Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: 5Tg/41GDayecKAHagoCDVIyUCVsjlZJvQcN08l99fEY=
Subject key identifier: 06:4C:BE:A3:2D:43:75:D7:8A:E7:05:98:F8:88:5B:ED:28:5E:72:16
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 0199FD6B161495E3518406BF62CF8D6982EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: tWHfN6Dyy+305FXPjHrWDk8xAGxpHI+vxsxXqnAlAlo=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:16:14:95:e3:51:84:06:bf:62:cf:8d:69:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=064cbea32d4375d78ae70598f8885bed285e7216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:cc:4b:b8:b2:8f:c3:93:a8:a9:3a:88:0a:
4e:89:8b:00:83:3d:3e:ae:04:af:f8:7f:2a:f7:f2:
b7:28:ed:bb:ec:ce:f0:cc:ce:8d:27:b3:a9:cc:20:
b0:c8:92:61:68:80:e7:5e:ab:ac:c9:ac:73:50:17:
bf:5e:19:f3:91:e0:6a:33:d9:2e:78:8a:cc:74:eb:
f4:f5:fd:5f:cd:c0:c2:fe:53:ce:3c:aa:b8:3f:2c:
06:0f:d8:2d:b0:82:33:67:f4:bb:38:e9:ca:53:ef:
bc:6e:6e:0e:5d:a0:b0:e2:50:f8:6a:e7:9a:ed:c3:
96:49:7a:47:07:2f:b9:f6:bd:a9:7d:dc:89:da:ea:
56:ea:4d:75:96:1f:88:54:95:4b:bb:76:c5:7a:d9:
dd:ee:11:2b:67:f3:0b:eb:4a:58:b7:12:5e:fd:f2:
71:49:35:30:f1:93:d1:ac:bc:50:91:3e:e8:51:ed:
69:73:4b:28:50:32:a5:61:c7:95:84:7c:9b:b5:af:
a2:1b:74:13:c8:67:ba:c5:6c:1c:db:a1:49:29:e4:
75:54:e4:cb:8d:e4:c7:29:ec:1e:5c:57:6b:54:01:
2a:78:4c:ff:13:12:46:ae:7b:59:82:eb:44:6f:a9:
41:fe:14:50:fc:82:96:5b:f7:37:15:6b:d4:1a:79:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:BE:A3:2D:43:75:D7:8A:E7:05:98:F8:88:5B:ED:28:5E:72:16
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0f:39:ab:d2:74:32:db:fc:47:bc:cd:8d:6e:e6:78:d5:8d:
40:fb:97:b6:30:06:95:f0:71:f5:b2:62:1f:e4:06:53:2c:e2:
bd:61:ae:ff:b8:ae:30:16:bd:dd:75:d3:f4:df:48:2b:55:84:
e8:51:98:1a:ae:a2:b2:18:eb:3b:ed:92:e3:b4:f3:1b:09:6d:
3f:7b:0b:0c:c1:1a:24:c7:e0:f9:a9:67:ca:02:84:fd:fe:8f:
c7:dd:e4:4d:37:97:80:36:0c:51:5d:55:9a:9f:d5:bc:70:46:
cd:ea:2d:57:01:49:65:3c:fd:71:d4:e9:e7:d1:f9:cd:e3:65:
a1:90:01:1f:b0:66:22:d7:9d:4d:b5:9f:65:2e:1a:3b:d8:9a:
e5:c1:7d:87:50:9f:39:cd:68:75:7f:4b:87:0e:7b:87:3f:ee:
c2:41:3c:82:fa:98:86:cf:1a:8c:5f:64:cb:52:f5:94:0a:a7:
8c:15:52:b4:b9:9a:07:ad:eb:74:86:3d:1a:87:0f:5e:21:24:
52:85:00:e9:1e:5f:03:0b:95:6d:4e:66:4b:c3:8a:b7:e0:13:
39:fc:ce:03:db:a1:ce:a5:18:75:53:5f:b3:39:be:c0:a7:16:
f3:8e:cf:6b:8c:ac:7e:ee:8a:d3:fe:ee:87:ea:e7:09:c2:96:
1b:40:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:36 2025 by rpki-client