Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: +e9fFhod3QyMz9lQI+BbkEqmHs0gL5YhyElVv+ulMIs=
Subject key identifier: 98:E4:C1:46:2D:A0:3A:3A:D4:DF:0C:0D:4B:14:9B:4A:41:FC:6E:EC
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0199C3E8E256F4A45254DC8F80914188AFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 04EB
Signing time: Wed 08 Oct 2025 13:00:43 +0000
Manifest this update: Wed 08 Oct 2025 13:00:43 +0000
Manifest next update: Thu 09 Oct 2025 13:00:43 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: fQydQS6SeJ+Hb5GrpzSIPeMVwRvq+TbpR9dbdrUWcgA=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e8:e2:56:f4:a4:52:54:dc:8f:80:91:41:88:af:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Oct 8 13:00:43 2025 GMT
Not After : Oct 9 13:00:43 2025 GMT
Subject: CN=98e4c1462da03a3ad4df0c0d4b149b4a41fc6eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:e3:99:a4:df:1a:4f:8a:f7:65:48:91:7a:
34:3a:88:bf:62:7e:06:95:69:3c:55:98:b5:15:8f:
8e:7e:0e:92:6d:34:77:54:00:de:c4:d7:fb:ab:b6:
33:56:d9:fe:4b:5f:29:84:05:e7:e0:c3:b6:6e:38:
eb:9f:df:c0:47:c0:37:4d:a6:aa:b5:f3:15:a5:9e:
62:a6:0c:7e:b9:cc:52:d6:a1:82:51:07:50:61:3e:
2e:f6:4c:ba:a3:7d:d2:69:be:1d:38:34:a1:3a:79:
8a:18:63:55:1b:a0:63:5d:fd:2d:b7:8e:30:0f:0f:
e3:7a:f4:d6:3b:fa:98:65:ac:69:5c:a1:8f:59:9f:
6c:a8:a2:bd:48:ef:0c:df:95:64:df:42:ef:a1:26:
ba:a4:8c:70:a2:27:f0:2f:65:1c:61:bb:b1:85:8f:
c8:77:d1:3a:d4:76:61:29:85:ca:7a:5f:7b:e2:a2:
a3:04:72:51:e8:91:e5:64:a4:f8:5f:28:fb:85:e5:
af:9a:40:fa:3e:67:27:3c:b4:c5:bb:c0:89:7b:d6:
3b:2d:c6:d8:7f:b6:21:19:e4:98:4a:a9:3e:dc:4d:
67:a0:1f:20:98:cb:86:83:67:99:3f:40:49:63:79:
64:d8:0f:7b:5f:62:4c:73:71:d5:15:de:2a:86:55:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:C1:46:2D:A0:3A:3A:D4:DF:0C:0D:4B:14:9B:4A:41:FC:6E:EC
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:20:ba:40:30:4d:3c:a5:c7:1b:3d:2b:11:1a:46:70:65:87:
e0:e0:43:e0:83:33:6d:e3:40:7a:0c:d3:05:06:74:1b:05:5f:
ae:4f:17:00:02:09:2e:4c:8a:b9:87:b2:4e:4c:c5:c7:56:59:
7c:57:a4:d9:0d:e0:f4:90:e5:e6:f1:f9:1d:2b:3b:67:3e:d5:
0f:03:95:a4:52:ef:6f:be:e9:72:56:64:dd:e0:5e:05:3e:ca:
d1:8d:de:bb:67:3d:e2:95:8a:9c:80:85:13:51:28:46:81:50:
3c:70:72:8a:72:b7:1f:ec:a7:75:58:bd:f0:d8:8f:52:e4:ad:
de:8f:b2:43:c8:06:1f:3f:52:87:be:72:94:8d:eb:27:e3:da:
77:de:d3:03:94:51:95:0e:66:ae:9c:ca:37:19:9b:1d:61:59:
ec:0d:be:fe:30:ea:d9:be:a9:1a:14:76:4a:22:66:e5:a4:96:
4e:50:9e:3b:51:7b:73:1c:c2:de:3d:c5:fc:cf:b8:b2:ea:43:
6c:91:59:cd:90:f8:5a:bc:c6:b6:a9:bb:ed:36:6e:95:c6:63:
60:54:75:a0:01:0e:ac:e8:04:7c:ee:54:6b:62:3b:25:14:26:
20:c6:de:81:d7:ca:c0:7b:a0:47:04:10:6a:dd:86:8e:1e:6b:
a9:f3:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:02 2025 by rpki-client