Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: 1OW8E/BPVKF7HkitOz4UZwS/Lm3zk7e/jfyp70Rta+Y=
Subject key identifier: 4D:C3:A4:2A:B9:A6:65:3B:FD:02:93:6B:79:F6:34:05:F9:59:EB:8B
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0199FCFD979657C147A5AE17A486B107EECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 1016
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: 5IE4mlf7lBw2yCzgwAt0DIg4Thyesn0E/c4G0b0D9LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:97:96:57:c1:47:a5:ae:17:a4:86:b1:07:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=4dc3a42ab9a6653bfd02936b79f63405f959eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:b4:ad:a9:7f:a3:8f:ef:2f:aa:da:0e:14:
b3:a6:18:bf:55:c0:64:6a:3a:31:79:dd:b7:f7:01:
05:73:64:13:91:16:a3:45:81:6d:3b:b2:45:84:db:
47:ac:fa:09:8f:26:c5:7a:62:e4:46:4f:a8:8f:44:
21:0d:be:e1:5d:2d:71:6d:68:4b:0a:31:18:97:5f:
f9:5d:d5:92:b3:82:fb:c7:d0:40:f9:7c:77:ba:5c:
a1:a8:59:25:ec:53:4d:f4:70:ae:44:9b:5c:ab:fc:
6a:85:27:d5:39:5d:69:a4:70:40:66:dc:d3:8f:e3:
f3:ca:dc:34:8c:61:3f:8d:3f:8c:f2:ed:43:ab:cc:
2d:31:d6:c9:84:e0:fa:45:e6:3b:10:66:2e:e1:39:
b9:ac:bb:b7:af:57:c4:d0:bf:35:65:15:dc:93:45:
11:4c:8b:66:58:0c:ed:a4:6d:ab:27:84:bc:53:ca:
44:a1:0b:43:c4:8c:58:a6:88:04:95:9b:68:22:01:
d1:14:e9:02:b4:8e:a8:85:c2:fa:f6:ed:e0:cc:86:
3c:57:eb:4d:cf:1d:5f:38:3e:88:32:e1:56:e8:03:
52:72:55:c6:da:e7:b4:f4:a1:a3:bb:6b:33:6a:0f:
68:8b:a3:75:4d:31:62:8e:f4:b2:ac:4f:76:88:f6:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:A4:2A:B9:A6:65:3B:FD:02:93:6B:79:F6:34:05:F9:59:EB:8B
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2c:cd:3d:25:8d:64:c5:24:af:f5:ff:50:a6:72:e4:3c:93:
0d:6f:7e:66:f0:02:b3:07:eb:f3:62:46:c7:de:0b:a3:c8:72:
c0:4d:67:16:5d:7f:8c:43:a8:7e:81:d3:38:a8:0a:ed:32:16:
74:b4:4e:a1:74:33:8b:e9:85:7f:d1:2f:b7:b1:35:b7:1c:ca:
61:ad:70:4c:ee:b6:e7:c5:63:27:5c:53:88:3d:b3:2b:70:8c:
fd:ef:30:c7:8c:43:c5:56:02:26:ad:42:ca:3f:32:ad:56:9a:
77:2c:73:a9:24:e2:7b:b5:d9:6c:d5:7b:d3:95:3a:c9:a3:6a:
80:38:04:4a:6d:c4:c7:d5:0d:ca:7e:26:76:f8:d8:02:6b:ff:
52:d6:92:f4:c6:61:5e:60:fc:dd:ab:b2:7f:b3:21:77:69:bf:
f8:cc:31:0a:19:94:f6:bd:88:93:d7:8b:a8:01:68:e6:05:5f:
3d:a2:74:3f:f3:c9:03:7a:cd:64:9e:a3:0f:72:c4:a3:a5:b4:
66:7f:ce:6b:11:5d:33:80:01:44:27:a6:3f:63:4c:e3:f5:91:
fa:4f:da:ac:60:19:7f:69:f2:28:d5:25:3c:3b:29:f5:39:e4:
8f:7e:31:85:d5:3e:ff:3c:d1:39:c7:67:08:fa:5d:8c:82:27:
4a:46:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:13 2025 by rpki-client