Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: lch2lZYJJv9oPm9DnrcFHlkqWiXPFWtwecbL5A/cLfU=
Subject key identifier: 1D:A3:0D:6F:BF:94:2B:4E:CD:9D:60:68:F0:EA:21:35:49:44:77:F3
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 0199FE0FE612CFAAE3FA6C1C5289EDB90057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0C94
Signing time: Sun 19 Oct 2025 20:01:18 +0000
Manifest this update: Sun 19 Oct 2025 20:01:18 +0000
Manifest next update: Mon 20 Oct 2025 20:01:18 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: ZU2musTzb3gdCRhvWmw3VDllFp+wK0bUsyR/WEZ4m6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e6:12:cf:aa:e3:fa:6c:1c:52:89:ed:b9:00:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Oct 19 20:01:18 2025 GMT
Not After : Oct 20 20:01:18 2025 GMT
Subject: CN=1da30d6fbf942b4ecd9d6068f0ea2135494477f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:c9:ac:63:56:1a:6b:58:59:0e:15:49:be:
3e:e2:d1:f2:8b:20:9d:26:84:c4:ae:b4:d5:99:98:
88:8b:02:52:b7:bb:ae:d3:34:58:5e:1b:db:66:6c:
e5:f8:d1:b8:03:ca:be:b3:25:a5:02:77:4e:89:3f:
00:0c:f5:f6:d2:93:bb:43:06:d8:91:67:99:91:43:
25:7f:55:3a:65:71:09:67:bd:39:85:61:b8:b3:d2:
29:64:80:1f:10:d0:34:49:9d:4f:64:ba:d6:46:cc:
72:f2:55:fe:27:be:78:f3:84:85:21:6b:82:47:0c:
69:54:70:2a:c3:13:ff:1f:1d:5e:b2:35:ad:98:72:
1e:26:7e:09:ed:9d:8d:31:84:68:3e:ab:bd:59:98:
8b:aa:e8:be:3c:3c:d9:52:05:c7:89:65:f8:9c:8a:
97:d1:d8:c5:8a:f7:7f:a8:d6:ea:1c:fc:6d:c6:36:
4e:de:43:20:75:7c:4b:c7:cb:dd:ea:7f:20:05:22:
2b:63:27:45:a9:51:9f:71:5a:73:a9:4e:30:d0:cd:
e9:1b:0f:82:a5:a7:a4:f4:1b:fd:ea:fd:b4:d8:44:
50:bc:7f:d5:b2:9a:15:f6:a3:5e:30:71:d0:76:e4:
69:da:4f:b9:da:19:77:00:80:a9:d5:9f:b5:6d:c1:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:0D:6F:BF:94:2B:4E:CD:9D:60:68:F0:EA:21:35:49:44:77:F3
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:a6:e2:e3:6c:8f:18:1a:71:82:a6:fc:39:7d:83:3f:c6:
b7:44:a5:3c:7b:f2:91:92:35:54:b4:67:99:b5:9e:2f:bc:4a:
10:f6:3f:d5:9b:86:17:c9:3b:4d:8c:a8:b4:f5:26:d0:da:05:
95:02:f0:1d:64:88:71:26:a8:ba:8d:56:5f:9c:b6:e4:01:cc:
67:fe:8e:f4:c2:5e:34:af:89:87:72:04:68:40:9a:5d:b8:2b:
8c:2f:a9:eb:61:dd:85:bd:66:e8:89:be:e6:77:23:54:55:f0:
a3:f7:6e:ac:d9:0c:de:1d:ad:30:bb:13:dc:b8:68:4d:aa:ae:
30:30:ce:aa:7a:ba:d6:91:98:5d:c1:18:f7:85:3e:2d:cf:e2:
e5:94:fa:c2:8a:c0:57:6e:ce:dd:9c:14:d0:fc:94:e5:12:20:
a4:9b:9f:e5:e7:eb:6f:1e:0e:2e:b2:4a:8b:b6:ca:65:2f:2a:
db:83:f8:6a:e6:54:5d:fe:a2:0d:17:80:2f:da:d4:62:b4:56:
8a:78:17:19:5c:79:dc:43:1a:5f:a5:84:3a:fa:81:7e:39:93:
23:d7:ea:3d:1b:c5:78:0e:6d:4e:b2:37:89:fb:e1:9c:a2:55:
0d:d1:28:5f:88:82:24:2b:70:a5:f1:a1:1a:b7:79:27:56:09:
88:b4:bc:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+YSz6rj+mwcUontuQBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjQ5ZTg3MDcxMmFiYjY0YjE5YThlY2ViNjFlNTFhOGUw
YzE3NjgwHhcNMjUxMDE5MjAwMTE4WhcNMjUxMDIwMjAwMTE4WjAzMTEwLwYDVQQD
EygxZGEzMGQ2ZmJmOTQyYjRlY2Q5ZDYwNjhmMGVhMjEzNTQ5NDQ3N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwLJrGNWGmtYWQ4VSb4+4tHyiyCd
JoTErrTVmZiIiwJSt7uu0zRYXhvbZmzl+NG4A8q+syWlAndOiT8ADPX20pO7QwbY
kWeZkUMlf1U6ZXEJZ705hWG4s9IpZIAfENA0SZ1PZLrWRsxy8lX+J75484SFIWuC
RwxpVHAqwxP/Hx1esjWtmHIeJn4J7Z2NMYRoPqu9WZiLqui+PDzZUgXHiWX4nIqX
0djFivd/qNbqHPxtxjZO3kMgdXxLx8vd6n8gBSIrYydFqVGfcVpzqU4w0M3pGw+C
paek9Bv96v202ERQvH/VspoV9qNeMHHQduRp2k+52hl3AICp1Z+1bcEn4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2jDW+/lCtOzZ1gaPDqITVJRHfzMB8GA1UdIwQY
MBaAFG60nocHEqu2Sxmo7Oth5RqODBdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJTZWh3Y1NxN1pMR2FqczYySGxHbzRNRjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNzFmOGYtOGVhNi00N2E0LTg5NTkt
OWZjM2JhYmJhZmRmLzEvYnJTZWh3Y1NxN1pMR2FqczYySGxHbzRNRjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zNzFmOGYtOGVhNi00N2E0LTg5NTktOWZjM2JhYmJhZmRm
LzEvYnJTZWh3Y1NxN1pMR2FqczYySGxHbzRNRjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxym4uNs
jxgacYKm/Dl9gz/Gt0SlPHvykZI1VLRnmbWeL7xKEPY/1ZuGF8k7TYyotPUm0NoF
lQLwHWSIcSaouo1WX5y25AHMZ/6O9MJeNK+Jh3IEaECaXbgrjC+p62Hdhb1m6Im+
5ncjVFXwo/durNkM3h2tMLsT3LhoTaquMDDOqnq61pGYXcEY94U+Lc/i5ZT6worA
V27O3ZwU0PyU5RIgpJuf5efrbx4OLrJKi7bKZS8q24P4auZUXf6iDReAL9rUYrRW
ingXGVx53EMaX6WEOvqBfjmTI9fqPRvFeA5tTrI3ifvhnKJVDdEoX4iCJCtwpfGh
Grd5J1YJiLS8yg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:24:45 2025 by rpki-client