Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier: q1LnvH+V0W5aT+zPPpHDK3pfLPRZYKj2Y6Li1dt/d7w=
Subject key identifier: BC:1D:37:34:CA:DB:3A:9C:DD:7C:A0:C9:E2:15:61:1A:3F:DA:EA:7B
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 01989712ACD662D4429555C577D23C16BE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:00:40 +0000
Manifest this update: Mon 11 Aug 2025 03:00:40 +0000
Manifest next update: Tue 12 Aug 2025 03:00:40 +0000
Files and hashes: 1: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: xmsc0J4COSzw1OE4nIBo+OLeMxjNmZpgClW9r6CnEBM=)
2: UkP4jKKKyGHBawn8RPGOoI0g86k.roa (hash: t1NCQU9kIDrxSOL+gI05c500j4/UZOaC1oFaRb7Gluw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:ac:d6:62:d4:42:95:55:c5:77:d2:3c:16:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Aug 11 03:00:40 2025 GMT
Not After : Aug 12 03:00:40 2025 GMT
Subject: CN=bc1d3734cadb3a9cdd7ca0c9e215611a3fdaea7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:38:49:23:d3:3e:47:5f:08:3e:62:8a:48:
5d:88:8e:62:5c:b5:ee:55:38:db:d6:30:32:64:e4:
00:5c:15:87:b1:f7:82:2d:ba:97:a6:24:8e:b0:01:
24:77:0d:a1:cf:78:d6:fb:39:f3:1e:d6:07:aa:de:
69:50:3a:7a:d8:04:37:21:ce:b7:57:58:3b:0a:4b:
66:c0:c9:f5:ed:f6:1a:35:3e:84:2e:24:55:ff:7a:
36:9c:78:cd:9a:a4:0d:1d:41:fa:72:2a:50:a4:6b:
7a:bd:39:5f:8b:ef:1f:64:d0:a8:c0:07:6b:fe:fa:
e2:f3:f6:ef:e2:6f:b9:77:68:7c:0f:c0:96:03:58:
0c:0d:ab:d7:17:e7:96:8f:e0:76:6a:31:00:39:e8:
97:45:34:44:cc:1d:a0:52:a3:9c:dc:82:81:b9:b5:
27:93:85:28:ac:6a:d3:bf:ae:c9:f9:e8:c0:26:23:
2d:56:2a:80:77:02:da:4a:8c:fb:d2:ea:ab:b7:8c:
01:59:33:91:12:c4:ec:ce:36:d3:34:e0:ff:ea:b4:
fc:5d:da:bd:21:ba:cc:ca:5a:d0:99:11:12:c9:7b:
b9:35:45:4c:cb:e2:e5:57:8e:e3:98:47:b7:5f:3e:
0b:7a:78:3f:1a:4b:95:b3:07:f9:de:fc:3e:e1:a3:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:37:34:CA:DB:3A:9C:DD:7C:A0:C9:E2:15:61:1A:3F:DA:EA:7B
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1d:f0:af:e6:e4:a1:bf:87:2f:a1:36:a2:05:62:0b:71:5a:
10:ff:78:98:86:63:fa:94:4a:47:ea:20:82:cb:a9:33:55:b1:
02:87:c9:9e:40:81:d9:fc:fd:02:db:e3:bf:19:73:1e:b8:69:
f1:0a:e5:a3:af:fb:55:99:1b:95:25:07:a7:a1:2c:f8:95:d0:
e5:11:ae:db:a6:cd:aa:c9:a7:98:89:73:43:69:a3:a4:4c:79:
01:59:a0:06:70:ef:14:1b:13:4d:d7:72:a2:a6:f3:5d:00:cf:
ba:59:3b:db:87:8b:4f:1e:39:fb:06:e0:f7:71:02:e3:29:9c:
57:20:83:55:9c:fc:fc:f5:08:15:0d:c4:2f:70:73:13:d3:e2:
87:25:68:c0:1c:c2:05:d4:54:af:b6:15:ef:c5:d2:49:78:f2:
da:4f:06:82:cc:d5:86:7b:41:29:4c:06:27:41:0c:4b:da:d1:
13:e3:5d:21:63:e0:50:4b:5a:4c:5e:81:0c:ad:b8:16:0f:c7:
23:4f:7a:09:33:ee:75:91:a2:2d:c3:a8:63:67:8b:34:df:5a:
13:b4:8e:22:1f:31:d1:73:3b:cc:0a:2e:85:87:a4:6c:db:5c:
d8:75:0c:b2:db:39:7f:a7:73:f1:a8:73:af:11:18:07:d1:a6:
d8:d5:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:45 2025 by rpki-client