Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: QcKc+QbJHYKMP39azAFo8bTX42YADdV2MpmhY3IuWno=
Subject key identifier: 2E:C7:34:4B:31:B2:78:5F:76:C7:DF:56:88:4E:14:DC:E6:FE:6B:C2
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0199FFC8CD3846EA724EC24D8E61D5CB639D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 050A
Signing time: Mon 20 Oct 2025 04:02:53 +0000
Manifest this update: Mon 20 Oct 2025 04:02:53 +0000
Manifest next update: Tue 21 Oct 2025 04:02:53 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: A9K/+u/rOAXH7kROD5TBlGStwfP3GQwbb6enEFBXTq4=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:cd:38:46:ea:72:4e:c2:4d:8e:61:d5:cb:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Oct 20 04:02:53 2025 GMT
Not After : Oct 21 04:02:53 2025 GMT
Subject: CN=2ec7344b31b2785f76c7df56884e14dce6fe6bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:8d:9e:08:f2:30:27:37:8e:03:27:c5:ae:
dc:36:6f:7a:e2:6b:b0:4a:53:f9:92:9c:a0:84:1f:
e2:80:1e:94:2e:5a:cc:96:b4:69:7d:56:9b:f3:f2:
7d:58:d7:87:e9:fe:a4:51:1f:a4:1a:53:a7:f7:03:
1f:22:7a:8f:90:77:ae:01:79:68:ec:93:b8:23:57:
7d:09:95:f0:34:82:3f:40:14:4c:b8:c1:82:41:3d:
e2:da:9e:67:e8:80:b4:f2:00:ad:33:3d:51:21:59:
1a:f6:5a:b5:5f:9e:1f:e6:e3:85:b9:bc:02:16:2a:
57:f2:00:2f:81:84:4e:6e:48:ff:d6:d0:57:5b:ba:
77:36:ab:ad:b9:6e:13:54:83:03:20:be:94:c6:36:
0e:e3:b8:9f:66:f4:59:da:12:90:41:88:c5:89:61:
c2:8f:ce:9b:9c:93:8c:47:9a:08:e7:80:c9:4e:98:
47:a8:e9:ac:d3:0e:bb:b1:dd:24:09:98:ef:64:c3:
89:3a:77:ee:13:a1:93:6d:98:a7:14:cb:fd:aa:2f:
3a:c2:b5:b4:2b:cc:34:62:a5:5a:af:3f:b4:cd:a2:
59:28:99:94:88:a8:2d:f4:8b:cc:8b:f8:13:fe:98:
02:b2:ad:bc:40:29:77:c7:13:27:d8:b6:02:ac:a8:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:34:4B:31:B2:78:5F:76:C7:DF:56:88:4E:14:DC:E6:FE:6B:C2
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:f0:24:0c:6d:5f:95:7f:e2:ec:b6:4f:7b:7e:fc:cb:e6:
51:5d:ea:6b:b1:ac:e9:7c:82:6c:f3:a9:d6:b9:b1:b3:ff:5a:
57:0c:a8:3f:f9:40:ff:95:2e:fd:bc:d5:03:04:24:94:e0:78:
d8:c9:08:44:be:97:81:83:7f:11:4c:7b:6d:b3:13:49:12:cd:
8e:cd:60:20:cd:ef:42:0a:38:2d:60:fd:6f:05:a7:5f:9c:11:
79:18:03:39:75:41:9c:94:ad:ce:29:f5:fe:05:21:12:63:be:
d9:43:83:88:8f:fa:65:58:ef:f3:72:55:06:25:ec:b0:09:57:
f0:06:4a:f3:ec:fd:79:06:d0:0b:1a:b5:1f:81:b2:ef:42:9d:
c3:2a:3d:a4:2d:8d:c3:d0:f7:0a:26:a3:75:35:ac:5f:c8:89:
56:e4:5d:db:c4:67:63:63:e9:06:88:ac:8e:38:9a:e3:e7:37:
f5:77:0f:6d:b1:76:0b:ba:a5:9a:d9:06:b7:ec:b0:c6:23:12:
f2:28:24:91:84:d8:b6:c9:b6:97:24:7a:0e:1c:31:6c:85:d6:
aa:27:77:09:d4:62:de:29:eb:15:72:ad:1c:b5:1c:ad:5f:4c:
3e:23:a4:8f:43:19:cd:6d:82:a4:82:43:fc:12:ed:49:ec:6b:
e3:b6:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:44 2025 by rpki-client