
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
File: brITtbhEV2qLSPxcLqrVqMzdHMA.mft (raw, json)
Hash identifier: Rj6xrkqvk/CYidG5eq41wWxZZKoAzS6JJbyc8dF1Iq0=
Subject key identifier: 2B:ED:B4:9B:D7:3C:DB:5F:47:29:81:4F:5D:41:2F:40:5F:85:9C:D8
Authority key identifier: 6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0
Certificate issuer: /CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0
Certificate serial: 0199FA69EDB56E4A81D7586BC41E9E8B81EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
Manifest number: 21
Signing time: Sun 19 Oct 2025 03:01:10 +0000
Manifest this update: Sun 19 Oct 2025 03:01:10 +0000
Manifest next update: Mon 20 Oct 2025 03:01:10 +0000
Files and hashes: 1: TtIN8gUqYh6ZpYQZIr7SZYwme3o.roa (hash: GvEVbOZ9uoZNCPu1mzgcIO+hcwTQFhCrycmOM34smYg=)
2: brITtbhEV2qLSPxcLqrVqMzdHMA.crl (hash: YT68wsFDivHX3TXTeXNAhaJvGGp+EAoDQC8AI+FtX1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:ed:b5:6e:4a:81:d7:58:6b:c4:1e:9e:8b:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0
Validity
Not Before: Oct 19 03:01:10 2025 GMT
Not After : Oct 20 03:01:10 2025 GMT
Subject: CN=2bedb49bd73cdb5f4729814f5d412f405f859cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:3d:61:17:3b:3c:87:38:fe:77:20:4b:d2:
4a:7a:52:38:82:74:10:d2:92:a5:88:62:78:91:94:
2d:15:39:07:88:af:9e:f4:8b:b8:29:46:c6:5a:9d:
9c:94:1a:5f:f7:86:92:31:e0:1b:34:c0:15:62:6d:
94:2f:e8:d7:77:a4:c9:ea:9b:3a:e0:a0:d6:bd:57:
44:07:60:61:36:e7:47:ed:85:ad:df:20:d3:32:b4:
f0:55:b0:ce:bc:46:6e:40:6d:8a:13:2b:8f:a2:48:
b9:16:ed:3b:51:28:52:8b:51:28:73:20:7f:8e:55:
56:c7:8d:be:c9:08:81:72:32:ae:42:53:99:fa:b4:
dc:47:5f:96:01:1b:e3:3e:22:0d:d0:46:a9:af:1d:
6b:d1:f7:4f:25:13:c4:be:a6:1d:75:eb:c2:e3:2d:
0d:74:f8:91:75:7d:68:a8:14:7e:c7:17:dd:2a:42:
0d:3c:ba:0e:1a:95:14:a3:f8:df:39:81:8b:08:a1:
66:d7:56:aa:cc:5c:05:98:03:38:33:85:36:82:ea:
1c:e3:0f:c1:0b:5c:d5:db:04:38:24:97:14:e7:7d:
b4:47:5c:76:eb:59:ea:19:9f:96:39:0e:b8:99:76:
d9:82:95:41:b8:7a:c7:d3:c7:03:3f:70:2e:dd:da:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:B4:9B:D7:3C:DB:5F:47:29:81:4F:5D:41:2F:40:5F:85:9C:D8
X509v3 Authority Key Identifier:
keyid:6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:84:b3:96:bf:50:c3:0c:8e:d0:de:4a:30:9e:d2:43:58:c3:
30:5c:2b:43:de:14:d6:6d:d6:1c:f0:65:e9:6c:65:b6:fa:a4:
e4:90:78:ff:94:39:50:84:27:33:b5:1a:fe:be:f9:81:4d:8a:
95:90:75:c9:05:3d:b6:08:92:8a:71:1a:45:8d:ae:03:2c:95:
67:23:7a:b0:48:88:9e:75:e3:6d:57:fc:a1:c3:30:e2:2d:51:
16:f7:15:80:94:4a:d2:0d:f5:8b:f6:a3:bb:6f:7d:9f:0a:8d:
d7:72:3c:ff:ed:70:00:0d:eb:0c:82:d1:58:5c:f7:5a:23:1d:
02:9e:d8:55:47:70:fc:25:6e:a1:ac:b9:a5:d9:7b:e3:68:b9:
ad:76:9f:b1:df:82:8d:0d:7f:3a:56:e7:6b:5e:fe:b7:9e:85:
0f:1c:c3:86:2c:03:ea:43:7d:55:77:e6:b8:4c:63:7e:a1:77:
b8:0f:59:0e:f6:48:b9:3c:47:5b:0f:53:4c:ef:f6:1c:97:0b:
6b:88:ad:df:68:8c:b6:b0:96:91:74:a3:92:8d:6e:25:8d:4c:
9c:6e:17:ee:ad:31:07:10:89:f9:0f:a9:f5:22:20:a0:52:56:
41:a2:c5:a7:2b:6c:69:8b:3d:38:b1:63:87:2f:ef:b4:a6:57:
1a:2b:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:37 2025 by rpki-client