Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: cNIioA+IgPAFQ+A3hwJ2QEVJKIwaC3vFyoFxTGWfHYc=
Subject key identifier: 98:01:ED:DB:EF:5F:3A:B2:63:CA:42:4A:9B:C1:9C:17:6A:38:E2:3E
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0198C6EE48CE4E75804624ACB325D8CD46FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 0468
Signing time: Wed 20 Aug 2025 10:02:41 +0000
Manifest this update: Wed 20 Aug 2025 10:02:41 +0000
Manifest next update: Thu 21 Aug 2025 10:02:41 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: V1RkgpjY8bA1LQLmh269FJ1H+mY2CTyEzopxHX/VFP8=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:48:ce:4e:75:80:46:24:ac:b3:25:d8:cd:46:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Aug 20 10:02:41 2025 GMT
Not After : Aug 21 10:02:41 2025 GMT
Subject: CN=9801eddbef5f3ab263ca424a9bc19c176a38e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:0e:fe:b2:00:b0:0a:e4:0d:b2:e8:c6:2a:
5a:37:c5:68:83:b1:88:db:ae:99:ac:a1:65:37:0a:
02:ae:7a:dd:eb:74:a9:62:fc:1a:d3:6c:27:aa:d0:
1f:5b:c6:06:12:f4:e0:7b:83:61:ec:3c:4f:77:87:
f9:c2:5c:b7:8a:0c:20:04:b5:be:a2:79:f8:79:10:
f1:26:bb:74:3a:4b:22:ba:71:29:59:27:a9:c0:d2:
e5:91:62:51:76:b6:69:ca:48:9e:e1:d4:ac:8f:4e:
cd:7c:55:78:61:4f:ea:20:64:07:cb:6c:a5:55:cc:
a5:c5:c9:a5:9e:1f:51:c1:f2:98:cc:b5:d9:fd:f9:
72:61:d9:ac:9f:b0:b4:6f:90:ec:bc:da:26:4b:3c:
a8:5b:10:b2:50:9e:23:06:de:a5:39:83:d9:59:15:
e3:7e:06:dd:d8:2d:ad:e3:60:79:61:55:ba:1f:b3:
1f:e2:b0:1a:86:b4:5c:7d:ba:b8:04:e0:f4:cb:60:
3a:f5:61:02:4e:d6:2b:ca:b9:f3:e7:aa:56:40:14:
41:92:09:ee:84:aa:d2:c8:9a:4a:95:18:ea:3d:9f:
25:73:18:24:73:33:84:af:5a:0e:f5:dd:77:7a:e9:
fc:0d:17:80:51:6f:7b:e8:1a:78:f3:2f:c5:b1:58:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:ED:DB:EF:5F:3A:B2:63:CA:42:4A:9B:C1:9C:17:6A:38:E2:3E
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3f:a2:d6:41:4f:17:25:74:c4:f2:bc:9e:c8:a6:f0:20:e0:
80:c3:ad:e8:0f:25:1f:10:69:27:b4:ea:75:8d:ec:bd:8c:f4:
b4:b3:fd:92:73:68:d3:ca:9d:95:e2:28:38:ad:ab:e2:32:fb:
f6:9a:a8:9b:17:29:cc:86:1e:df:04:d8:26:6b:52:88:06:8d:
03:93:cc:b3:dd:1a:8b:f4:80:ae:17:3b:ea:0a:d2:7d:69:6a:
46:6d:d1:6a:07:9c:8d:2e:a1:34:16:c5:ab:8d:79:61:7c:59:
83:3d:09:30:fb:0f:76:ff:ce:27:e7:e6:31:59:43:09:32:ad:
46:83:7f:46:14:38:d6:e8:7c:34:e2:5c:f4:92:16:f3:f0:0c:
45:51:14:1e:e0:07:f0:2f:3d:e8:5a:38:1c:d1:41:f6:88:75:
de:e2:80:88:a2:4c:77:2f:95:de:19:65:ff:d0:82:b1:6b:3c:
68:0b:86:b7:a6:57:a5:1d:23:de:3e:86:e7:48:a0:2a:0e:2e:
b3:04:42:d9:97:88:4f:ea:18:27:58:6a:2c:06:eb:8e:9f:ce:
f4:83:80:8d:b8:33:59:dc:44:ad:c7:a9:d8:bf:75:7d:91:f4:
06:d4:98:c0:fd:69:8b:fa:e4:37:b6:3b:8d:16:89:0d:7a:88:
88:dd:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:29:12 2025 by rpki-client