
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: Q9rZNoA7WzNEd7GZO8FXxOb+RR7EtO+4SyyAOeBOCGs=
Subject key identifier: 83:CF:08:DD:9C:72:64:E0:94:B2:5B:22:AC:43:36:99:10:D1:35:F1
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 019872CF5C4A682CB88B9D6A6317957E5D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0A4F
Signing time: Mon 04 Aug 2025 02:00:48 +0000
Manifest this update: Mon 04 Aug 2025 02:00:48 +0000
Manifest next update: Tue 05 Aug 2025 02:00:48 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: Jq/pvPScUqGzek2wX/f1z7thU0xECubMwlG7Z4jBhCA=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:5c:4a:68:2c:b8:8b:9d:6a:63:17:95:7e:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Aug 4 02:00:48 2025 GMT
Not After : Aug 5 02:00:48 2025 GMT
Subject: CN=83cf08dd9c7264e094b25b22ac43369910d135f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:67:1e:ad:6c:b0:94:e6:b7:12:06:81:da:
08:27:70:4d:c3:8b:83:21:00:e1:86:92:84:ad:4e:
11:59:a0:da:49:54:a5:ff:69:d1:48:74:da:8a:5c:
55:da:d4:fd:7b:45:c9:21:42:56:71:5f:8c:72:16:
89:7c:8b:d2:19:37:c2:84:6d:37:c2:4b:78:93:91:
c6:bc:24:ee:cb:69:39:8f:8c:18:28:84:fe:df:80:
d0:3a:46:e3:a0:6b:bc:a7:da:e0:06:ca:20:79:49:
0a:b0:27:84:2a:95:a9:71:54:4c:cb:dd:95:b1:21:
42:e1:b7:c9:f0:25:53:42:fe:a6:e3:76:e6:76:f6:
f9:2d:0c:d3:cf:9b:76:9b:57:68:ff:30:0c:20:5f:
d3:dd:1a:e9:5f:bd:2a:a1:ab:6a:f2:56:6a:e1:0f:
45:0b:14:8c:86:25:09:66:a8:6b:04:c4:ae:07:59:
be:81:c3:a6:df:85:48:44:9c:fb:f1:40:dc:c6:ad:
3c:f5:2f:69:6a:2b:cd:a4:5c:92:d8:78:cb:36:16:
42:b3:1d:06:2a:1b:e2:40:27:0a:4f:00:2b:a5:94:
80:02:f6:6e:30:6f:fb:56:5b:83:e6:19:cd:20:1b:
af:2f:4f:ed:5a:3e:2c:a7:67:d5:df:9c:32:31:ed:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:08:DD:9C:72:64:E0:94:B2:5B:22:AC:43:36:99:10:D1:35:F1
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:72:4d:cb:9d:a9:53:69:bc:27:00:fc:a9:13:50:e6:bb:
f0:5d:60:4a:27:6b:7a:a7:92:03:20:02:8c:5d:91:52:31:6b:
b7:07:ef:21:40:2d:18:57:7c:fd:b9:7f:bf:b1:a3:dd:b1:7d:
4d:5f:9f:2a:9c:67:f2:0d:3c:5d:8f:c3:ec:ea:3b:d4:31:f2:
51:0a:aa:7c:b2:36:f3:df:e4:ba:c3:cb:38:c3:a5:40:a4:6f:
a9:96:a4:8e:f8:b0:98:23:7d:07:7c:bd:a0:7b:5a:89:3d:9f:
0e:c8:89:fa:aa:62:22:f6:39:4e:38:2c:d8:3f:6a:a7:dd:aa:
ce:83:df:7b:6a:4a:58:b3:eb:5e:4b:ad:0b:8f:30:e0:28:5e:
c7:2d:1f:a5:59:c6:f7:f5:1a:93:8c:10:a2:04:93:af:11:7f:
b1:8b:7b:f0:7f:4a:f0:cd:dc:c2:49:d2:77:f6:9d:26:3b:a8:
79:cc:4a:a7:7b:16:6f:42:8e:75:76:5a:f1:0e:f9:b6:c1:c9:
f1:7d:3b:2f:64:ee:d7:57:96:2b:0c:17:78:96:93:7a:9b:d5:
2d:ab:ef:8f:b8:78:6b:12:f6:9e:f5:cc:a7:0c:a2:51:d9:d9:
f3:30:1c:09:b5:cb:14:b9:0c:bf:f1:fc:71:95:5e:4a:a8:c9:
65:ea:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:15 2025 by rpki-client