Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: PQzBoVbCoamGOPM+lBe3ggZ6ZmFuUzKiUmaCqYcL5K8=
Subject key identifier: F3:F6:06:0E:59:D0:2E:A5:6D:2F:78:66:09:C0:6E:98:BD:87:1A:8D
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 0199FB7CA232C2EC32D42A0E37E383C6A1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: R8QhvHgGOQKQQaTQCYfcMwVzx+37PKrW9GWgoS6cYj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a2:32:c2:ec:32:d4:2a:0e:37:e3:83:c6:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=f3f6060e59d02ea56d2f786609c06e98bd871a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:b3:57:43:b3:df:58:ae:03:fc:66:a9:12:
5b:1c:9c:41:ac:58:31:9c:a1:39:4e:db:ba:41:0a:
ba:55:b5:ef:00:7b:27:6c:d5:fd:6a:8b:b7:ce:4e:
ab:b8:5f:31:7e:a6:84:10:17:25:7f:21:57:f5:81:
5e:5b:c0:98:47:81:21:31:c5:80:47:7b:c7:aa:9d:
8d:6e:b8:58:ca:7a:96:17:5d:51:60:a8:ef:a4:be:
a6:32:27:e6:61:64:14:ec:1c:9e:48:63:f8:8e:84:
7e:72:a7:ef:19:43:dc:55:7b:e7:1e:07:82:45:b8:
9e:db:de:a3:6d:9b:4d:9c:33:68:90:44:17:a2:44:
ab:92:81:63:95:13:49:ff:5d:1e:ca:62:01:d9:b5:
49:00:a8:8c:0f:ab:d6:40:1a:4f:49:a2:2b:d5:c7:
8c:90:f4:c3:a5:30:7e:5a:3f:9d:29:8e:c1:9e:77:
d4:d0:84:45:d7:60:8d:60:ab:f5:cc:56:40:8e:ee:
28:1a:55:5b:14:fe:7e:8b:2b:bd:96:d5:60:79:64:
67:6f:9f:e3:b7:52:2d:19:fa:2e:0d:d8:41:2c:4b:
ee:b7:08:4c:99:2f:69:0d:83:00:90:9f:15:f9:5f:
31:c4:29:68:cc:00:70:c2:5e:2c:6f:70:49:f0:ae:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:06:0E:59:D0:2E:A5:6D:2F:78:66:09:C0:6E:98:BD:87:1A:8D
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:32:bc:db:1f:23:6d:07:af:a0:c2:82:11:11:f4:70:53:
1d:70:c0:9f:fd:f1:14:a2:75:d6:3b:60:69:76:e5:1a:6c:df:
94:27:a0:c3:0f:53:03:82:f4:c8:48:12:52:2f:64:4b:4c:e1:
e1:72:29:ad:f8:ef:15:fc:56:ad:18:94:af:2d:48:ef:f4:51:
ef:45:dd:0a:95:02:97:74:57:6a:d0:32:62:7e:56:ba:50:dd:
3d:b6:7e:f6:2f:cd:8f:b2:a4:79:e8:0b:7f:ee:25:5a:36:7e:
1b:9d:78:0a:df:f5:07:31:54:06:da:d9:55:a3:53:6d:1f:8a:
84:55:f9:d0:38:2a:1f:0a:9f:dc:20:ad:cf:2a:5c:61:0e:5f:
aa:51:b7:bb:d5:a5:47:d4:f1:06:5f:9e:f4:ac:6d:d7:f0:df:
6b:c4:6d:76:9a:df:97:50:9d:f1:0e:5b:34:7c:9d:d6:2a:5b:
59:1f:26:35:47:7d:10:84:31:08:a6:36:f5:df:00:78:8c:83:
12:e4:e1:f8:b5:36:06:d1:f8:dc:b3:62:cf:92:dd:f4:5e:38:
99:e0:f5:77:81:1a:97:fb:e7:92:7f:b0:c8:1e:fc:c7:e7:03:
d2:1c:72:76:01:5a:7f:d7:f8:31:2e:c4:60:71:b9:25:84:7a:
1c:4f:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:11 2025 by rpki-client