Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: JYBw1w7aEygV4FmM4PPnPW1dTmIp/MLD3LfA4X4u110=
Subject key identifier: 64:7B:F9:4B:D1:DE:A2:03:FD:CF:64:2D:CD:CA:81:D2:D6:0C:86:A8
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 0199FC585B1B3F65D2D535B6841253AA8242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 03B3
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: /qlcHzCvnJKOfwbHSFa9l1Qbyr4TEDbkUDiVNferviY=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5b:1b:3f:65:d2:d5:35:b6:84:12:53:aa:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=647bf94bd1dea203fdcf642dcdca81d2d60c86a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:7c:56:56:da:71:96:56:d0:19:63:e5:22:
35:cf:06:c2:e3:93:60:18:41:8b:06:a1:c9:ee:8f:
bd:45:3d:b2:ca:7e:25:b6:fb:0c:a4:70:dc:3c:84:
35:bc:db:89:7c:4d:59:1c:1d:67:9d:96:5b:c1:a6:
99:3a:f6:6d:fa:57:87:02:d3:55:65:49:ad:15:63:
fb:86:8f:0b:33:4a:29:b0:9e:12:a8:ce:ca:79:08:
fd:9d:cb:ff:78:17:02:0e:af:10:9d:77:63:12:de:
d5:66:95:f6:ff:f1:ff:23:99:8d:0d:70:9a:4a:92:
65:84:a1:3c:fa:5a:7a:32:6b:9f:3b:f9:4c:09:5b:
3f:1e:af:8b:c3:a4:6f:81:27:2c:e7:c6:3a:08:b3:
73:bd:d0:8b:dd:a5:79:f9:af:dc:86:85:bc:91:ee:
f8:bd:34:d4:53:cc:8c:c9:0e:c3:61:76:60:20:94:
ae:aa:bd:86:94:27:03:26:09:3b:13:70:86:71:73:
6f:07:96:96:90:50:26:28:5d:f1:d4:b4:47:b4:64:
9d:f9:f5:6d:5f:9e:7f:e2:92:70:a2:db:55:c3:fb:
23:94:c1:85:2e:2e:34:28:a0:b2:bb:92:b7:90:1d:
59:3b:e4:83:f0:ee:36:37:ee:df:b1:f9:12:14:0b:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:F9:4B:D1:DE:A2:03:FD:CF:64:2D:CD:CA:81:D2:D6:0C:86:A8
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:42:d4:86:8b:76:9c:26:ce:c4:2a:f2:06:53:8a:2a:d7:ae:
6c:b0:79:07:51:b6:d4:ad:ff:f2:fd:a3:54:a4:2d:7c:1c:ce:
4d:7e:8f:c5:ba:f2:70:d8:f1:2f:65:c8:c3:db:a7:bf:51:af:
94:8a:c8:11:1a:16:04:31:c0:d2:c9:c3:5a:eb:c3:85:c6:54:
c9:d5:8b:90:43:68:f2:0d:6f:12:f6:bf:2a:96:9a:3c:8e:89:
40:3c:dc:b0:11:d6:39:dc:2e:01:8f:3d:ba:78:8d:4d:2a:a3:
e6:81:14:29:44:26:31:6d:21:5f:31:0f:47:01:56:03:33:1c:
13:31:08:7a:99:e0:e3:dc:a8:4f:c3:af:a3:3a:f6:c9:8e:07:
4b:0e:08:6e:6a:f5:ec:ef:57:fc:a4:21:26:2c:07:27:b9:be:
e4:e8:59:6e:08:2c:c3:a3:bf:44:ee:34:22:e7:d4:95:76:4e:
7d:06:00:65:5d:a7:c5:f4:98:bf:9f:f4:d7:cb:a8:1a:cd:55:
10:91:ae:59:60:35:ef:ad:74:ef:bc:4a:f6:7d:20:3b:bb:b0:
3e:81:e1:b9:fd:6b:07:f9:ed:0e:4f:68:dd:d4:d8:8b:3e:ff:
14:92:ac:f5:c4:5a:c4:f9:5f:98:8d:0b:c3:03:0c:4a:ac:4c:
01:7a:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:07 2025 by rpki-client