Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: +Z/DvYOXDZdkfuUpUC4Q3fA/b3MJm29Yi3F95e0vglk=
Subject key identifier: 37:72:6B:62:B7:52:A7:D3:81:BC:EB:4C:F9:1F:17:81:1B:9D:42:67
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 01984AE579317505DE119A0612DE04791B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: YcTWHuSRqWDnZsqmaWbOFrVeWpeYhoRfLEqrSGaHX8E=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:79:31:75:05:de:11:9a:06:12:de:04:79:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=37726b62b752a7d381bceb4cf91f17811b9d4267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:22:eb:0a:bd:45:c5:e6:7c:86:09:5d:38:
d8:a8:e8:c0:95:10:fe:4e:34:f5:c3:d5:a8:0f:a1:
b6:78:8c:66:40:2a:84:13:cf:71:c6:98:0a:0a:89:
d8:19:b0:8d:fd:b2:21:b7:31:67:cf:04:af:57:5a:
8e:a5:bc:f2:2b:63:4e:ab:fe:24:55:3e:88:33:53:
10:dd:de:f7:9a:d8:ad:47:0e:54:42:37:a8:4a:b2:
30:b7:b4:a4:d3:e8:bb:6a:45:33:81:da:ce:09:5f:
5d:f5:b5:90:37:d0:82:2d:30:d5:eb:40:d9:1a:9e:
96:54:ef:1e:7b:47:cb:c8:be:9f:7e:7a:b3:f5:58:
2c:40:f2:6a:fb:0b:1d:85:53:3b:84:9e:4b:1d:4c:
11:38:55:a4:df:c9:af:05:b1:ab:a5:db:fa:65:51:
a7:cc:e8:03:d9:9f:4a:a5:14:de:4b:99:c7:c8:03:
69:3e:14:94:33:ab:ec:ae:1f:f1:9a:f4:35:dc:04:
c7:6e:f3:3d:31:d0:82:ae:4d:4e:c0:8d:25:33:b2:
71:53:a0:15:ea:7f:88:3e:58:b2:17:5d:b1:84:c8:
eb:16:9a:02:23:6e:4b:f8:da:ee:6b:d0:21:a9:59:
a6:34:48:0c:7a:6c:7d:48:5e:73:d8:81:aa:54:5a:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:6B:62:B7:52:A7:D3:81:BC:EB:4C:F9:1F:17:81:1B:9D:42:67
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6a:e2:76:4a:5c:c2:59:63:8a:bb:ad:57:63:09:21:81:64:
cf:ae:18:4b:6a:7e:b7:d1:51:5e:03:00:16:f9:07:75:c6:64:
2c:be:59:d6:55:d0:1e:88:80:03:5e:ea:f2:32:db:30:4d:1a:
6b:8a:e9:c4:e1:b5:a9:32:65:46:52:61:85:af:4f:e3:90:a5:
db:d5:4b:70:85:c4:4e:3b:ed:aa:9d:e6:1b:d5:3b:a3:6c:ef:
b7:fb:9d:2e:74:63:cb:c0:b5:3c:c3:1c:32:b2:a5:a7:fb:b7:
5c:75:7f:90:4a:e8:bb:c9:1f:d7:b4:59:db:fb:32:48:6c:cc:
14:ec:01:94:f0:ed:0c:d1:cf:a4:48:3d:a9:87:6f:2c:aa:cb:
7d:c4:36:04:85:43:df:55:86:c6:d2:d1:8b:3a:af:55:f1:d4:
d9:3c:d6:4a:16:50:f8:a1:d3:6e:ae:e7:b7:97:44:98:8e:04:
f7:07:7c:84:71:0b:ce:e5:00:48:0a:a1:b4:4d:1f:d7:76:df:
b7:03:38:ec:ce:72:31:0a:38:47:ad:dc:4c:25:81:54:32:f3:
b2:da:6e:5f:39:cf:ba:a1:2e:8f:5f:7b:b6:c6:18:58:56:32:
60:89:c0:aa:6b:d7:2c:17:71:f6:b7:d9:67:12:c0:26:08:e4:
bf:9e:63:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5XkxdQXeEZoGEt4EeRs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk
ZTUzYWYwHhcNMjUwNzI3MDgwMDA5WhcNMjUwNzI4MDgwMDA5WjAzMTEwLwYDVQQD
EygzNzcyNmI2MmI3NTJhN2QzODFiY2ViNGNmOTFmMTc4MTFiOWQ0MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Ei6wq9RcXmfIYJXTjYqOjAlRD+
TjT1w9WoD6G2eIxmQCqEE89xxpgKConYGbCN/bIhtzFnzwSvV1qOpbzyK2NOq/4k
VT6IM1MQ3d73mtitRw5UQjeoSrIwt7Sk0+i7akUzgdrOCV9d9bWQN9CCLTDV60DZ
Gp6WVO8ee0fLyL6ffnqz9VgsQPJq+wsdhVM7hJ5LHUwROFWk38mvBbGrpdv6ZVGn
zOgD2Z9KpRTeS5nHyANpPhSUM6vsrh/xmvQ13ATHbvM9MdCCrk1OwI0lM7JxU6AV
6n+IPliyF12xhMjrFpoCI25L+Nrua9AhqVmmNEgMemx9SF5z2IGqVFoD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdya2K3UqfTgbzrTPkfF4EbnUJnMB8GA1UdIwQY
MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt
MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5
LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGridkpc
wlljirutV2MJIYFkz64YS2p+t9FRXgMAFvkHdcZkLL5Z1lXQHoiAA17q8jLbME0a
a4rpxOG1qTJlRlJhha9P45Cl29VLcIXETjvtqp3mG9U7o2zvt/udLnRjy8C1PMMc
MrKlp/u3XHV/kErou8kf17RZ2/sySGzMFOwBlPDtDNHPpEg9qYdvLKrLfcQ2BIVD
31WGxtLRizqvVfHU2TzWShZQ+KHTbq7nt5dEmI4E9wd8hHELzuUASAqhtE0f13bf
twM47M5yMQo4R63cTCWBVDLzstpuXznPuqEuj197tsYYWFYyYInAqmvXLBdx9rfZ
ZxLAJgjkv55jLA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:04:35 2025 by rpki-client