Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: i+F7u/ob+QuQgmsk13VhcDvFrvcbJi80zqYn4idJC8M=
Subject key identifier: 79:82:FB:58:B9:4A:F5:CE:1B:B6:43:9C:8C:2C:46:77:C1:D9:78:9E
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019A73018F26AA1DDCC9E5AE99C042BFAEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 13:01:13 +0000
Manifest this update: Tue 11 Nov 2025 13:01:13 +0000
Manifest next update: Wed 12 Nov 2025 13:01:13 +0000
Files and hashes: 1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: pCp9XYWkUBxoYmOaAlaMWyVEx4bmRh+MkXoAdM1KqUc=)
2: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (hash: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:8f:26:aa:1d:dc:c9:e5:ae:99:c0:42:bf:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Nov 11 13:01:13 2025 GMT
Not After : Nov 12 13:01:13 2025 GMT
Subject: CN=7982fb58b94af5ce1bb6439c8c2c4677c1d9789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:fd:fc:bc:1e:26:8d:fc:10:87:8d:c3:5c:
22:f7:e7:ee:f6:c0:6f:d4:20:25:f8:34:7e:9c:90:
9a:de:10:ac:f7:cd:8f:24:27:46:ae:dc:74:5e:32:
fb:b2:a8:e1:b8:8f:1b:bb:85:c2:4b:03:88:82:74:
8e:b1:76:d9:93:1b:39:6f:82:99:3f:72:fb:3d:16:
4c:e6:99:e5:5c:eb:a9:2c:ae:5a:99:d7:c4:e2:ef:
9d:44:0c:ee:00:ae:0b:51:b6:ed:41:27:a5:a2:fd:
c2:ed:31:3e:2d:c1:c4:89:d5:f8:18:24:60:a7:87:
6f:b8:75:c5:2a:45:33:61:5f:8d:62:15:c0:8c:1a:
1e:c9:db:86:d1:dd:81:b3:6c:db:9c:c2:f4:83:cb:
db:fe:ae:ca:6f:05:1c:10:26:e6:b2:fe:f9:7e:57:
61:51:15:5f:c0:33:38:ad:a9:8b:e8:15:ae:8e:d6:
21:84:af:10:76:cb:7b:fb:ed:45:98:4e:eb:a3:91:
36:4b:62:ba:5c:ed:75:22:5f:82:3f:4d:38:33:7b:
e0:02:61:db:03:cf:e0:70:e1:19:1b:07:60:e3:f9:
83:81:99:f5:8a:98:4e:e6:99:05:a0:de:47:2c:4d:
c6:35:da:9a:21:20:29:08:83:2a:e7:bd:16:2f:d1:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:FB:58:B9:4A:F5:CE:1B:B6:43:9C:8C:2C:46:77:C1:D9:78:9E
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:12:0a:c1:39:64:53:0e:78:d5:39:a4:5d:48:75:d5:ba:22:
ad:6d:f4:88:12:f4:a8:55:1c:a4:dc:7f:13:e8:e3:29:9d:0e:
b7:e5:51:f0:f4:94:96:89:1b:43:e8:94:0e:aa:a9:88:85:fd:
02:5d:69:54:29:57:53:aa:2d:f6:bf:aa:af:01:1d:0e:cb:a6:
32:d6:74:ca:fc:58:07:15:f3:41:98:91:86:96:5d:ab:d8:e3:
7e:a6:f0:44:f8:64:09:ac:34:a2:ee:cd:4a:66:e5:42:c4:5d:
5f:26:34:f5:ba:45:7b:32:ba:45:31:fc:d1:be:54:e7:f2:b6:
93:38:21:8b:79:50:16:7e:b7:31:27:21:f4:89:a9:1e:ee:99:
e9:99:38:04:ed:93:92:d6:96:55:37:76:f0:8b:48:15:3e:cc:
c2:4d:78:82:1c:75:3c:b6:19:1f:26:8e:33:c6:3b:93:b0:4f:
a0:18:e5:01:81:d5:0b:f9:53:5e:6d:e3:db:99:41:16:2b:26:
b9:5f:d7:e2:fa:00:94:0e:0e:24:4c:14:47:9f:63:96:32:a8:
57:a7:88:64:eb:68:ed:5a:11:0d:e6:95:d5:66:4a:2b:8e:f0:
49:3d:73:b6:63:43:b9:b1:f8:68:52:43:87:58:00:a3:9f:92:
4f:96:97:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:01 2025 by rpki-client