Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: +zNDhWzS/O2NmlrcQi2HgEBjJVci8DvIbzqTo6W40qk=
Subject key identifier: 18:48:C2:BC:46:68:F1:1E:98:3E:90:5D:74:01:0B:F8:18:F7:A7:FC
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 019937CB2AEB9B6BE22162EC489FBAFFFC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 167A
Signing time: Thu 11 Sep 2025 08:01:25 +0000
Manifest this update: Thu 11 Sep 2025 08:01:25 +0000
Manifest next update: Fri 12 Sep 2025 08:01:25 +0000
Files and hashes: 1: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: KlvK0Rh5lqs8UkYOKRppHV9uqTgJ9jodsxl7Cw7f3wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:cb:2a:eb:9b:6b:e2:21:62:ec:48:9f:ba:ff:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Sep 11 08:01:25 2025 GMT
Not After : Sep 12 08:01:25 2025 GMT
Subject: CN=1848c2bc4668f11e983e905d74010bf818f7a7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:eb:f5:1a:35:38:8e:1f:77:96:5c:a7:9b:
c7:5e:3e:e9:b5:50:e8:f4:35:56:65:5f:ca:cf:33:
70:2e:38:17:d8:93:cb:6a:b3:95:cf:b1:25:08:e6:
23:e0:4c:97:31:59:26:a5:93:1c:e1:20:07:e9:d3:
55:d6:f1:0e:ec:24:2a:09:17:c2:b1:39:c3:ef:48:
38:e1:00:53:c1:77:f2:d1:71:3c:7b:8c:27:e3:c7:
8f:d5:7d:c9:d1:f2:fe:90:0c:4e:e7:4b:4e:f4:be:
c3:8e:99:ec:ec:60:e4:99:fb:c4:87:29:4b:f7:59:
b8:cf:b8:b6:d2:6f:83:2f:36:e3:2b:e5:6f:54:ef:
1d:3a:95:f4:0f:1f:55:9a:e9:20:52:21:8f:96:ea:
d3:34:e6:7c:0e:cf:54:e1:36:2a:84:a6:5e:ea:d6:
af:ff:6f:ef:b9:18:5f:60:7c:8a:ce:d8:74:2f:e5:
f4:c1:2e:13:cd:36:23:30:fd:d3:f3:ed:0e:06:7d:
41:20:2d:35:3d:86:a0:e0:b5:12:58:55:92:bc:f2:
ea:3e:03:a0:a7:16:d0:0c:67:86:25:62:bb:12:ff:
83:2a:54:aa:2c:5d:b6:f0:ec:9e:3d:27:f4:98:4f:
04:01:ff:a1:17:e2:67:15:30:06:0a:fa:a3:98:f2:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:C2:BC:46:68:F1:1E:98:3E:90:5D:74:01:0B:F8:18:F7:A7:FC
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:f5:12:4e:2e:ba:e5:79:69:41:d5:08:df:b2:9c:7a:ff:
fc:63:c8:34:0a:4b:52:7d:d3:83:bb:8f:eb:a6:47:d4:77:85:
62:3c:a8:5e:2b:fd:fd:ae:cd:6d:e7:00:09:d0:22:21:50:5c:
66:76:7c:89:3f:2f:b5:23:56:14:27:0e:e5:7e:30:fa:4a:9a:
76:d2:90:6e:e5:64:7f:29:98:31:8c:f5:75:82:2d:74:66:04:
e1:99:e4:d1:81:ae:89:af:4a:1d:95:2a:c9:51:19:aa:1f:c3:
53:22:28:60:88:1e:05:4f:8c:3a:ad:81:46:14:91:24:09:8a:
c7:77:94:37:f3:a1:9b:cd:5c:7d:3f:8e:bd:03:60:3b:93:6b:
2d:58:02:09:62:49:86:48:00:3f:48:0c:38:1c:4d:50:81:b8:
5d:fc:fc:12:06:99:ea:4b:8e:30:98:8c:30:c7:26:83:49:69:
4d:c3:ea:43:23:6b:ea:d2:47:02:2b:f1:15:40:a4:9e:9f:0d:
8c:83:a0:67:12:f9:0a:8f:c3:cd:02:84:d8:30:89:d1:7c:ad:
c1:84:3f:d1:4f:6d:19:15:cd:6e:99:d9:59:a8:be:00:8b:40:
d9:58:14:bc:d5:e0:f5:32:82:79:b2:dc:47:70:f7:78:47:3a:
9e:e0:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:59:07 2025 by rpki-client