
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: G7/Hli3Ns4dDhtAjzdnknWqEjL9QVpWiY7MmxK48NT8=
Subject key identifier: 31:F5:F5:23:FA:1D:A1:43:52:B4:20:6B:B3:3C:2F:DF:C7:13:0F:09
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 0198D5BBC98953E85FF9D2416390A6639BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0D1F
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: uOaM3hf8ADgPr/msgRfNW8Kmb07MoT3sWxxiZlnftoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c9:89:53:e8:5f:f9:d2:41:63:90:a6:63:9b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=31f5f523fa1da14352b4206bb33c2fdfc7130f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:5b:8e:b9:fd:85:8c:5d:f0:c3:ca:6a:84:
45:2e:a1:d0:49:57:e3:38:85:35:95:ba:f7:21:8d:
20:2e:a4:c1:18:9f:e8:a4:d5:11:be:45:85:3d:42:
99:8e:b5:11:8e:da:0a:05:28:07:b1:fc:a1:90:0a:
2f:72:e3:0b:de:a8:1b:35:34:69:93:fd:9d:26:76:
83:b0:19:0d:4c:7d:0f:ff:92:cb:db:e6:f7:ee:c5:
b7:7e:50:e5:bd:b2:e1:d4:57:5a:f2:b8:62:b0:4c:
4e:20:2d:61:12:46:97:78:25:68:9d:e1:d2:83:96:
5f:f4:34:ec:d6:a3:a9:7b:70:72:fc:40:24:c8:0c:
95:63:a0:12:14:80:43:7b:a8:0b:c2:4e:5c:fb:6b:
8c:1c:1f:3d:93:a4:38:70:00:6d:86:3a:ea:fa:6b:
ae:07:37:f6:25:ab:10:29:e6:90:74:06:7c:c4:76:
c1:fb:a0:96:08:39:5d:48:04:40:0c:fd:98:fa:08:
ee:fd:80:18:4e:97:be:45:eb:1c:3e:42:b1:d0:ec:
aa:90:92:05:d5:56:2b:72:c7:7e:ec:02:47:71:32:
fa:e7:9f:e0:4e:4c:90:a1:c3:76:97:f6:97:5d:a6:
08:f5:cd:52:39:85:a2:96:38:ae:91:6e:ba:30:d7:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F5:F5:23:FA:1D:A1:43:52:B4:20:6B:B3:3C:2F:DF:C7:13:0F:09
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d5:34:8c:46:52:bd:c5:85:0f:db:a0:de:2d:38:91:58:32:
5f:0e:e7:ba:28:a4:56:93:53:bd:02:8d:53:49:01:1c:90:54:
36:c0:ac:30:a8:21:5d:28:46:12:60:eb:b6:68:79:ce:22:87:
2a:49:e8:37:3f:95:1e:d9:39:06:88:d2:8f:b4:3f:1b:07:0e:
b7:56:ef:0f:6e:f8:89:30:d6:aa:26:6e:67:8f:10:76:5a:0d:
d1:5d:fc:c3:39:c2:76:92:2b:87:93:cb:41:3a:e1:61:7a:9e:
fa:03:01:5c:99:cd:a7:d2:5a:f1:a8:ac:61:eb:47:97:a1:92:
02:88:2d:ac:9f:7f:68:d8:66:9a:b1:b2:e4:de:fd:8f:f5:9f:
98:66:76:2a:a4:87:0f:3f:0b:bc:1f:f7:0e:4d:43:e3:22:63:
77:dd:26:90:d4:30:46:d1:9a:9a:74:ac:ca:54:e3:47:4c:c4:
44:b3:e5:d3:1f:ec:bf:a2:12:cc:ae:e2:0e:e2:df:28:83:f6:
87:0a:ac:fc:83:ba:a5:33:c0:6f:48:c2:1d:09:ed:01:17:c4:
29:d3:69:7a:d4:19:b7:8f:3e:b2:5b:76:8f:35:ec:ee:61:ad:
18:bc:b3:13:5c:ad:a7:c2:97:00:99:69:06:16:d0:32:10:54:
07:02:3c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8mJU+hf+dJBY5CmY5vzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3
NDJlNzYwHhcNMjUwODIzMDcwMTUwWhcNMjUwODI0MDcwMTUwWjAzMTEwLwYDVQQD
EygzMWY1ZjUyM2ZhMWRhMTQzNTJiNDIwNmJiMzNjMmZkZmM3MTMwZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI9bjrn9hYxd8MPKaoRFLqHQSVfj
OIU1lbr3IY0gLqTBGJ/opNURvkWFPUKZjrURjtoKBSgHsfyhkAovcuML3qgbNTRp
k/2dJnaDsBkNTH0P/5LL2+b37sW3flDlvbLh1Fda8rhisExOIC1hEkaXeCVoneHS
g5Zf9DTs1qOpe3By/EAkyAyVY6ASFIBDe6gLwk5c+2uMHB89k6Q4cABthjrq+muu
Bzf2JasQKeaQdAZ8xHbB+6CWCDldSARADP2Y+gju/YAYTpe+RescPkKx0OyqkJIF
1VYrcsd+7AJHcTL655/gTkyQocN2l/aXXaYI9c1SOYWiljiukW66MNfUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH19SP6HaFDUrQga7M8L9/HEw8JMB8GA1UdIwQY
MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt
MDc3OTAyOWFlMjIyLzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy
LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9U0jEZS
vcWFD9ug3i04kVgyXw7nuiikVpNTvQKNU0kBHJBUNsCsMKghXShGEmDrtmh5ziKH
KknoNz+VHtk5BojSj7Q/GwcOt1bvD274iTDWqiZuZ48QdloN0V38wznCdpIrh5PL
QTrhYXqe+gMBXJnNp9Ja8aisYetHl6GSAogtrJ9/aNhmmrGy5N79j/WfmGZ2KqSH
Dz8LvB/3Dk1D4yJjd90mkNQwRtGamnSsylTjR0zERLPl0x/sv6ISzK7iDuLfKIP2
hwqs/IO6pTPAb0jCHQntARfEKdNpetQZt48+slt2jzXs7mGtGLyzE1ytp8KXAJlp
BhbQMhBUBwI80A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:37 2025 by rpki-client