Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: 5kuswpS+Ahzf1769hSqbNCk36SW8qraXzUK6ephaztQ=
Subject key identifier: C3:DF:90:D1:81:A1:9E:40:50:00:7C:73:0B:B1:E5:9F:52:6A:17:06
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0198D47392CDC921239A8C8FF6D1C4645B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 046F
Signing time: Sat 23 Aug 2025 01:03:20 +0000
Manifest this update: Sat 23 Aug 2025 01:03:20 +0000
Manifest next update: Sun 24 Aug 2025 01:03:20 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: OWKfpC3mxw38eF6CfwyR7/cP5xX7hXhTlccRE3wkgNE=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:92:cd:c9:21:23:9a:8c:8f:f6:d1:c4:64:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Aug 23 01:03:20 2025 GMT
Not After : Aug 24 01:03:20 2025 GMT
Subject: CN=c3df90d181a19e4050007c730bb1e59f526a1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:10:9c:34:07:d4:b4:9c:04:fa:a7:7e:11:
d4:42:1d:e3:1f:6b:c9:43:d2:dd:7f:07:05:3a:b8:
62:3f:74:2b:08:d3:8c:e6:a6:e8:73:f0:12:66:9a:
0e:12:49:3c:2c:82:70:73:f1:23:be:5f:f3:48:25:
e4:1f:5b:25:34:50:26:5b:e5:2c:21:9d:91:10:ee:
2f:d1:98:33:c6:f2:a9:cb:96:d6:96:c8:06:02:5e:
03:2f:ac:3a:5e:85:22:ce:26:a5:36:ea:39:1d:13:
39:bf:d5:0a:c3:bd:c2:bf:d5:f1:89:42:54:8a:af:
bb:01:08:f0:05:85:08:68:41:56:9c:35:c5:82:3f:
2f:04:8b:40:a5:37:3e:56:63:f4:86:e5:2f:29:48:
61:f5:7a:05:8d:e2:21:28:82:4b:b1:0b:88:aa:6e:
3f:e1:4e:ab:e4:b7:15:a2:dc:90:49:b1:20:cc:5a:
35:fc:48:c2:dc:bd:e0:d7:f8:aa:a6:8f:85:74:77:
db:1c:a0:f7:79:b8:d6:df:0f:25:00:3a:85:32:2f:
3f:3a:ff:75:33:c7:e6:96:f6:2d:7f:89:21:6c:bc:
f5:a6:ae:fe:d3:ef:fb:ad:a9:11:26:37:6a:91:19:
4a:89:31:6b:b4:9d:94:54:df:8a:8a:56:f6:90:13:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:90:D1:81:A1:9E:40:50:00:7C:73:0B:B1:E5:9F:52:6A:17:06
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:1d:b4:f2:c0:5c:ba:16:4c:ac:1b:b5:bf:87:92:4f:8c:
b6:eb:60:0a:a6:78:c1:88:37:49:0d:66:94:89:c0:2d:06:66:
8a:f4:fe:60:43:d5:c8:5b:44:9f:ae:bf:eb:17:02:6f:8c:52:
cb:b8:25:14:19:ee:91:8d:6c:45:11:7c:5d:d5:69:d8:83:8c:
6b:7d:fd:9d:a0:57:ae:79:85:ee:52:67:b4:9a:b5:60:18:22:
7f:89:b7:bd:06:93:76:f5:ad:9a:ce:cf:dc:fb:97:fc:65:1c:
ef:d8:86:a5:bf:27:df:a4:eb:c7:4a:05:c6:9e:35:bd:eb:0c:
f2:2b:0e:bd:56:d7:49:3f:51:8d:fd:e9:94:6f:fe:8c:3d:66:
02:fa:2d:46:6c:81:2f:f2:82:34:aa:c7:f2:cb:49:32:ea:35:
13:b8:b6:0d:1d:bf:e9:ea:07:c5:5b:20:7d:ad:98:80:92:20:
3c:a0:bb:0d:f8:68:84:5d:82:a3:2b:b5:c5:3a:8e:22:50:a9:
de:de:71:c9:d7:e5:b5:b7:5e:d6:6e:c1:7c:bd:f8:81:3c:f5:
2a:fb:d6:d4:8b:34:bd:2b:94:8c:1f:25:52:63:cf:ea:5a:aa:
10:5a:12:a9:b9:cb:af:68:de:2c:bf:34:b4:85:c0:09:4c:94:
10:bb:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:55 2025 by rpki-client