
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: UaDHY/ryt/E5COqQ7LnEevFPRDFy3ERTtO1GDBW20xs=
Subject key identifier: 1A:B8:9E:3B:29:C1:A6:E8:35:C7:19:6D:4E:92:87:9F:EC:C0:D3:5E
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 0198D7E18219C7C3E61CD212E80C6FC39FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 17:02:16 +0000
Manifest this update: Sat 23 Aug 2025 17:02:16 +0000
Manifest next update: Sun 24 Aug 2025 17:02:16 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: IVz3jMCJwV5PB5oi8lEX/SUBBPrU5xajEEYB/6YtOHs=)
2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:82:19:c7:c3:e6:1c:d2:12:e8:0c:6f:c3:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Aug 23 17:02:16 2025 GMT
Not After : Aug 24 17:02:16 2025 GMT
Subject: CN=1ab89e3b29c1a6e835c7196d4e92879fecc0d35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:ce:44:54:20:12:39:cd:e6:f9:36:42:5c:
19:7e:92:7b:74:56:87:42:d7:17:2c:72:c6:22:b2:
68:2e:8f:3d:e9:a2:9d:21:5f:d8:a3:e3:e5:09:c1:
0b:02:9e:13:84:29:a6:e9:20:17:9c:5a:b8:ef:36:
f0:0b:ee:ab:fd:c5:e8:ce:1c:e3:5d:d5:55:f7:d9:
92:41:e4:4a:c3:58:ff:24:6c:5c:82:78:50:40:07:
d6:4f:83:42:70:3a:ca:88:8e:6a:a6:e9:0b:04:b6:
42:06:7d:75:44:8e:3f:1e:a5:bd:a0:bf:45:56:08:
da:37:9a:49:08:8f:1c:b8:6b:0f:6c:c0:7f:d5:fe:
6a:d1:f5:b5:40:63:d0:99:67:8c:89:c9:42:6a:69:
d8:7f:ba:07:f0:f7:87:d5:c1:d6:4b:05:e8:0f:3f:
7d:17:b2:36:ee:82:a1:25:30:b7:81:da:cb:70:b6:
f6:3c:61:f8:26:5b:db:6f:ad:09:37:0a:0f:c8:aa:
29:17:70:c6:a4:b3:d1:5c:a0:08:2c:f6:75:8b:d8:
14:43:10:f8:62:20:d2:7a:ea:07:df:92:83:e1:bb:
26:2b:80:b0:6e:05:ff:c8:e1:5e:fd:2b:79:c0:3d:
30:c3:d9:7f:39:80:0a:a8:29:8c:af:83:29:78:6a:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:9E:3B:29:C1:A6:E8:35:C7:19:6D:4E:92:87:9F:EC:C0:D3:5E
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7a:7c:e9:7d:1e:50:c4:c4:21:eb:16:fc:03:8b:ef:d5:5b:
21:0e:14:a3:95:aa:97:80:10:7b:5a:4a:4f:f1:f0:b8:a9:55:
77:ec:21:c5:fd:ce:20:33:1e:bc:8d:ed:42:58:6f:d0:92:3e:
b6:c9:f8:0d:69:7f:2c:5b:85:00:98:0e:9e:f7:0d:a5:73:45:
e8:f7:72:56:02:40:95:cd:46:10:14:2d:22:48:5e:57:a3:89:
44:dd:d2:21:b3:a3:d6:41:fe:1d:92:de:73:27:ac:b0:36:e3:
4c:27:1b:f1:0c:74:a5:2a:73:74:bb:1a:bc:3c:06:33:e0:8d:
43:20:0e:30:7a:96:d4:81:bb:46:54:a8:80:82:dd:12:09:4a:
3f:53:22:ee:3a:df:45:20:28:32:4a:7d:ab:a1:4c:94:80:fc:
69:ca:79:58:7b:75:15:65:77:1a:6a:f3:74:24:65:09:30:24:
c7:3d:d8:b0:f9:18:e7:b2:a0:2c:b0:8b:5d:e4:22:64:27:07:
0d:d2:61:9f:18:a7:32:34:e7:47:28:38:c8:0b:83:9d:52:3f:
39:4b:97:ab:18:50:81:6f:d7:69:6a:ca:7c:51:30:e8:5a:05:
9e:fe:58:f9:a6:5d:98:26:e8:1f:ac:0c:f9:06:6a:c8:46:20:
f8:68:b4:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4YIZx8PmHNIS6Axvw5/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk
YWQyYzgwHhcNMjUwODIzMTcwMjE2WhcNMjUwODI0MTcwMjE2WjAzMTEwLwYDVQQD
EygxYWI4OWUzYjI5YzFhNmU4MzVjNzE5NmQ0ZTkyODc5ZmVjYzBkMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OrORFQgEjnN5vk2QlwZfpJ7dFaH
QtcXLHLGIrJoLo896aKdIV/Yo+PlCcELAp4ThCmm6SAXnFq47zbwC+6r/cXozhzj
XdVV99mSQeRKw1j/JGxcgnhQQAfWT4NCcDrKiI5qpukLBLZCBn11RI4/HqW9oL9F
VgjaN5pJCI8cuGsPbMB/1f5q0fW1QGPQmWeMiclCamnYf7oH8PeH1cHWSwXoDz99
F7I27oKhJTC3gdrLcLb2PGH4Jlvbb60JNwoPyKopF3DGpLPRXKAILPZ1i9gUQxD4
YiDSeuoH35KD4bsmK4CwbgX/yOFe/St5wD0ww9l/OYAKqCmMr4MpeGpPFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq4njspwaboNccZbU6Sh5/swNNeMB8GA1UdIwQY
MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt
ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4
LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXp86X0e
UMTEIesW/AOL79VbIQ4Uo5Wql4AQe1pKT/HwuKlVd+whxf3OIDMevI3tQlhv0JI+
tsn4DWl/LFuFAJgOnvcNpXNF6PdyVgJAlc1GEBQtIkheV6OJRN3SIbOj1kH+HZLe
cyessDbjTCcb8Qx0pSpzdLsavDwGM+CNQyAOMHqW1IG7RlSogILdEglKP1Mi7jrf
RSAoMkp9q6FMlID8acp5WHt1FWV3GmrzdCRlCTAkxz3YsPkY57KgLLCLXeQiZCcH
DdJhnxinMjTnRyg4yAuDnVI/OUuXqxhQgW/XaWrKfFEw6FoFnv5Y+aZdmCboH6wM
+QZqyEYg+Gi0Og==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:41 2025 by rpki-client