Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: ZLhbc031OQfeVku83iadaTDFlaKnaGipQVjKVflbvh0=
Subject key identifier: 1E:4A:3C:C2:E6:FD:88:2D:15:B2:FF:4A:86:86:C1:23:9E:BE:EE:A3
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019A50748562CAB30C3296C13627DEB3F473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 20:00:04 +0000
Manifest this update: Tue 04 Nov 2025 20:00:04 +0000
Manifest next update: Wed 05 Nov 2025 20:00:04 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: KhSYjtG+BZ23nvHvlDRSq1hQIP/9eYF1Ko5Ztofx5FI=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:85:62:ca:b3:0c:32:96:c1:36:27:de:b3:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Nov 4 20:00:04 2025 GMT
Not After : Nov 5 20:00:04 2025 GMT
Subject: CN=1e4a3cc2e6fd882d15b2ff4a8686c1239ebeeea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:48:a7:23:aa:3e:ce:35:53:eb:c3:4c:eb:
ab:7e:8c:7b:6c:c1:98:89:4f:61:3a:16:97:f3:b3:
2f:8b:93:9c:3c:9c:2f:2d:c0:af:ba:20:f5:e9:53:
e9:20:45:d4:bb:0a:e4:15:95:79:cb:fe:52:d9:6e:
9e:e9:ea:04:1c:5d:b0:a7:0b:8b:87:08:bd:52:7b:
0e:ad:d7:56:8a:e0:3a:77:dc:05:33:aa:44:0a:30:
f0:ef:87:bf:16:25:cd:64:5b:3e:f5:47:d5:b0:c5:
7e:8d:b9:a7:0a:f7:ac:13:2b:db:05:77:e8:1c:2b:
0f:d5:40:1c:de:d5:92:52:b7:d4:39:85:e4:50:7e:
34:1b:88:db:50:af:48:8f:e1:fc:08:58:42:11:0e:
ce:a8:f6:1f:32:79:61:be:14:f2:da:aa:f1:86:0d:
1e:b7:73:ba:90:79:9c:04:cc:f1:75:34:a8:b0:38:
7c:e6:a0:d2:40:e9:6f:d5:26:b5:aa:0f:72:10:e8:
f5:52:c8:f7:08:f4:50:c9:57:6d:e4:77:37:28:9c:
89:0d:9b:34:cc:7b:dd:6d:5f:f8:b9:be:dd:39:8b:
b9:eb:71:d3:f5:a6:aa:ae:d5:cb:cc:32:99:ec:b2:
00:a8:63:4f:fd:97:db:13:64:e2:8e:79:4c:92:27:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:3C:C2:E6:FD:88:2D:15:B2:FF:4A:86:86:C1:23:9E:BE:EE:A3
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:15:13:36:cb:6f:2d:ff:fa:b4:32:f4:11:3e:bf:4b:a5:
5b:a8:02:ab:a8:be:70:ab:c7:5f:76:42:bd:d0:82:80:40:2e:
8e:09:20:f5:12:ae:53:7f:48:5f:01:25:4f:c3:f7:6c:bb:14:
1c:a0:ff:f9:58:c7:93:86:c9:02:5f:6f:32:be:3b:8e:a3:bd:
22:b9:4f:2d:36:c7:cd:cf:a2:7c:77:0c:15:62:90:fd:16:69:
03:17:a5:f8:dc:6e:2e:1c:20:fc:1b:6f:33:60:6f:1b:52:74:
3f:cf:a0:ea:1c:1c:8a:00:88:e5:9e:eb:ce:54:ad:eb:49:86:
92:1f:5b:ef:a6:45:2e:11:ea:37:7a:04:13:33:e9:6a:71:67:
65:df:2f:ed:3d:8a:e7:2c:b1:57:d0:4c:d4:12:16:a9:7a:ee:
ba:dc:11:21:f3:b8:85:04:e2:4f:03:05:e2:40:68:7d:cf:55:
1a:e6:9f:e2:14:c0:db:42:d8:80:c8:73:8d:a3:8e:ec:35:e2:
93:c1:69:9e:44:b8:13:1c:9e:ab:ca:d9:77:95:1b:88:17:ec:
d0:b4:a9:f1:fc:dc:ee:33:cd:52:36:59:5e:86:72:8b:82:92:
ba:f5:f8:f4:08:1a:ff:6b:ac:f2:6b:4d:94:78:f1:cc:df:95:
e3:0b:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:13 2025 by rpki-client