Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: DpTVp2suyW1acDOvqM2Jw6W0E55y3UDCkg6ToRySPWs=
Subject key identifier: 74:99:15:ED:4D:E2:92:30:7C:DD:56:1A:97:30:42:A8:82:9B:80:92
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 0199FEB4B0E0977FB9FA60A775792B59ABAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0B1C
Signing time: Sun 19 Oct 2025 23:01:18 +0000
Manifest this update: Sun 19 Oct 2025 23:01:18 +0000
Manifest next update: Mon 20 Oct 2025 23:01:18 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: A93FHAgHeBWWWZZnSKjkPD7m7dqG0tN+oXxiTJS+djc=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b0:e0:97:7f:b9:fa:60:a7:75:79:2b:59:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Oct 19 23:01:18 2025 GMT
Not After : Oct 20 23:01:18 2025 GMT
Subject: CN=749915ed4de292307cdd561a973042a8829b8092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:c4:3c:03:8b:d1:7e:01:9c:41:c4:9c:75:
df:9d:f4:f4:aa:82:31:5c:6c:ca:c7:39:8f:f4:9f:
0f:eb:26:55:d3:fe:4c:53:19:98:ca:f3:2a:b5:0f:
66:09:de:5d:1f:7d:28:c2:30:e7:24:c4:a9:83:44:
4d:b0:83:bd:89:ed:ce:17:de:6b:61:40:21:d9:f9:
7c:5c:7b:09:36:31:d5:ca:7b:7a:c9:46:cb:97:a1:
c8:40:00:0e:a8:36:2d:bd:4e:0d:ec:4b:be:c5:0f:
8e:93:89:bd:a1:e4:1b:70:c8:36:ef:e6:86:61:2b:
5f:18:4d:c8:77:19:72:54:bd:fe:bc:45:93:ea:42:
49:47:57:78:15:b2:99:df:28:60:bc:6e:a8:e5:9f:
ab:f6:7f:3d:64:b4:53:2b:ad:4b:58:44:e3:29:4a:
54:df:c5:e8:55:23:bc:96:69:ed:af:ea:be:8b:f1:
5d:91:30:fc:b1:b3:f6:1c:0d:8b:82:b4:61:0e:38:
8c:70:d1:51:2a:d5:cf:71:9c:19:ee:c5:61:27:7d:
9f:8b:ce:22:7c:ba:88:8b:f3:6b:43:fe:3c:21:42:
72:c3:f1:e4:9d:9d:7c:14:c1:bc:52:6d:b4:2d:fb:
79:b4:47:f2:70:eb:cb:e5:be:7a:2e:03:9b:25:b1:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:15:ED:4D:E2:92:30:7C:DD:56:1A:97:30:42:A8:82:9B:80:92
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:84:c6:30:f1:8e:61:1d:57:3a:5b:71:4c:84:05:5a:4c:
da:0e:79:f3:b4:15:6d:90:04:fd:f9:aa:ed:0d:de:2d:be:29:
fc:25:b5:ef:5b:74:57:8c:bf:7b:92:20:7b:d9:71:91:76:05:
e7:72:cf:71:f8:3d:1a:3e:b7:18:5c:98:3d:9e:75:da:8d:8f:
7d:50:ad:d5:41:24:d4:63:c0:7f:98:f0:17:f9:6b:77:c0:89:
1b:21:bc:d0:ec:ce:df:4e:f2:96:bc:0f:98:a2:48:97:01:73:
02:d3:8c:77:3d:3f:2d:8e:9c:f3:32:eb:35:fd:ce:34:92:9b:
b4:cb:41:32:91:51:e0:3d:0c:60:7b:47:6a:4b:72:52:a3:be:
79:e1:47:dc:15:96:ff:7c:2d:1c:8b:1d:69:4f:a7:32:ba:5d:
08:91:7e:08:81:80:11:05:e4:33:e9:59:d6:34:36:a3:29:50:
11:1f:16:45:18:49:48:87:bb:b8:66:8b:5e:86:39:da:dd:1b:
e3:62:ec:66:dc:da:e0:f6:eb:07:1a:4b:6c:bd:41:cd:0f:83:
e2:a2:e0:8e:35:2f:61:e7:36:b0:bf:e5:15:c3:76:13:7a:1b:
62:f4:65:de:f8:61:15:3f:4a:42:a6:72:97:d0:74:44:ea:64:
13:84:18:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tLDgl3+5+mCndXkrWauqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3
ZDFlMTcwHhcNMjUxMDE5MjMwMTE4WhcNMjUxMDIwMjMwMTE4WjAzMTEwLwYDVQQD
Eyg3NDk5MTVlZDRkZTI5MjMwN2NkZDU2MWE5NzMwNDJhODgyOWI4MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLrEPAOL0X4BnEHEnHXfnfT0qoIx
XGzKxzmP9J8P6yZV0/5MUxmYyvMqtQ9mCd5dH30owjDnJMSpg0RNsIO9ie3OF95r
YUAh2fl8XHsJNjHVynt6yUbLl6HIQAAOqDYtvU4N7Eu+xQ+Ok4m9oeQbcMg27+aG
YStfGE3IdxlyVL3+vEWT6kJJR1d4FbKZ3yhgvG6o5Z+r9n89ZLRTK61LWETjKUpU
38XoVSO8lmntr+q+i/FdkTD8sbP2HA2LgrRhDjiMcNFRKtXPcZwZ7sVhJ32fi84i
fLqIi/NrQ/48IUJyw/HknZ18FMG8Um20Lft5tEfycOvL5b56LgObJbHZEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSZFe1N4pIwfN1WGpcwQqiCm4CSMB8GA1UdIwQY
MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt
M2Q3ZTRiNDk2YjIzLzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz
LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewaExjDx
jmEdVzpbcUyEBVpM2g5587QVbZAE/fmq7Q3eLb4p/CW171t0V4y/e5Ige9lxkXYF
53LPcfg9Gj63GFyYPZ512o2PfVCt1UEk1GPAf5jwF/lrd8CJGyG80OzO307ylrwP
mKJIlwFzAtOMdz0/LY6c8zLrNf3ONJKbtMtBMpFR4D0MYHtHaktyUqO+eeFH3BWW
/3wtHIsdaU+nMrpdCJF+CIGAEQXkM+lZ1jQ2oylQER8WRRhJSIe7uGaLXoY52t0b
42LsZtza4PbrBxpLbL1BzQ+D4qLgjjUvYec2sL/lFcN2E3obYvRl3vhhFT9KQqZy
l9B0ROpkE4QY0Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:24 2025 by rpki-client