Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: 3lRngIpsuPOsYDVsz3PFu1BfY4Of2EWxMuam8vWfv9k=
Subject key identifier: C5:A7:67:A3:AC:C6:B7:98:65:26:8E:4E:37:58:12:98:D1:ED:A4:83
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 0199FC58830555B85B3732CF1E2026B772C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1638
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: v3847kS3kVprolk3tLi/odsBTX9GMk5Wl+Nt1vXuuwA=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:83:05:55:b8:5b:37:32:cf:1e:20:26:b7:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=c5a767a3acc6b79865268e4e37581298d1eda483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:15:e7:8f:58:30:25:5c:d3:4b:7b:e1:93:
f1:07:0a:ae:df:7f:f4:5c:f3:e6:c4:a1:22:b9:b0:
f6:bd:37:a0:84:ac:7c:01:72:ad:7c:59:61:01:54:
f1:a5:8c:cf:89:bc:f4:e7:2b:4c:58:e9:c0:32:cb:
9a:d7:b6:2b:7d:ae:c9:a7:fd:6f:9d:68:3a:1d:93:
17:6c:79:36:f9:45:7a:07:21:65:57:f1:e6:f0:2b:
b6:53:7e:2c:e8:6a:16:63:02:61:9f:b7:98:94:6d:
94:cd:4e:cb:6b:c4:f9:0e:31:2b:c1:2c:91:79:93:
3f:f9:94:97:70:a1:00:25:f8:f6:90:37:9a:cb:95:
63:0c:1d:fc:0d:d6:97:f5:dc:4a:be:ed:85:12:93:
8c:8d:dc:a9:3b:b8:fe:ff:ef:b5:c5:17:4c:08:01:
a2:b2:5a:4a:09:75:3d:4c:c8:e5:ab:49:37:cf:0e:
20:b1:80:fe:38:b4:28:a1:5c:3a:4f:d4:cb:4f:fe:
31:e2:9c:c6:c6:3d:1a:7d:cc:de:ba:40:06:8b:9f:
74:0b:a1:77:6f:ca:c0:1e:10:7b:af:88:da:24:7f:
a9:dd:1c:e7:60:e9:ac:61:79:4e:38:6d:a7:ae:98:
5a:f6:38:d6:8b:c4:75:9c:bf:9a:18:d7:57:65:60:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:67:A3:AC:C6:B7:98:65:26:8E:4E:37:58:12:98:D1:ED:A4:83
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:3e:e4:4f:74:b9:65:d0:e5:39:61:bc:8b:b6:1c:82:a7:17:
05:8f:56:d4:7a:1d:6b:20:a7:21:a9:62:c6:11:b7:ff:14:f7:
fd:53:06:77:f4:9a:01:8a:22:7c:62:9e:ae:cb:58:6f:f2:33:
10:41:72:30:2b:f8:b7:3d:22:20:31:4a:f7:4d:8c:54:37:43:
69:95:5d:3a:4c:71:0b:7a:6d:a0:70:15:8c:45:da:6a:62:d5:
15:4a:07:fd:1a:45:48:2c:c3:b6:d1:11:d9:05:fe:8b:51:19:
e2:80:1d:5a:2b:6c:43:2d:ae:de:d9:0d:e3:a3:88:d6:d8:be:
48:f5:1a:2a:92:3f:19:d7:d9:83:24:8e:21:45:9f:fe:c5:4d:
77:ce:cb:c0:61:f6:14:aa:ba:db:cd:13:57:46:cf:dc:13:29:
be:86:5a:93:a0:27:d9:51:55:cc:46:59:f9:a9:4d:9b:6b:b8:
e7:f6:64:04:08:74:18:5b:20:2f:87:c0:17:3a:a6:53:e8:b7:
5b:fd:c9:71:43:25:cc:66:b1:d8:d3:90:a5:9e:72:6f:c2:43:
05:76:2e:97:b5:c9:bf:b6:c8:bd:32:48:32:4e:d4:4a:56:14:
70:b7:69:93:33:28:dc:6c:09:a5:5d:dc:c3:6f:5a:8e:a2:3b:
0a:47:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:46 2025 by rpki-client