:fe:1a:d6:15:c3:
40:9b:dd:df:d5:04:5c:4e:d0:c2:02:91:52:55:04:
07:32:a8:b9:48:c4:98:d5:c2:59:3a:fd:99:54:3d:
85:cd:7e:f5:a0:83:ff:88:41:a3:5e:08:74:eb:d5:
15:b1:54:e8:5c:e7:99:ed:6e:e2:76:e4:ea:ab:33:
d3:69:e9:a6:34:16:b3:d9:81:94:5b:69:a1:7e:64:
d4:58:ad:64:ee:ed:6a:fd:2f:db:e9:10:fe:59:78:
4c:23:65:1a:ec:58:66:c4:39:97:a6:64:d5:49:b3:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:D5:FC:AC:53:86:BD:01:12:5A:BE:71:D7:AC:81:B3:DE:78:63
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f3:9e:f3:4c:5c:e0:4b:f9:ab:8e:88:89:de:11:a8:20:19:
1b:10:29:2a:b4:24:7f:a8:bf:4d:a9:6f:e2:0a:6b:d5:a1:de:
e8:42:12:1f:ac:a1:f6:d9:d5:93:1b:41:5b:b9:72:ea:1f:8e:
4f:3e:df:a3:80:8b:5e:60:0f:c0:70:7d:a4:63:31:b4:b6:49:
8e:05:71:0a:7b:2f:24:f0:19:4d:bb:9a:f4:a0:e3:74:de:3d:
84:39:77:97:38:38:72:98:8b:f9:43:63:a6:bd:cd:f0:b9:90:
db:ec:94:e7:e5:04:04:c2:5a:f7:ff:c5:c6:12:b3:b0:c5:63:
26:c5:32:0a:70:b1:85:cd:d0:04:cd:04:bb:0e:ab:c5:9d:e8:
82:17:08:94:33:09:c9:69:2c:8a:fe:e8:8e:9a:76:34:1c:bb:
6e:e7:30:db:2b:92:c4:d4:4d:3e:96:60:67:05:18:d0:43:c7:
43:9f:10:83:95:17:a1:dc:2b:03:c0:9f:4d:0a:84:d1:9e:8e:
f4:20:54:27:ee:b0:5b:1c:d1:b7:88:4a:9d:1c:1e:69:ae:57:
2a:23:5f:dd:39:c4:4c:1f:b4:bd:d4:54:ed:c9:24:95:bb:88:
8b:4f:b5:d5:5b:17:83:f5:ea:e8:59:64:9a:3c:75:6b:9f:2d:
6d:3e:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:28 2025 by rpki-client