Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: GYF0oIFo6ItAwL/5KtLPUwnhKkVcPebBu1GCFcA7sCQ=
Subject key identifier: 08:A9:54:F5:74:4A:5B:2F:13:E0:92:9B:9D:8E:55:BF:B3:82:1E:F0
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 019A70DC6DB490446E9F081CE0E9F7372123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0802
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: G7NJO0u5x0ulpuWQHxAYx62EtrTWc6R1DEydW31Dcb0=)
2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6d:b4:90:44:6e:9f:08:1c:e0:e9:f7:37:21:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=08a954f5744a5b2f13e0929b9d8e55bfb3821ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:80:23:d6:3e:bb:97:90:e3:5f:83:34:b2:
d7:3f:76:80:1e:cb:cf:76:7d:16:b4:4b:de:9d:37:
a1:51:27:29:0c:e6:de:09:8c:f3:a2:21:63:ab:ef:
6f:77:b7:06:80:00:09:16:b8:30:d1:ac:5c:2e:0b:
dd:86:35:13:75:c4:1c:37:d3:aa:54:29:e6:50:a5:
76:ca:94:30:db:91:92:6a:64:b0:1c:9f:9e:d9:18:
14:d1:3c:72:85:ce:d8:76:a3:c3:60:53:3e:d9:f7:
c4:09:52:b3:06:ea:6d:a1:91:ab:c0:38:0d:4e:57:
5c:db:8b:d6:81:59:64:d6:df:48:9f:bf:70:09:bf:
29:85:99:58:e8:9a:8a:d4:7d:9a:57:62:7d:0c:35:
9c:3a:5d:39:79:8f:c6:64:0e:52:20:cb:0b:7f:ba:
95:de:30:27:9d:0b:5b:5b:4f:cc:ff:af:da:63:98:
e4:14:70:78:01:d5:de:97:7a:bf:ec:19:95:4f:18:
ec:7f:65:2e:04:4b:e1:bd:f5:8a:e0:b5:f8:d8:79:
fe:27:57:d2:05:51:31:8a:76:1a:14:5d:3a:0d:8a:
57:11:5a:7d:72:5e:2c:95:89:bc:55:9d:71:36:63:
bb:54:e6:b7:11:92:18:b1:4c:81:0a:ca:f5:dd:63:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:54:F5:74:4A:5B:2F:13:E0:92:9B:9D:8E:55:BF:B3:82:1E:F0
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:98:9b:96:58:b0:6a:12:bd:b5:16:61:38:7e:45:88:94:99:
c7:76:93:12:35:6b:85:9d:b7:9d:41:fb:df:b3:78:71:62:e3:
0f:14:54:e0:f1:0e:39:d2:51:98:82:c3:cd:8c:03:3d:42:11:
da:41:b7:8c:0e:9b:bf:df:1a:7f:30:21:2a:02:a8:4a:c5:29:
79:61:73:91:5d:de:36:96:5b:ca:a8:6d:0f:00:cc:8e:8c:f5:
b5:86:1c:68:0f:1f:0a:0e:cb:a9:49:aa:5a:e6:a2:aa:25:f7:
41:29:27:64:85:9f:68:fe:e6:7e:50:98:63:51:8b:89:0d:f8:
07:ab:1a:b4:38:d7:d4:f8:af:e7:fd:f2:9e:65:30:c4:7c:91:
e5:6d:f3:3f:50:50:37:7d:ef:4c:ed:fe:d7:35:0b:e2:1f:4a:
7b:b4:4d:70:6b:1a:a5:a3:4a:97:36:ec:ea:8a:08:19:be:8e:
9c:02:fc:4a:f5:55:cf:40:05:00:e7:be:e9:5e:f3:34:ac:2a:
61:85:be:e7:c5:97:ee:40:32:34:fb:b5:ca:42:9a:41:61:50:
d7:dd:ec:a8:c2:b1:ec:ba:30:77:34:25:1d:e6:0f:91:c8:b5:
70:98:04:a1:e6:df:49:57:aa:23:1e:dc:88:a4:d1:8f:b5:01:
c8:ab:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:53 2025 by rpki-client