Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: SV0Fj1L/g8T+HqIlYSIJpPPEC1PtE+3HNBgxW48lxaw=
Subject key identifier: 74:FF:CB:FC:F3:76:70:6F:35:74:1B:9D:0B:58:AC:2D:F6:C1:F3:DB
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019A7225B04A5BCE6170A2200AC58D305EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 03F0
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: pDVJ6oEmydpE9pKY+e97ADKKZWnsyIh/3bClU08h6Ic=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b0:4a:5b:ce:61:70:a2:20:0a:c5:8d:30:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=74ffcbfcf376706f35741b9d0b58ac2df6c1f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:f4:59:9f:1a:73:48:66:4c:aa:18:f0:fa:
b1:28:ba:19:ae:af:2a:5f:cf:f6:fe:d5:bc:7a:bb:
f5:d7:da:3c:61:df:17:e6:18:d8:8e:a4:24:f5:59:
37:cc:83:24:71:cd:c4:62:29:52:57:24:25:bd:38:
cb:81:6a:6c:bb:ec:72:aa:42:d9:bd:a5:41:0c:a1:
a3:61:5c:be:39:75:68:a9:2f:ba:e2:4c:c3:ba:3e:
c9:5c:0f:9b:a8:3a:fc:04:6a:00:18:a3:21:3c:b0:
21:c7:20:c1:ab:88:7a:5d:d3:7c:3a:50:f6:d1:c8:
2a:c6:3a:e2:c1:8b:74:d5:a9:08:84:4f:55:95:83:
45:e2:b1:e1:40:8c:76:bc:88:37:67:fb:92:b3:30:
86:b6:50:13:ec:75:8e:16:5a:b3:ba:61:90:f6:fe:
94:fb:85:ac:ac:e8:9b:18:a3:ab:f8:2e:95:77:dd:
d9:d4:dc:cd:2e:bd:56:72:d6:7f:02:4c:4a:97:38:
44:83:11:72:2a:0c:6c:b2:60:3d:ba:c4:fd:0a:01:
52:d0:70:a9:5e:45:3d:42:14:d3:bc:d8:30:53:97:
b5:16:de:de:1a:e9:0b:4e:b5:b1:ac:58:ea:ef:08:
7e:c5:a8:b6:2a:d8:2e:9a:27:9a:07:56:71:ff:23:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:CB:FC:F3:76:70:6F:35:74:1B:9D:0B:58:AC:2D:F6:C1:F3:DB
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:44:9f:12:46:83:9b:1d:e0:d0:52:45:cc:74:a2:26:cb:42:
ae:8a:b6:26:02:13:7f:6d:9f:55:8d:2a:11:d7:60:2d:3c:e1:
2b:5f:5d:37:c4:8f:1e:14:59:ba:52:31:94:74:a2:1e:17:7b:
ff:9b:e1:9a:ea:db:3f:cd:71:fe:45:6c:89:07:35:0b:e0:68:
80:19:97:ed:42:bb:ad:b9:ce:77:70:e4:78:5f:8d:2c:fd:a0:
3a:33:2b:93:ef:22:10:07:f2:d9:1a:e1:c9:51:ca:08:0c:4a:
9c:b4:5f:4f:43:4b:1d:9e:1e:a4:c9:5a:68:47:3e:f1:5d:ed:
1a:a3:fe:b0:a8:7c:5c:4d:8e:5d:2f:17:86:d2:e5:3a:03:a7:
97:69:7b:31:1d:b9:68:62:f4:35:f1:fe:d8:3a:34:75:be:5e:
cd:62:af:4b:38:5e:22:85:ec:6b:18:19:dd:69:d7:c2:09:1b:
e7:1d:d0:33:a7:e9:14:31:e2:1d:07:b3:74:dc:0f:87:00:08:
47:47:b0:ea:8c:78:96:7c:a5:83:a4:a7:eb:bc:9a:40:42:2c:
f5:a1:f8:b5:77:da:74:d6:21:40:96:17:35:47:60:6f:2c:57:
5d:fc:88:3c:1a:b4:d4:3c:9b:7d:72:90:28:7a:c6:53:20:e8:
74:3b:d4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbBKW85hcKIgCsWNMF66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTYwN2E4NjhkYWY0ODQ2MjQ1ZjNjOGJiZjllYmU3Njk4
MjlhZDkwHhcNMjUxMTExMDkwMTAzWhcNMjUxMTEyMDkwMTAzWjAzMTEwLwYDVQQD
Eyg3NGZmY2JmY2YzNzY3MDZmMzU3NDFiOWQwYjU4YWMyZGY2YzFmM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/j0WZ8ac0hmTKoY8PqxKLoZrq8q
X8/2/tW8erv119o8Yd8X5hjYjqQk9Vk3zIMkcc3EYilSVyQlvTjLgWpsu+xyqkLZ
vaVBDKGjYVy+OXVoqS+64kzDuj7JXA+bqDr8BGoAGKMhPLAhxyDBq4h6XdN8OlD2
0cgqxjriwYt01akIhE9VlYNF4rHhQIx2vIg3Z/uSszCGtlAT7HWOFlqzumGQ9v6U
+4WsrOibGKOr+C6Vd93Z1NzNLr1WctZ/AkxKlzhEgxFyKgxssmA9usT9CgFS0HCp
XkU9QhTTvNgwU5e1Ft7eGukLTrWxrFjq7wh+xai2KtgumieaB1Zx/yPJUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT/y/zzdnBvNXQbnQtYrC32wfPbMB8GA1UdIwQY
MBaAFAUWB6ho2vSEYkXzyLv56+dpgprZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEt
NzJjZmRhYTk1OWEyLzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEtNzJjZmRhYTk1OWEy
LzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkSfEkaD
mx3g0FJFzHSiJstCroq2JgITf22fVY0qEddgLTzhK19dN8SPHhRZulIxlHSiHhd7
/5vhmurbP81x/kVsiQc1C+BogBmX7UK7rbnOd3DkeF+NLP2gOjMrk+8iEAfy2Rrh
yVHKCAxKnLRfT0NLHZ4epMlaaEc+8V3tGqP+sKh8XE2OXS8XhtLlOgOnl2l7MR25
aGL0NfH+2Do0db5ezWKvSzheIoXsaxgZ3WnXwgkb5x3QM6fpFDHiHQezdNwPhwAI
R0ew6ox4lnylg6Sn67yaQEIs9aH4tXfadNYhQJYXNUdgbyxXXfyIPBq01DybfXKQ
KHrGUyDodDvUTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:38 2025 by rpki-client