Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: RdNzpFQ5lzwClCD1lfgXGlBrNz88znyi+EtJhOjbri4=
Subject key identifier: 57:2B:7B:22:F8:6D:28:63:FA:E3:2E:B7:61:99:97:A6:A3:02:26:B4
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 0199FEEB9E7310B38162299033291E88670F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 07C7
Signing time: Mon 20 Oct 2025 00:01:18 +0000
Manifest this update: Mon 20 Oct 2025 00:01:18 +0000
Manifest next update: Tue 21 Oct 2025 00:01:18 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: nrGl+eDLdUxrO+AVOHFwbY6pXYSzKnA3omu/QXOR1YE=)
2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9e:73:10:b3:81:62:29:90:33:29:1e:88:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Oct 20 00:01:18 2025 GMT
Not After : Oct 21 00:01:18 2025 GMT
Subject: CN=572b7b22f86d2863fae32eb7619997a6a30226b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:67:61:b5:da:33:f4:33:23:7e:a7:8b:c6:
a2:93:b0:bc:da:ec:8b:dd:d0:03:e1:b8:b3:3f:b4:
c5:7f:48:1a:a8:f0:7a:7a:b8:21:64:b8:4a:7b:56:
e3:77:26:c8:66:0e:84:48:b7:c2:38:67:42:08:24:
20:b6:17:07:82:84:70:54:83:69:9d:b6:90:29:c8:
df:d4:e6:11:ae:3b:1d:f5:b7:c9:50:b9:c4:0a:90:
6c:ed:b9:4f:6b:c9:72:9e:62:bf:69:36:54:5a:87:
3d:07:1d:65:5f:67:8f:67:fa:f8:24:9b:ad:06:9e:
63:c5:12:fa:93:aa:e9:1c:69:09:b6:31:51:84:58:
0c:4e:45:b6:5e:c9:79:12:1b:90:90:d9:38:8c:6d:
9f:8e:49:26:58:82:f3:1f:20:a9:c8:45:18:35:00:
8a:01:d4:42:9a:2a:8e:60:9a:98:47:f6:f2:14:ab:
ec:82:2e:81:01:d9:b5:18:47:0a:d1:46:b7:36:d6:
a2:0c:f4:fe:21:fe:b0:99:f9:3f:2d:af:2c:c5:e1:
79:d5:84:a2:de:65:4e:73:7e:4b:bf:5c:0a:93:34:
e1:3f:1d:03:f5:db:05:62:4b:ea:9d:16:00:17:ae:
73:98:f7:b7:a9:b4:cc:4d:8a:4c:c5:26:bc:b8:0a:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:7B:22:F8:6D:28:63:FA:E3:2E:B7:61:99:97:A6:A3:02:26:B4
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:be:1d:20:70:58:c6:85:84:dc:f6:4f:4e:d2:af:44:25:5f:
f6:2a:8d:83:66:41:05:d0:2e:8a:ac:ff:ca:4a:d9:0e:7e:fd:
17:71:5a:12:74:6a:01:ee:cb:1c:8a:36:b0:0f:6a:4c:b6:39:
f0:41:79:33:c7:20:77:db:1e:a2:51:58:f0:b9:e6:5c:f6:61:
aa:90:f5:33:4a:3f:d4:94:ac:ad:c0:ec:ec:96:bb:31:e8:74:
f6:8f:b1:0f:be:6e:8e:be:4d:d9:14:72:3d:c0:6d:32:86:10:
de:c5:fa:33:94:2f:a7:08:02:51:dd:03:60:9a:2b:ae:29:66:
d4:7e:b0:d5:3e:8e:7a:4b:bc:0a:4a:9c:1a:e1:e1:fc:29:0b:
df:18:b1:12:92:01:71:2f:21:4a:c2:44:cb:f1:be:52:13:5f:
bd:93:28:23:87:54:93:a6:46:e1:e8:ab:70:fa:26:00:5b:b2:
72:0f:0b:e5:ec:29:38:dc:cb:0f:a9:cf:07:6e:aa:38:29:84:
df:6a:aa:78:16:bb:9b:6e:ca:00:92:32:a2:2f:67:a6:8b:8e:
96:24:97:9c:c1:36:ad:34:55:86:ae:21:50:63:2a:60:99:83:
d3:90:af:69:2f:a3:f1:55:c3:e2:9b:fd:e7:7b:6b:65:26:78:
0a:14:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:28 2025 by rpki-client