Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier: K8SgqKxo4UAUQm0rty/2vpu2KNR1alo1Mi6bCVUpAio=
Subject key identifier: EE:5A:D8:F2:3C:CB:98:83:37:AD:24:03:C2:FE:CE:B3:6D:7E:A8:79
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 019A4F628A1032C28F437A0E17A6BAA2630C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:48 +0000
Manifest this update: Tue 04 Nov 2025 15:00:48 +0000
Manifest next update: Wed 05 Nov 2025 15:00:48 +0000
Files and hashes: 1: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: sszqE32H2dfAy5F9+xLETzbzJHD0Kcnc5Rcis9/c0RU=)
2: UkP4jKKKyGHBawn8RPGOoI0g86k.roa (hash: t1NCQU9kIDrxSOL+gI05c500j4/UZOaC1oFaRb7Gluw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8a:10:32:c2:8f:43:7a:0e:17:a6:ba:a2:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Nov 4 15:00:48 2025 GMT
Not After : Nov 5 15:00:48 2025 GMT
Subject: CN=ee5ad8f23ccb988337ad2403c2feceb36d7ea879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:aa:7e:4a:dc:39:9f:1e:6d:54:90:c4:be:
9e:d7:1e:54:5d:eb:6b:35:a5:68:0f:e0:b6:57:2d:
ee:0b:81:4e:ff:f0:c2:b0:27:3f:47:e8:1c:99:87:
16:52:0d:6c:95:b3:25:ab:de:88:8a:fe:5c:45:c7:
1d:06:bc:ca:b4:6f:0c:ac:c5:8e:f0:78:c2:15:23:
20:cd:71:71:12:48:24:6b:d2:6c:05:55:ef:db:b5:
85:c0:68:06:0b:ef:b4:cf:cb:7e:26:f2:34:5f:4d:
dd:f8:0e:f3:55:2b:41:97:37:cc:ea:d5:d8:9f:22:
9c:58:d7:54:0c:87:02:6f:39:80:c5:69:ca:f8:50:
5e:8d:6a:c4:ca:97:d4:20:a4:d3:29:93:14:e9:bb:
ea:b6:6b:5e:c0:62:9e:83:57:64:32:00:b0:3e:cd:
89:b6:21:ad:23:a7:8f:a2:94:98:ed:32:84:f0:e1:
15:17:80:e5:e0:8d:e4:08:75:f6:21:92:8e:9a:4c:
47:22:40:9c:42:0d:f4:48:78:02:14:32:eb:34:a5:
10:5a:be:0e:38:55:78:e6:cd:b8:a3:49:aa:04:bd:
76:69:24:ec:f2:5e:53:1d:ba:c5:b1:6b:bf:69:02:
85:17:46:4d:50:1b:36:16:a5:5f:c8:24:ab:7d:aa:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:D8:F2:3C:CB:98:83:37:AD:24:03:C2:FE:CE:B3:6D:7E:A8:79
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f1:53:ca:02:80:9c:10:c8:f9:ce:ac:96:65:c6:4a:d7:de:
95:07:e6:af:0e:7c:64:42:2b:0d:42:4e:07:7f:3d:81:16:13:
12:b6:1c:4a:4c:59:60:b7:cf:b0:21:63:5c:27:08:11:11:2d:
91:4f:86:16:9e:9f:21:d4:b8:e7:13:c3:ba:15:66:a6:3a:65:
f0:87:bf:47:39:3e:74:ad:41:4a:73:e7:5b:14:45:1e:45:10:
59:bf:71:1d:61:9b:60:a4:97:5f:6f:3a:b5:b2:6b:34:b9:cf:
bc:0f:eb:62:7a:b0:08:64:c6:f0:7b:ed:18:f3:0c:e4:1d:ba:
1c:e1:42:ae:c3:74:d5:e4:23:8c:6e:e7:b6:02:ff:62:62:b5:
00:23:7c:3c:ad:8b:2f:f6:aa:8e:67:99:b3:d7:41:9b:31:79:
8d:8d:d7:24:79:29:84:23:cf:14:18:82:0c:53:69:b2:5f:51:
70:e8:fd:42:5e:f9:59:62:7f:27:bc:bd:08:c0:db:02:27:09:
f8:49:c5:dc:16:73:05:e8:e6:23:97:62:72:c6:4c:65:f9:2e:
11:f2:dc:1b:64:69:b5:1b:16:86:fa:03:b3:f9:bc:96:ea:26:
df:17:24:a8:4a:81:ce:90:ce:4c:1a:e1:01:6e:33:af:04:b1:
a9:31:6c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYooQMsKPQ3oOF6a6omMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1
OGQ1ZmUwHhcNMjUxMTA0MTUwMDQ4WhcNMjUxMTA1MTUwMDQ4WjAzMTEwLwYDVQQD
EyhlZTVhZDhmMjNjY2I5ODgzMzdhZDI0MDNjMmZlY2ViMzZkN2VhODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4+qfkrcOZ8ebVSQxL6e1x5UXetr
NaVoD+C2Vy3uC4FO//DCsCc/R+gcmYcWUg1slbMlq96Iiv5cRccdBrzKtG8MrMWO
8HjCFSMgzXFxEkgka9JsBVXv27WFwGgGC++0z8t+JvI0X03d+A7zVStBlzfM6tXY
nyKcWNdUDIcCbzmAxWnK+FBejWrEypfUIKTTKZMU6bvqtmtewGKeg1dkMgCwPs2J
tiGtI6ePopSY7TKE8OEVF4Dl4I3kCHX2IZKOmkxHIkCcQg30SHgCFDLrNKUQWr4O
OFV45s24o0mqBL12aSTs8l5THbrFsWu/aQKFF0ZNUBs2FqVfyCSrfapBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5a2PI8y5iDN60kA8L+zrNtfqh5MB8GA1UdIwQY
MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt
ODk1NTFlOGNjZTEyLzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy
LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvFTygKA
nBDI+c6slmXGStfelQfmrw58ZEIrDUJOB389gRYTErYcSkxZYLfPsCFjXCcIEREt
kU+GFp6fIdS45xPDuhVmpjpl8Ie/Rzk+dK1BSnPnWxRFHkUQWb9xHWGbYKSXX286
tbJrNLnPvA/rYnqwCGTG8HvtGPMM5B26HOFCrsN01eQjjG7ntgL/YmK1ACN8PK2L
L/aqjmeZs9dBmzF5jY3XJHkphCPPFBiCDFNpsl9RcOj9Ql75WWJ/J7y9CMDbAicJ
+EnF3BZzBejmI5dicsZMZfkuEfLcG2RptRsWhvoDs/m8luom3xckqEqBzpDOTBrh
AW4zrwSxqTFsWg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:22 2025 by rpki-client