Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: /dJ/f5yVxiTA9zFLkcgdZ8HPV69RJ5X7zw3Ly53V9+8=
Subject key identifier: BF:C5:41:7A:67:A8:9C:D1:0D:5C:9D:46:30:51:AC:D0:0D:8B:1E:1D
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 0198D4E0CA6754C48D8357F22F74AF02E17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 159F
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: De1vv4OeVRWFg42WG2HumR3ccOLNMZeYZIVc3AzN+jg=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ca:67:54:c4:8d:83:57:f2:2f:74:af:02:e1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=bfc5417a67a89cd10d5c9d463051acd00d8b1e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:21:0c:04:7d:8a:ed:22:09:ac:9d:d7:e7:
ba:70:8d:3e:4b:5f:e1:8b:fb:66:28:f1:6f:93:31:
95:e6:9c:e9:39:7c:9d:72:db:17:a8:05:25:73:fc:
38:c7:fe:b6:24:d8:2b:45:31:2d:e0:a5:ac:c8:36:
42:f3:b9:aa:28:6f:70:f0:5d:73:04:6b:9b:c0:65:
ed:7c:94:68:92:16:62:6e:c5:48:f9:26:98:f8:2f:
77:67:8b:c4:6d:f6:42:cb:07:9f:93:63:dd:a7:6d:
28:66:f2:1a:f8:8d:3a:27:18:4a:96:1c:70:55:9e:
4b:47:ef:14:81:1e:76:03:c4:06:82:66:78:cd:c6:
65:e7:13:82:0e:43:91:97:9c:06:73:19:a5:0b:bd:
5a:4d:61:b3:5b:27:1b:30:83:e4:0c:e3:a4:b9:02:
e9:5f:c3:5b:1b:b8:2b:b7:0d:51:0a:ea:a6:50:3c:
ab:3c:25:a1:24:bd:a4:94:03:e7:0a:43:eb:0f:97:
f2:b8:a2:b0:c5:4a:36:17:32:d3:e1:3c:85:aa:24:
29:5a:e0:3d:d4:31:ea:b3:a2:be:db:e4:3f:49:d4:
6f:17:50:c1:d1:76:ed:4d:3e:46:4b:f3:8e:36:65:
4c:62:8b:5a:a6:1f:b2:a0:cc:5d:97:ce:80:d9:2b:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C5:41:7A:67:A8:9C:D1:0D:5C:9D:46:30:51:AC:D0:0D:8B:1E:1D
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:89:41:26:01:13:ae:89:89:e5:78:01:49:12:26:b5:22:0b:
0c:d7:23:2d:a5:dc:48:c0:8f:d7:e1:15:fa:92:d8:01:4b:94:
1a:cb:e6:15:4b:3c:81:1e:a3:ee:65:d5:79:ad:1c:ae:98:e2:
6c:55:c9:68:b0:09:c0:50:9e:c6:6d:ea:56:0a:40:e1:18:a6:
ea:28:9d:75:24:e7:39:68:be:7d:05:8a:e8:a2:dd:9c:95:77:
e8:cc:6d:78:01:d4:1f:68:6f:2a:63:f0:ca:82:eb:e5:e0:d7:
5f:77:f8:c4:77:8c:d3:d4:0c:e4:fc:3f:b1:8d:ed:f3:45:b8:
b1:a5:b4:c2:1c:80:2d:ce:d3:37:25:56:90:d8:de:27:e6:01:
5e:54:66:2d:06:0d:ed:34:2d:22:c5:3e:82:bf:b8:d4:70:a6:
83:24:f4:c0:42:b7:da:b1:1e:7e:76:d2:dd:32:dd:1a:6e:7e:
05:01:6b:7d:bd:50:10:21:09:c0:b5:21:a1:9a:a2:89:07:e1:
e2:bc:47:db:b9:21:86:75:a9:25:44:57:01:d6:11:f2:1d:13:
a7:b3:60:a4:e0:58:d0:fa:65:01:f9:b6:7f:f2:a1:f4:b2:94:
07:76:49:b6:fb:00:a6:59:34:3d:54:01:57:c0:72:87:cb:0d:
f3:75:42:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MpnVMSNg1fyL3SvAuF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYmNiNTdlMmQ1ZTQwNjMwZTE5M2JkNWNlYjE2ZjFlZjE4
NzQzYTMwHhcNMjUwODIzMDMwMjM4WhcNMjUwODI0MDMwMjM4WjAzMTEwLwYDVQQD
EyhiZmM1NDE3YTY3YTg5Y2QxMGQ1YzlkNDYzMDUxYWNkMDBkOGIxZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJghDAR9iu0iCayd1+e6cI0+S1/h
i/tmKPFvkzGV5pzpOXydctsXqAUlc/w4x/62JNgrRTEt4KWsyDZC87mqKG9w8F1z
BGubwGXtfJRokhZibsVI+SaY+C93Z4vEbfZCywefk2Pdp20oZvIa+I06JxhKlhxw
VZ5LR+8UgR52A8QGgmZ4zcZl5xOCDkORl5wGcxmlC71aTWGzWycbMIPkDOOkuQLp
X8NbG7grtw1RCuqmUDyrPCWhJL2klAPnCkPrD5fyuKKwxUo2FzLT4TyFqiQpWuA9
1DHqs6K+2+Q/SdRvF1DB0XbtTT5GS/OONmVMYotaph+yoMxdl86A2SuTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/FQXpnqJzRDVydRjBRrNANix4dMB8GA1UdIwQY
MBaAFG68tX4tXkBjDhk71c6xbx7xh0OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgt
OWFkMThiYTFhM2Q5LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgtOWFkMThiYTFhM2Q5
LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdolBJgET
romJ5XgBSRImtSILDNcjLaXcSMCP1+EV+pLYAUuUGsvmFUs8gR6j7mXVea0crpji
bFXJaLAJwFCexm3qVgpA4Rim6iiddSTnOWi+fQWK6KLdnJV36MxteAHUH2hvKmPw
yoLr5eDXX3f4xHeM09QM5Pw/sY3t80W4saW0whyALc7TNyVWkNjeJ+YBXlRmLQYN
7TQtIsU+gr+41HCmgyT0wEK32rEefnbS3TLdGm5+BQFrfb1QECEJwLUhoZqiiQfh
4rxH27khhnWpJURXAdYR8h0Tp7NgpOBY0PplAfm2f/Kh9LKUB3ZJtvsAplk0PVQB
V8Byh8sN83VCPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:18 2025 by rpki-client