Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: lhTQ7ptVXpk7eUpAcJ5KMOw5A2i4rScH3SG2SSaQxCY=
Subject key identifier: 9D:F2:B6:86:02:C3:68:9C:79:0B:2F:45:2B:03:B3:A9:10:58:47:A8
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 0198D698242D7DD32902E185970F9DCE00D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0BFB
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: Vx46FTSNbUBmEeh4ZUSWbApTwHpsNE58m2sdbig1b8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:24:2d:7d:d3:29:02:e1:85:97:0f:9d:ce:00:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=9df2b68602c3689c790b2f452b03b3a9105847a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:91:95:3b:b1:e8:37:17:6f:67:ef:6a:93:
59:93:10:99:73:d4:be:26:a4:1b:56:cc:be:1b:13:
dc:22:95:2c:43:9a:4f:b5:65:fe:1a:2e:56:51:ad:
0d:34:9f:1b:64:5d:08:e4:0d:2e:71:96:cc:67:b6:
18:f2:c7:55:b0:d2:59:fb:91:ba:86:9c:17:85:e8:
8c:e6:cd:4e:d2:57:8b:4e:c5:42:84:d5:e3:a0:ad:
77:67:89:3a:76:59:b2:20:5e:23:55:9b:e1:1e:52:
0c:4b:8a:ef:ae:4a:7d:4a:87:92:c2:3a:97:72:49:
6e:b5:cb:d4:e3:e9:ea:11:bc:f8:9a:2b:4a:f4:c6:
1f:cf:b8:b6:ca:2e:0a:af:b4:19:7d:a9:a9:e6:64:
3c:9e:40:ad:97:b8:cf:e1:f2:a2:d0:aa:5f:84:be:
5c:52:b6:24:cb:db:82:e5:c4:f0:d4:57:24:0a:ab:
81:22:27:a9:fe:74:a7:26:52:e9:c6:4d:bb:bd:c1:
16:51:d8:6d:91:95:4c:6d:6d:8e:92:5e:5c:96:4d:
68:8e:31:a6:6e:98:3b:91:70:56:69:8a:47:59:25:
57:5b:56:06:f9:5f:0f:5d:75:92:b1:df:95:8d:c3:
76:fb:98:06:51:00:aa:e5:91:a8:62:b1:b9:bf:d3:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:B6:86:02:C3:68:9C:79:0B:2F:45:2B:03:B3:A9:10:58:47:A8
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:2a:e1:39:59:75:92:c4:6d:46:d7:92:4b:4d:6d:bd:41:
5f:57:16:4e:9e:c7:2c:15:f7:0c:b4:3e:86:32:2e:78:32:05:
2d:46:5a:9d:75:f8:35:88:52:05:a6:77:4b:97:03:d4:2e:04:
e3:87:da:a8:53:a5:a9:10:bb:13:6b:c2:01:e7:1e:9b:bf:55:
e0:44:4d:51:5f:66:ec:54:82:e6:1a:37:68:9f:2d:b4:4e:25:
bd:c8:ed:e8:c5:34:98:56:99:42:93:3a:1b:4d:11:45:7d:69:
24:3e:15:70:47:2e:df:6e:86:e0:b2:db:09:93:cc:c7:cd:20:
f6:c3:ed:10:2b:b2:bf:bd:1f:c6:af:95:68:0c:7c:22:58:21:
e9:c7:da:19:1e:ba:24:08:74:42:3e:48:81:98:95:e7:03:8e:
4c:08:3e:ec:14:b5:77:21:72:b9:91:e6:d9:62:ff:05:2e:c3:
16:e0:60:58:59:56:eb:6b:2d:db:25:89:2d:9c:ca:36:27:3a:
7a:c3:6c:68:2d:3d:85:ac:b5:70:f6:2f:d5:5e:3c:a8:3d:bc:
19:07:96:20:ec:de:61:68:61:df:84:f2:27:4f:c6:8c:25:a8:
5d:e6:94:82:e5:a7:9a:9a:e2:91:9d:70:37:58:67:d5:b8:60:
14:51:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:21 2025 by rpki-client