Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: JMDYCP4gyNIQ89CAI1RQnBiSZzWL9tegUvVRx8w2k48=
Subject key identifier: C6:8D:F2:E2:49:9C:8C:7F:AD:16:E7:B5:84:F5:3D:AB:3F:98:B8:55
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019A7337F83D9C1E1C9475334AE885A19A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:00:39 +0000
Manifest this update: Tue 11 Nov 2025 14:00:39 +0000
Manifest next update: Wed 12 Nov 2025 14:00:39 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: LtY3+1RlnqD8be7+7oYe1aExZAUUcib2znWwnGMdmqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:f8:3d:9c:1e:1c:94:75:33:4a:e8:85:a1:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Nov 11 14:00:39 2025 GMT
Not After : Nov 12 14:00:39 2025 GMT
Subject: CN=c68df2e2499c8c7fad16e7b584f53dab3f98b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:b6:9b:26:74:3e:2b:2e:c1:02:03:76:f6:
59:ac:0c:78:6c:64:39:ce:5a:ea:17:c5:9a:76:b1:
38:38:e5:57:25:4a:db:e4:b7:e3:3b:2d:dc:c8:2d:
ac:50:3e:ff:e0:ce:b1:21:1f:43:a6:cb:4b:01:0a:
7b:c1:f6:ee:8c:ea:49:dd:b9:47:84:a8:a3:30:b6:
3e:bc:70:05:ec:51:e9:4a:15:93:1b:00:65:f2:53:
50:37:20:50:20:1f:e6:86:49:49:6b:09:4c:9c:72:
5a:f0:4c:12:c6:19:ed:4b:ab:24:39:87:3c:3e:8f:
f8:93:74:fe:98:80:e0:ce:c3:ca:33:6a:24:c8:0f:
c4:97:72:46:d8:e2:5e:2a:87:c3:07:d2:c1:85:7e:
72:27:a1:cf:99:d2:f9:f4:b3:ca:4b:2c:ac:4b:08:
ae:2c:7a:32:b7:39:4c:59:4b:f9:0c:c2:5c:31:c5:
4b:e0:b3:21:7b:99:03:4c:0d:e2:9b:d7:38:77:5a:
c8:bc:9c:d8:bc:05:9e:0b:c0:1d:37:93:1f:94:a8:
37:55:d2:43:b6:bd:76:63:84:42:44:9b:21:c7:8f:
72:c1:8d:c9:17:5d:c3:d7:30:90:fa:1a:45:b5:69:
d1:e4:ff:17:5f:ad:2e:65:95:1d:5a:d6:d9:e5:61:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8D:F2:E2:49:9C:8C:7F:AD:16:E7:B5:84:F5:3D:AB:3F:98:B8:55
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:84:6c:b5:8a:3e:80:44:e3:63:cb:d6:a7:19:8a:90:47:
79:5b:15:18:4b:e2:fd:d1:98:e3:71:aa:8b:c0:84:05:85:cd:
a0:36:e0:73:57:18:18:b5:d6:cd:35:0b:fa:36:4c:27:a3:4d:
5d:c2:5b:1a:b3:dc:eb:ba:7c:69:5b:d9:14:00:0a:79:fd:96:
f9:58:1a:14:bd:4f:dd:17:f6:5a:b5:e6:32:09:45:f1:20:24:
0e:e7:89:e3:0f:f5:79:4d:b1:26:f6:40:3e:51:2b:f8:33:c7:
39:a7:87:0a:eb:b2:2f:62:98:6e:23:2e:08:2c:39:9f:c5:41:
a4:f0:85:91:f0:6d:f9:e1:20:64:a5:d0:47:92:13:67:31:83:
a6:43:6e:5a:5e:ad:5a:78:f9:3a:57:84:ec:52:49:45:5e:04:
21:4d:88:39:04:13:18:5a:02:7d:1e:98:02:78:67:23:9c:18:
b0:81:4e:2f:e3:d0:9e:67:36:5d:1e:ec:7c:36:f1:85:0c:67:
58:ef:f8:fe:d2:58:b2:ad:47:07:39:d6:a7:b9:33:9f:bc:fe:
4b:07:1e:18:58:a9:b8:3b:3b:37:77:cf:3b:d6:ae:33:ea:50:
d6:d8:95:dd:4d:80:a8:46:4b:4c:03:53:f1:f5:3b:4e:19:70:
e9:65:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:01 2025 by rpki-client