Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: 0GA78141bM7Fms+wGWv0V392fv7tsY87H2gCAFOeiw4=
Subject key identifier: 62:76:5E:2E:ED:C9:FC:06:AD:75:52:32:27:6A:4F:C3:C7:91:BD:DD
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 019A7293B9FA2E5492B74A527FA16A32CF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0B58
Signing time: Tue 11 Nov 2025 11:01:15 +0000
Manifest this update: Tue 11 Nov 2025 11:01:15 +0000
Manifest next update: Wed 12 Nov 2025 11:01:15 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: aAXIQhcwFcUobquCOkhjUIBxpV0NDJzlP8Bwl+dfIX8=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b9:fa:2e:54:92:b7:4a:52:7f:a1:6a:32:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Nov 11 11:01:15 2025 GMT
Not After : Nov 12 11:01:15 2025 GMT
Subject: CN=62765e2eedc9fc06ad755232276a4fc3c791bddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:95:25:69:be:44:17:8c:b4:69:c8:99:5f:
6c:e9:e1:21:22:2c:e0:92:45:69:e5:a9:c7:3f:0a:
7b:ff:fc:fb:d2:2d:52:45:bc:71:40:70:63:f3:0c:
06:0d:5f:0d:ff:4b:e3:d5:57:e7:80:9c:fb:d4:67:
de:26:bd:5e:75:bb:7e:c4:93:3b:24:1f:79:1e:f8:
07:80:a3:87:5c:6e:0b:81:cb:79:f3:62:99:0e:0c:
08:f8:c1:99:64:fc:13:e1:5e:01:29:84:78:63:ba:
e7:e5:98:4a:97:68:f8:99:f0:15:dc:33:01:31:f7:
2f:87:b6:46:f0:08:6d:49:0c:dd:b7:55:a5:cf:e3:
19:c2:73:8e:7e:f3:25:25:af:ac:a6:b5:f8:04:95:
e8:57:e6:00:f2:9a:75:4f:59:8e:64:0e:c7:67:a8:
49:cc:84:ba:fa:de:4c:8f:43:73:b4:26:26:b0:03:
1e:4c:98:9d:e6:95:c1:f2:b0:03:d1:bd:42:b8:ca:
07:71:74:e7:38:81:80:7e:f7:47:49:ab:eb:2c:45:
45:89:83:2e:cd:3e:33:7b:ce:07:fd:e6:e0:5b:3b:
e6:81:9c:99:0f:60:99:0c:6d:fb:37:1f:18:c4:0f:
9c:55:c7:5f:1a:97:57:27:01:75:21:40:c8:31:10:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:76:5E:2E:ED:C9:FC:06:AD:75:52:32:27:6A:4F:C3:C7:91:BD:DD
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a5:d9:1c:29:6b:34:c1:07:1e:a6:de:01:5b:79:28:8e:72:
87:59:c5:4d:00:11:8a:9d:58:6c:76:d6:44:f0:90:6c:f3:cb:
b7:81:06:a0:08:50:d5:9f:4a:aa:c6:f5:b8:81:a9:f5:17:c0:
0e:e2:9e:6d:f0:23:23:db:d9:2e:50:16:7e:8c:e4:51:27:88:
5e:fc:18:22:fc:67:46:1e:77:73:16:d5:96:76:aa:29:a2:82:
9a:ab:63:73:ef:c9:02:1c:ff:1f:e2:d3:5c:df:71:cf:77:4a:
8f:bc:c4:17:fd:b1:b4:ab:aa:a7:bd:c4:1c:ef:1e:3b:35:93:
51:30:83:02:10:d3:c1:e3:a1:46:12:b6:81:33:cf:5c:21:9d:
04:dd:e8:c3:ec:85:79:00:46:ec:bf:7d:4f:47:0f:b1:c3:ea:
10:9f:d6:fb:c8:ff:74:23:92:68:94:2f:b0:d9:8e:49:a3:b0:
d0:66:e2:55:30:a0:9d:09:6f:50:54:f3:5b:03:8f:2a:ff:66:
d8:1a:f4:b4:c0:34:34:9e:af:71:d1:a9:28:df:98:ac:fb:50:
17:3d:f7:cb:67:b5:df:b6:18:5b:da:28:f6:96:25:2a:0f:4a:
c8:28:f2:55:ef:4a:4f:6f:9e:f7:54:e0:4c:f3:0a:e4:e6:ed:
b0:2c:5d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk7n6LlSSt0pSf6FqMs90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3
ZDFlMTcwHhcNMjUxMTExMTEwMTE1WhcNMjUxMTEyMTEwMTE1WjAzMTEwLwYDVQQD
Eyg2Mjc2NWUyZWVkYzlmYzA2YWQ3NTUyMzIyNzZhNGZjM2M3OTFiZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt+VJWm+RBeMtGnImV9s6eEhIizg
kkVp5anHPwp7//z70i1SRbxxQHBj8wwGDV8N/0vj1VfngJz71GfeJr1edbt+xJM7
JB95HvgHgKOHXG4Lgct582KZDgwI+MGZZPwT4V4BKYR4Y7rn5ZhKl2j4mfAV3DMB
Mfcvh7ZG8AhtSQzdt1Wlz+MZwnOOfvMlJa+sprX4BJXoV+YA8pp1T1mOZA7HZ6hJ
zIS6+t5Mj0NztCYmsAMeTJid5pXB8rAD0b1CuMoHcXTnOIGAfvdHSavrLEVFiYMu
zT4ze84H/ebgWzvmgZyZD2CZDG37Nx8YxA+cVcdfGpdXJwF1IUDIMRAdJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ2Xi7tyfwGrXVSMidqT8PHkb3dMB8GA1UdIwQY
MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt
M2Q3ZTRiNDk2YjIzLzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz
LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKXZHClr
NMEHHqbeAVt5KI5yh1nFTQARip1YbHbWRPCQbPPLt4EGoAhQ1Z9Kqsb1uIGp9RfA
DuKebfAjI9vZLlAWfozkUSeIXvwYIvxnRh53cxbVlnaqKaKCmqtjc+/JAhz/H+LT
XN9xz3dKj7zEF/2xtKuqp73EHO8eOzWTUTCDAhDTweOhRhK2gTPPXCGdBN3ow+yF
eQBG7L99T0cPscPqEJ/W+8j/dCOSaJQvsNmOSaOw0GbiVTCgnQlvUFTzWwOPKv9m
2Br0tMA0NJ6vcdGpKN+YrPtQFz33y2e137YYW9oo9pYlKg9KyCjyVe9KT2+e91Tg
TPMK5ObtsCxdxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:37 2025 by rpki-client