Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: y5PdYi08rjAGq44e2iO9sWggJKa37ETQydiQ5c2J56w=
Subject key identifier: 71:30:A7:08:1C:CD:F6:3C:CB:AA:4D:E1:CA:97:34:8E:78:60:0A:A1
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019A4F2B7F464066E9CDD6B83D6B0B6920B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0CBE
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: kd8/5r3UYG6SSBL0xMCXXIfwsofqFLsJbaXFBeJG3RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7f:46:40:66:e9:cd:d6:b8:3d:6b:0b:69:20:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=7130a7081ccdf63ccbaa4de1ca97348e78600aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:cb:00:5f:85:1b:ec:8c:ea:1a:7e:48:c1:
f3:91:1e:8d:3d:93:35:a8:ca:7b:8b:5b:38:80:87:
43:8b:54:b3:53:5e:74:1e:9e:e3:fe:e7:3e:3e:78:
fd:5d:0e:a7:5c:00:5a:55:40:1f:59:76:fa:2d:34:
aa:1c:b3:37:31:11:c5:eb:39:14:70:4c:df:57:74:
d5:02:53:2f:de:ff:8f:42:24:c6:aa:27:5d:11:e1:
45:62:10:5d:dc:f6:08:ab:58:bf:14:ba:35:db:55:
73:43:cc:3b:79:37:b4:05:4e:d2:df:bd:8e:c8:57:
a6:ea:f6:87:72:8f:7b:14:4a:b5:89:c0:6f:5c:ab:
cc:5a:b8:f1:ba:04:0b:50:ee:04:20:1e:e6:2c:c0:
af:ec:b3:96:89:b3:49:e8:95:14:98:c7:31:57:ef:
46:24:d9:cc:79:a4:ba:fd:72:d6:7b:1f:c8:93:4f:
d0:d4:0b:3f:4c:94:e2:02:de:90:bd:02:4c:92:f1:
88:0c:48:8a:c0:e0:f7:ea:27:92:60:5a:1a:b9:9f:
ee:b6:30:0d:19:ce:5e:c1:4d:7f:8f:5c:f5:c5:85:
45:22:5e:ac:28:d1:4e:03:0e:6c:f5:20:f5:31:5d:
88:ad:70:7a:40:71:89:64:f3:b3:20:e6:8c:fd:2c:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:30:A7:08:1C:CD:F6:3C:CB:AA:4D:E1:CA:97:34:8E:78:60:0A:A1
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:1d:86:00:43:cd:ea:57:a3:fc:86:76:92:89:7c:4c:cf:
3a:e2:15:4b:59:a1:1e:e1:43:6d:b4:bb:a9:4c:40:fe:a1:c0:
45:01:04:27:54:73:56:e3:f2:63:00:e5:18:8d:37:45:27:7a:
60:a7:96:1e:6b:88:ef:52:0c:d2:13:48:c5:c6:9b:30:13:69:
b1:ed:20:c4:31:cf:9f:d7:3f:91:bf:c7:6f:77:36:53:cd:97:
dd:8e:f5:99:90:db:aa:6a:85:ad:9f:40:87:d8:3a:2a:51:c8:
6b:da:86:9e:d0:07:2a:12:9a:47:6e:8b:f6:74:4e:06:ae:9e:
c0:9c:03:a6:52:e0:31:58:5f:6a:25:25:dc:c8:40:ba:9e:66:
bf:53:cf:be:7d:76:e5:1f:f7:13:5e:63:e2:1b:46:ea:20:72:
7a:46:fe:45:c3:7c:3c:ea:50:59:9a:78:86:cb:9f:be:bb:a4:
83:77:70:09:8d:a1:72:f8:94:4f:ca:ab:53:32:88:86:e6:cc:
7d:14:b7:8e:73:91:dc:f6:d0:2b:51:85:70:09:d5:fc:a1:e1:
8b:aa:a6:e0:5f:07:47:f9:5f:c7:85:7d:ae:f2:59:fd:81:02:
34:18:cb:fc:6e:89:ca:d5:61:01:4b:6b:ff:96:e0:c3:ec:a1:
ba:9e:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:24:00 2025 by rpki-client