Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
File: brITtbhEV2qLSPxcLqrVqMzdHMA.mft (raw, json)
Hash identifier: oF16DDTqhvpJRtHHC8QaO//9a7S1slAOimesClUKFpI=
Subject key identifier: D4:57:DE:77:91:7E:B1:46:2F:0F:20:2E:8E:C2:09:61:25:70:94:EA
Authority key identifier: 6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0
Certificate issuer: /CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0
Certificate serial: 019A7225E52BD786A9EF8E4237EA8DF7CB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
Manifest number: 5F
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: TtIN8gUqYh6ZpYQZIr7SZYwme3o.roa (hash: GvEVbOZ9uoZNCPu1mzgcIO+hcwTQFhCrycmOM34smYg=)
2: brITtbhEV2qLSPxcLqrVqMzdHMA.crl (hash: J4VZxjQHaYzIop3KDJ8SD57pctkOe5nw9xy9tf4Q8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e5:2b:d7:86:a9:ef:8e:42:37:ea:8d:f7:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=d457de77917eb1462f0f202e8ec20961257094ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:32:33:9d:4c:ec:54:df:31:6c:61:bb:c2:
46:b8:f9:af:88:22:69:d0:fe:6c:72:ec:22:ca:eb:
0a:9b:6c:64:cc:3a:c4:b3:35:c1:13:05:34:b1:21:
d5:a2:09:f9:6f:af:b0:81:21:4c:95:01:8c:bc:93:
6c:10:74:ba:9f:2e:c1:d5:af:c5:72:26:33:2c:e6:
f7:ef:03:e8:0f:a2:da:b9:aa:b3:c0:a5:e4:d7:67:
83:a3:c9:a1:be:25:b5:89:f0:a9:00:e3:73:f1:71:
26:e8:7d:25:fe:ef:af:f1:9b:53:eb:f6:38:33:6d:
23:0e:36:a6:60:e9:0f:5b:3e:ba:12:df:e8:1b:bc:
4f:0b:b5:3a:50:b3:e8:5b:01:48:11:8e:e5:8e:fd:
75:20:95:33:65:5a:46:a1:7d:01:13:ef:24:ff:b8:
7d:db:60:bc:30:78:2a:1f:97:f1:ce:e5:35:c1:91:
a7:71:ca:23:fb:82:bf:a7:95:2e:eb:b4:08:a4:0a:
e9:03:d8:88:36:12:3e:8f:cc:51:73:97:86:7a:84:
89:d8:3c:0c:0f:53:fa:84:61:be:a3:0d:b6:29:2a:
cc:3f:9d:5b:84:99:2f:d2:5d:bb:c6:c5:88:2e:2d:
85:51:6d:0a:f9:61:e6:52:f9:17:40:98:54:ff:e9:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:DE:77:91:7E:B1:46:2F:0F:20:2E:8E:C2:09:61:25:70:94:EA
X509v3 Authority Key Identifier:
keyid:6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:47:10:d9:ff:f5:99:46:b6:0b:47:87:48:2b:35:f3:f5:97:
f9:aa:6e:98:d2:83:a8:30:c4:25:8b:be:1a:27:04:b4:d7:e8:
4b:78:a8:ab:32:a9:5e:ab:06:ed:6b:79:a5:ae:c0:bc:c3:ee:
03:f8:18:be:db:77:6d:06:83:ee:f5:a3:a9:e8:4f:74:3b:12:
e8:96:53:2d:54:b7:fe:36:e4:ef:60:90:65:3d:56:12:56:c4:
46:b8:2c:ea:75:a2:8f:d9:3b:f9:b1:0e:37:4f:23:b0:6c:f9:
4f:03:5e:d3:a2:fc:07:eb:a4:5c:5e:37:4b:64:9d:11:13:c4:
ba:6f:a9:6e:91:58:90:48:e5:25:d0:63:bb:00:5a:f2:8b:02:
64:09:89:e2:dd:e5:77:e2:b8:8e:07:c9:89:1a:21:b6:8b:00:
ab:ac:58:22:8c:f3:1a:af:83:83:27:93:7c:4e:02:57:e0:08:
10:70:a3:c5:62:9f:7f:2a:da:84:4a:03:b5:75:0c:e8:62:5d:
5a:0c:30:03:b7:6a:cc:4b:85:4b:37:c2:13:f8:11:f1:71:90:
a8:f8:ec:7e:5d:98:22:08:17:43:61:e6:91:99:50:6f:0f:4f:
b0:22:98:cb:87:84:ff:70:03:bc:07:a4:9e:25:04:f8:90:a8:
9e:2d:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:11 2025 by rpki-client