Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: zW+IQ0pJOQ3VuY12XM8KvdwSctmFZ4Qyq1LLt/xkdeI=
Subject key identifier: 2C:1B:61:1C:F8:31:01:A6:DE:79:DA:B9:D1:A5:CC:88:39:F8:F6:A3
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 019A7225CE97534332926AACFC948CA15EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1675
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: kIemZcuU1fuFRGiVOkj6P8mWlGwoW7HwGyZOZytl+L0=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ce:97:53:43:32:92:6a:ac:fc:94:8c:a1:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=2c1b611cf83101a6de79dab9d1a5cc8839f8f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:66:21:19:20:d9:d8:ff:af:94:02:b9:a8:
5b:e9:fe:07:e9:28:06:af:e9:98:1a:3f:aa:e2:ce:
59:eb:2c:df:b5:9c:16:2c:5d:f7:d1:83:79:01:c4:
fd:06:0b:fd:8b:a0:7f:8d:21:0f:53:68:64:db:51:
fb:4c:9f:8f:01:9c:95:cf:7b:ab:98:26:84:17:00:
2d:70:7d:1c:55:72:e0:74:b2:3e:36:27:35:2f:8a:
70:a1:6c:bc:85:be:7c:b5:33:90:d6:b9:0f:a0:4d:
a2:c3:3f:8a:4f:59:4b:32:fa:ed:0b:88:7c:7e:cd:
4e:06:b7:60:e7:f3:25:b5:7a:4c:c6:90:17:c1:49:
33:0e:0f:28:2c:19:92:35:28:9d:f6:79:26:c2:b9:
e5:0f:4c:cf:96:17:80:62:d9:71:b6:c6:be:0a:35:
43:42:9f:e3:60:b5:77:b4:b0:db:80:4b:2c:1d:58:
97:44:5b:39:7f:15:06:13:95:cc:a8:e5:78:9f:0a:
35:b5:03:b2:c8:69:a0:99:f9:73:ce:f7:70:e3:12:
dc:c8:21:be:c4:11:25:09:3a:62:59:e9:ac:4f:82:
a0:0a:be:15:16:ee:72:08:d5:b4:9b:40:7e:62:8c:
c9:ba:3b:2d:17:c9:68:ec:64:14:1b:9d:cc:6a:54:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:61:1C:F8:31:01:A6:DE:79:DA:B9:D1:A5:CC:88:39:F8:F6:A3
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:fe:dd:62:f2:e1:e0:cd:78:b8:2a:64:f6:eb:d0:7b:50:
36:a5:47:77:50:25:8d:38:41:25:66:e0:4c:95:af:0d:36:08:
a8:3e:1b:a2:60:50:7b:43:68:39:91:34:c8:6f:d5:b9:e8:34:
8f:90:e7:e0:70:ca:42:ed:4a:85:4c:59:70:ab:65:0b:a0:80:
95:d6:ae:88:64:9e:57:6a:d7:a2:71:ed:e7:49:be:3a:27:4c:
ca:7e:60:6e:23:ab:69:4e:1b:91:ef:f8:24:ee:33:4d:7f:31:
d4:ff:d0:5e:82:07:90:fd:d8:39:b9:ce:20:7b:2f:ad:34:27:
86:c2:df:c7:02:ce:d9:f4:e2:a8:52:db:ee:d7:51:d9:28:a5:
ab:36:1d:12:1a:c1:15:ce:ca:b4:06:92:6c:d4:08:56:5a:62:
44:b2:79:bd:f2:32:a8:aa:e4:a3:dc:4f:4d:ac:37:88:32:94:
89:14:d6:6d:ad:1e:1d:f6:1d:48:d6:b3:4e:a2:fb:81:96:04:
9f:a9:a3:26:95:f9:75:22:01:04:4e:c9:64:7d:9a:3f:05:6f:
2e:f1:f9:16:83:86:1b:fb:4f:e6:3d:9c:a9:c7:d8:df:eb:99:
d6:92:4a:f0:d6:0f:cf:e8:48:97:54:b6:1b:62:33:29:ff:2b:
08:07:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client