Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File: Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier: KIlbONZjlaXNJVFZi6QPsVVBwmLBZ9w8gy0nfJfmsH0=
Subject key identifier: 67:34:14:E5:42:DA:F0:F4:0E:C2:F0:5B:BF:0C:0C:B1:26:36:21:4F
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer: /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial: 019A4EF5F4F5E75E3E4EAEE7F82EE0EC4F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:02:13 +0000
Manifest this update: Tue 04 Nov 2025 13:02:13 +0000
Manifest next update: Wed 05 Nov 2025 13:02:13 +0000
Files and hashes: 1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: VMBW5eGYoSAAXzxXoAdPMIUo8BOP9WOERTaPn9vxw+U=)
2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f4:f5:e7:5e:3e:4e:ae:e7:f8:2e:e0:ec:4f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Validity
Not Before: Nov 4 13:02:13 2025 GMT
Not After : Nov 5 13:02:13 2025 GMT
Subject: CN=673414e542daf0f40ec2f05bbf0c0cb12636214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:8f:98:37:ff:04:96:28:6e:91:56:7e:82:
8d:93:9f:64:83:a1:2d:52:e4:40:5c:03:fb:d6:12:
b1:24:d1:cf:74:7e:17:2d:e7:dd:6f:d2:1c:ce:0e:
72:e4:74:42:91:ba:54:01:87:ae:89:7c:d8:4f:be:
34:86:ad:ea:65:f6:59:45:04:d3:62:8f:50:5f:5a:
cc:00:fc:9d:62:e2:f3:c3:9b:11:dd:38:2a:83:0e:
d6:df:0e:ef:77:06:a9:cc:54:0c:de:b5:37:86:6e:
5f:19:17:4c:70:02:2b:1b:89:b9:06:10:34:68:5a:
a7:c8:83:e0:71:db:65:6d:e4:d3:36:96:e9:db:d4:
42:17:bd:f8:07:43:84:71:70:6c:77:b6:cc:9f:f8:
c9:76:0c:28:e8:fc:86:d3:96:88:a8:db:63:c5:f3:
d6:00:f5:cb:0a:e4:74:50:ea:67:2b:59:ca:32:e8:
dd:8f:c5:9a:e7:5e:6a:1c:98:6b:d6:5f:cf:1a:49:
0b:c8:35:b3:91:c1:e8:23:f4:4d:61:3f:a6:c5:59:
f9:06:e3:48:f6:4e:29:ca:c9:d8:be:f9:d9:1b:a7:
85:c2:e7:22:84:22:47:c9:fc:bc:a5:44:22:9c:18:
25:52:19:73:27:07:16:bb:27:3b:0c:b1:2b:b9:47:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:14:E5:42:DA:F0:F4:0E:C2:F0:5B:BF:0C:0C:B1:26:36:21:4F
X509v3 Authority Key Identifier:
keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b7:27:bb:90:74:09:90:2b:60:97:bf:21:57:61:65:22:d4:
9e:2f:84:63:fc:49:00:11:15:b1:39:d7:81:86:1d:50:64:72:
0e:5e:4b:9c:49:4e:71:af:3b:d7:f9:c4:b4:20:38:23:e5:21:
03:7c:9c:fa:6f:52:91:8c:44:aa:96:32:73:ce:79:86:af:5e:
39:11:fa:6c:52:a9:8b:a1:d6:0e:85:4d:70:3d:1f:e5:01:2d:
1b:32:fc:21:bf:27:d0:0c:a7:c2:7f:c2:ce:12:2f:ec:22:b9:
1c:9d:86:50:fc:69:6a:65:82:96:b1:45:34:de:1e:20:61:89:
b0:7b:97:61:bd:4c:b1:eb:15:b3:f2:f4:b8:96:ca:5c:d9:e5:
6e:a1:08:1e:6c:51:21:31:b9:45:01:77:9e:49:c9:87:b3:10:
33:be:90:5a:49:9a:49:9c:79:c2:62:bd:72:be:69:7e:13:3e:
71:8f:bd:80:c7:fa:2f:fe:1a:9c:ad:92:01:45:cb:f2:af:8d:
73:3d:39:d4:56:e7:3e:e8:72:0e:9d:91:11:d4:8d:a1:cf:cb:
9f:39:41:b6:13:de:c9:95:cd:f9:bf:a8:3c:b1:32:bf:c4:62:
29:29:b2:b0:47:bd:c4:02:a9:de:22:69:79:b2:c2:4c:41:52:
8c:30:14:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fT1514+Tq7n+C7g7E+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YmQzMGFjMzU2MWExZGY3ZmM2YjI5NmJmOWQyOWRkNTU4
MWYxZWUwHhcNMjUxMTA0MTMwMjEzWhcNMjUxMTA1MTMwMjEzWjAzMTEwLwYDVQQD
Eyg2NzM0MTRlNTQyZGFmMGY0MGVjMmYwNWJiZjBjMGNiMTI2MzYyMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj6PmDf/BJYobpFWfoKNk59kg6Et
UuRAXAP71hKxJNHPdH4XLefdb9Iczg5y5HRCkbpUAYeuiXzYT740hq3qZfZZRQTT
Yo9QX1rMAPydYuLzw5sR3Tgqgw7W3w7vdwapzFQM3rU3hm5fGRdMcAIrG4m5BhA0
aFqnyIPgcdtlbeTTNpbp29RCF734B0OEcXBsd7bMn/jJdgwo6PyG05aIqNtjxfPW
APXLCuR0UOpnK1nKMujdj8Wa515qHJhr1l/PGkkLyDWzkcHoI/RNYT+mxVn5BuNI
9k4pysnYvvnZG6eFwucihCJHyfy8pUQinBglUhlzJwcWuyc7DLEruUfr1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc0FOVC2vD0DsLwW78MDLEmNiFPMB8GA1UdIwQY
MBaAFAa9MKw1YaHff8aylr+dKd1VgfHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnIwd3JEVmhvZDlfeHJLV3Y1MHAzVldCOGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hMDFhYjUtODNjMC00ZTE5LTkwOTMt
NzkxNzViMTUxYTUyLzEvQnIwd3JEVmhvZDlfeHJLV3Y1MHAzVldCOGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hMDFhYjUtODNjMC00ZTE5LTkwOTMtNzkxNzViMTUxYTUy
LzEvQnIwd3JEVmhvZDlfeHJLV3Y1MHAzVldCOGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7cnu5B0
CZArYJe/IVdhZSLUni+EY/xJABEVsTnXgYYdUGRyDl5LnElOca871/nEtCA4I+Uh
A3yc+m9SkYxEqpYyc855hq9eORH6bFKpi6HWDoVNcD0f5QEtGzL8Ib8n0Aynwn/C
zhIv7CK5HJ2GUPxpamWClrFFNN4eIGGJsHuXYb1MsesVs/L0uJbKXNnlbqEIHmxR
ITG5RQF3nknJh7MQM76QWkmaSZx5wmK9cr5pfhM+cY+9gMf6L/4anK2SAUXL8q+N
cz051FbnPuhyDp2REdSNoc/LnzlBthPeyZXN+b+oPLEyv8RiKSmysEe9xAKp3iJp
ebLCTEFSjDAUDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:29 2025 by rpki-client