Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: er4TSaaNvaT0+Wr4nJGF4VLE+Qo+boBTuyzAbCdaBSM=
Subject key identifier: 09:82:50:7B:9D:56:FD:99:12:2A:2E:13:8E:3C:1D:F3:8D:DE:AF:98
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 019A541A6F9AD4296B1C7BE6F2C1D161A4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0DE5
Signing time: Wed 05 Nov 2025 13:00:09 +0000
Manifest this update: Wed 05 Nov 2025 13:00:09 +0000
Manifest next update: Thu 06 Nov 2025 13:00:09 +0000
Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: 5UP16YYnfxCVrwTRxI3ihXOcVYR/UAdRuOBOQRXeTO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:6f:9a:d4:29:6b:1c:7b:e6:f2:c1:d1:61:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Nov 5 13:00:09 2025 GMT
Not After : Nov 6 13:00:09 2025 GMT
Subject: CN=0982507b9d56fd99122a2e138e3c1df38ddeaf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:bd:e0:5c:1d:7a:c8:9c:b8:cf:e8:5b:4c:
74:d0:b6:1b:41:91:e2:9c:aa:27:5c:5a:3c:0d:55:
a3:21:99:28:45:04:2b:b2:e4:70:b7:97:2e:be:1d:
d7:5f:c3:1e:27:97:7b:50:6f:0c:24:a6:63:c4:68:
12:e0:15:28:29:ae:4b:e2:43:db:30:be:f0:b9:4f:
7a:1c:4c:06:60:54:f6:cb:91:9c:d9:4a:41:24:0c:
ef:e7:19:41:dd:f9:13:b2:a7:01:ee:75:21:68:83:
bf:b3:5e:30:45:ee:54:f2:92:7d:55:9b:d6:0c:9c:
f7:b6:35:0f:35:bf:8f:42:53:31:7c:8d:01:60:85:
70:d8:49:2c:cb:5a:f6:ba:8a:a5:b4:65:54:cc:5f:
c6:7a:a6:b0:31:2e:26:90:21:77:3b:e6:48:65:55:
72:d5:fe:57:f1:ef:e5:de:8d:7a:d6:8a:53:a9:07:
84:ea:bf:3c:ba:2e:9a:96:1a:39:c8:00:33:bc:34:
ff:3c:74:54:73:0e:1f:50:bf:4c:2f:ab:47:72:11:
35:dc:d7:2b:c1:6a:c3:38:e0:e6:a3:f2:5b:4f:d7:
8a:bf:2a:54:0d:8e:ee:aa:88:50:48:de:c0:22:99:
9f:c0:c9:ad:5e:41:56:ad:e6:34:1e:4d:90:78:19:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:50:7B:9D:56:FD:99:12:2A:2E:13:8E:3C:1D:F3:8D:DE:AF:98
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:67:00:e3:f5:77:c6:a9:38:5b:48:bc:86:ce:27:2d:45:
1d:bf:5e:c3:c9:65:de:a5:ec:c3:69:dc:a3:46:f5:13:45:79:
f5:88:41:a4:8d:ee:31:55:a1:2b:f1:51:35:a4:23:77:72:83:
9a:4b:c3:31:2e:da:2e:7f:46:03:15:54:12:5b:d0:c6:e9:f4:
cb:bc:75:73:f7:03:44:22:e3:f1:b1:e1:69:d6:0b:dd:67:54:
3e:55:4d:47:e7:3c:08:c0:9a:fa:8a:2f:27:a8:ca:00:ba:32:
e0:02:e6:db:bb:78:ac:43:62:e9:be:ed:55:1a:b3:4f:bb:6c:
b3:be:3c:85:7f:a0:f2:cc:11:55:75:bd:16:b2:45:73:f4:ae:
c3:67:7e:aa:ee:80:7a:af:41:02:42:d5:93:95:d0:01:98:f9:
67:95:85:5f:32:4b:a5:9a:ff:88:ec:00:fa:6f:cb:40:7b:72:
0d:b0:0e:f6:63:98:50:ca:d4:83:da:6d:32:01:66:dd:28:70:
e1:0c:54:b8:4c:45:29:51:8a:10:c9:d8:a6:bc:a2:87:7a:42:
b9:25:09:95:8a:74:5a:07:26:8b:32:56:86:17:f0:88:a3:ff:
74:d3:7f:8a:27:56:f9:fc:a5:e6:82:93:a1:7a:0d:28:d8:c9:
b2:df:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:12:35 2025 by rpki-client