Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: HTxekWFTQYYtStU/d7YqyHQ8VqpOUjkrGGYYje48vBg=
Subject key identifier: 66:A9:E9:15:2E:EC:CF:BA:E7:63:0B:CD:88:8B:CE:7F:76:5E:D3:C4
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 019A285599A7E049E80834055BF2E9B4326E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 01:01:29 +0000
Manifest this update: Tue 28 Oct 2025 01:01:29 +0000
Manifest next update: Wed 29 Oct 2025 01:01:29 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: w90ZeJ3lLGfouT7s9DMPslgYqDArFCJJT9z4UW6S01g=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:99:a7:e0:49:e8:08:34:05:5b:f2:e9:b4:32:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Oct 28 01:01:29 2025 GMT
Not After : Oct 29 01:01:29 2025 GMT
Subject: CN=66a9e9152eeccfbae7630bcd888bce7f765ed3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:66:7b:e1:76:eb:0a:6a:8c:92:29:f2:4f:
94:b3:2c:63:f5:10:e0:65:b6:01:38:9b:52:69:6b:
b3:0b:b9:87:9e:5a:5f:99:29:6b:c8:4f:db:33:2d:
aa:6b:e5:f9:52:70:da:05:ba:b9:c3:03:fb:95:80:
ff:be:67:b3:67:e6:72:35:d8:c2:e0:26:2b:08:f4:
4b:e5:ac:49:b5:38:10:8d:86:9f:b1:49:d0:12:8c:
d0:de:e8:19:b4:b4:44:d2:b7:e4:93:5c:55:7f:13:
a5:59:93:60:8c:b7:76:db:03:2c:cf:a1:e5:8f:e6:
ed:6d:9d:df:8f:ac:4b:0f:ea:aa:39:e7:67:22:dc:
de:8d:da:e1:f0:fd:54:d3:97:63:ee:a2:cd:ec:e8:
1b:69:e5:bd:2e:e2:b0:79:10:a9:76:45:27:67:a7:
9d:e6:33:1a:50:7d:6e:79:a4:4c:51:d0:a5:fb:57:
7c:3d:59:fc:6d:f7:11:7c:dc:a5:fe:fa:4f:04:af:
1e:99:60:e2:1e:91:93:21:e0:5c:96:51:a7:fd:3c:
9a:8a:d8:95:e2:3d:ee:4f:6f:5a:59:f5:72:aa:85:
9f:e1:c5:75:bb:31:8b:80:ab:8c:44:f7:5b:18:88:
f3:4b:5c:ae:44:b0:49:0f:e0:ab:68:73:bd:32:56:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:E9:15:2E:EC:CF:BA:E7:63:0B:CD:88:8B:CE:7F:76:5E:D3:C4
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:fb:41:34:3c:30:6d:04:f4:d5:f5:e7:1d:2e:cf:fe:e0:
8e:0d:1c:dc:ef:a0:95:23:ab:c9:d2:d8:f7:e4:a0:d0:91:97:
7a:2b:aa:6e:e4:63:d2:33:e8:51:d1:a4:34:7b:aa:b8:5b:a3:
bc:56:f9:bc:56:af:bc:e6:9a:ff:aa:c5:4b:1d:d2:7a:12:98:
63:87:5c:78:7e:12:b6:6c:0b:e5:83:3a:3a:54:20:15:6e:8b:
c4:93:97:c2:96:6f:2f:58:cc:f8:fc:38:1c:11:79:52:bc:7d:
36:20:79:a6:9a:f7:99:bd:7c:84:9c:91:8f:10:81:a9:78:b7:
3f:b9:c9:13:fe:46:1a:40:fb:01:f4:4d:66:2a:b1:cb:d9:d1:
03:a8:93:b0:94:0f:75:b7:7c:9d:95:6e:e2:90:f8:95:41:ba:
77:e3:43:fd:21:39:80:56:70:08:c7:ec:7e:22:d6:04:d4:69:
98:15:eb:64:81:29:3b:24:35:bb:1e:5d:ff:6a:3d:c6:1c:e1:
0e:ad:62:0f:91:85:fb:5e:7d:5f:06:e1:a1:c5:71:20:7c:9c:
2a:1a:ba:97:27:f7:18:ae:54:5f:48:cc:65:e9:aa:d7:20:5e:
1b:75:02:82:b5:76:17:42:bb:54:55:eb:b1:3b:35:3d:33:d9:
c6:1f:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:10 2025 by rpki-client