Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: XyHlfVKqkxzSsA/fp/CQPH17EsdrM0mzmQX6wKpE3E4=
Subject key identifier: CA:78:21:FC:4B:B7:56:AF:C2:24:66:4B:31:E7:58:CA:CE:89:2E:C6
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 01985AFDA677E0C9892C32717137C3E27F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0BBB
Signing time: Wed 30 Jul 2025 11:00:29 +0000
Manifest this update: Wed 30 Jul 2025 11:00:29 +0000
Manifest next update: Thu 31 Jul 2025 11:00:29 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: npFCvuGeljtACBcsRRdrkUjCWjS7ua8tzkDXMJOAM5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:fd:a6:77:e0:c9:89:2c:32:71:71:37:c3:e2:7f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Jul 30 11:00:29 2025 GMT
Not After : Jul 31 11:00:29 2025 GMT
Subject: CN=ca7821fc4bb756afc224664b31e758cace892ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b7:f8:5d:70:f3:38:dd:2f:b7:8f:c2:ac:cf:
50:f1:5c:7f:4d:5e:69:e5:8c:86:fe:9b:e2:24:f5:
52:94:f6:a3:4d:c8:78:7a:6f:42:1a:5d:4c:6e:0a:
00:d1:05:e6:92:91:47:8b:e4:e4:ba:9f:da:07:b5:
2f:7c:e2:8f:28:fb:bf:0b:f6:61:1a:db:2a:09:a7:
3f:2e:77:52:d6:9c:d8:34:91:c9:b7:73:13:f5:f6:
99:9f:d5:bf:78:b9:83:8e:20:2e:8f:e7:33:3c:33:
8c:a8:dd:84:1a:31:e1:98:4f:e2:67:a7:8c:54:08:
e8:ad:16:39:8f:d6:f1:c5:1c:90:32:f6:38:b2:44:
1d:d9:f6:72:c5:4a:41:90:ca:17:2c:26:b9:b8:93:
9e:32:3d:92:92:4b:ac:8d:4d:37:f2:df:29:44:0f:
ec:c9:bf:a0:4c:d6:38:52:37:0b:f9:0a:a8:ea:3a:
91:8e:fb:c6:f2:44:c8:50:45:fb:03:f2:ea:ca:e1:
a6:7d:42:40:bc:c2:25:a8:db:3a:96:2c:54:b7:eb:
88:42:55:bd:77:f5:fc:dc:2c:77:77:5b:2e:47:b7:
21:40:be:54:51:d2:1f:dd:1e:e3:05:33:16:b2:f1:
58:92:72:25:30:cf:08:ae:e3:71:57:93:13:5b:ba:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:21:FC:4B:B7:56:AF:C2:24:66:4B:31:E7:58:CA:CE:89:2E:C6
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:03:90:5a:d1:23:23:ac:f1:e7:3f:eb:fe:23:51:de:f2:
fa:fe:74:16:63:c3:ec:c6:1e:95:ef:cd:f6:04:f1:73:6b:fe:
f5:4e:65:54:9c:22:7a:12:d2:84:31:3f:92:75:8c:46:47:31:
88:58:db:eb:ff:af:6c:57:75:27:36:39:01:cb:63:16:ff:54:
10:d4:1f:a7:57:0e:1f:93:fa:cc:e6:cd:1c:af:0d:ce:e7:3f:
f3:91:1d:d3:31:81:8c:31:cf:2a:18:bd:d9:37:7f:ee:72:15:
2c:23:62:1a:77:03:58:3f:fd:ae:4f:b4:a8:b7:51:e4:23:c6:
9d:16:c7:9c:0c:3f:92:60:d9:be:0f:69:6f:69:fd:ef:1a:57:
a3:25:81:10:21:98:91:73:de:6e:4e:fa:24:2f:17:46:90:a4:
b3:0d:79:02:66:fc:6a:0e:8d:06:41:7b:c4:59:3f:9d:50:f7:
20:ac:bf:b3:6c:df:ee:6f:7b:59:a8:49:3b:5b:16:7a:bd:a2:
92:40:4a:8b:bd:38:02:03:f7:1d:76:f8:1a:30:49:11:d7:ad:
20:a8:97:75:18:a4:f9:67:45:76:f6:43:50:4e:73:d2:4a:5e:
7b:42:6d:6b:2d:7a:b8:d2:dd:6f:9f:3c:63:ad:a1:30:8e:2b:
40:2c:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 12:43:43 2025 by rpki-client