Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File: BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier: K5aAH454N4JbSK7HtzPhNqWD41+SvIar5aLPi19Sr5U=
Subject key identifier: 0F:F3:2C:1E:CD:C2:4F:CD:39:50:47:28:B8:F9:42:BB:2E:16:48:23
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial: 019A7293ED77D0EE556413F22B8CEC4C2FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number: 129C
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: EUHvrcWyXpmrzT/MkyZ8NLMekC3+ZE0soXxbA0CnIKM=)
2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ed:77:d0:ee:55:64:13:f2:2b:8c:ec:4c:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=0ff32c1ecdc24fcd39504728b8f942bb2e164823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:4e:fe:69:e4:f2:16:99:d0:f3:9c:ed:7a:
f5:84:c1:d1:41:20:f6:9f:71:95:5e:a3:fa:06:76:
91:68:fa:11:4e:d2:94:1b:ef:1a:7c:04:c9:3b:79:
18:aa:0a:8c:c5:4c:b4:e5:f7:41:90:95:e0:3f:1b:
4c:55:6e:d0:56:f5:77:2b:87:ac:b4:fb:48:09:2f:
6e:30:97:a8:54:62:3e:28:93:79:66:6d:12:9e:32:
d7:a7:9e:c2:af:59:6f:29:73:26:89:37:7f:72:78:
fc:2d:46:0a:d9:36:7f:6f:01:b9:97:39:2f:28:1b:
50:4a:4c:00:87:bc:17:67:a5:37:cc:20:fc:52:8b:
7c:ac:21:58:e1:c0:64:1f:8d:66:70:c6:3d:77:40:
e8:88:18:cb:11:5b:4a:aa:eb:2c:89:af:6c:cd:1a:
42:d9:97:f0:ae:9e:ca:d4:9f:54:42:87:97:fd:6f:
1c:01:c8:06:28:be:51:80:8c:c2:26:ec:ec:ae:25:
08:ff:bd:6e:b7:c7:5f:b1:4c:fb:53:d6:12:d2:36:
dd:ad:ce:2b:0b:0f:f4:57:c8:6b:a3:7a:e3:a0:70:
8f:14:c1:d1:f8:d1:5c:63:5e:66:41:4f:7a:60:de:
de:e3:8f:06:02:d8:4c:aa:c1:b2:23:fb:46:7a:a5:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:2C:1E:CD:C2:4F:CD:39:50:47:28:B8:F9:42:BB:2E:16:48:23
X509v3 Authority Key Identifier:
keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:71:13:7b:c9:65:59:b5:47:00:98:46:c8:44:57:b4:1f:ff:
d4:da:eb:c0:c6:9b:ee:24:48:45:2c:77:16:ba:d4:71:0b:eb:
5d:14:0b:36:f4:b5:64:9e:de:10:ad:e6:c6:90:9f:cc:34:28:
b7:b9:26:e5:d8:90:53:d3:68:9c:aa:36:09:e1:8b:88:09:7c:
5c:60:b9:2d:30:7d:ea:fa:78:45:53:01:46:b7:b8:bc:23:b8:
96:9b:48:e0:35:6c:0e:2f:ef:b0:92:ec:6c:de:f8:b7:a8:88:
19:52:d8:88:0e:01:fd:b3:00:a4:50:de:ba:13:a5:40:73:b1:
bc:e1:8b:c1:8a:ef:9c:5e:5a:23:07:40:27:cc:8f:14:a4:d5:
7d:f8:ea:df:46:db:b4:03:01:0f:53:96:ac:c4:31:39:68:cf:
fb:90:03:39:3a:8f:08:8c:a0:85:f4:80:0f:7c:2a:3a:1d:55:
ee:80:fe:41:1b:be:c5:26:28:9b:fb:80:7c:df:ee:45:c4:c3:
19:bf:bb:e4:f4:e1:ca:2b:a0:aa:03:f7:6a:2c:e5:7c:a8:18:
00:41:4a:8b:92:fd:54:82:5e:f7:c3:d8:8e:04:c5:e8:eb:54:
43:90:e0:42:fe:90:f8:ff:7d:14:1b:ca:4f:74:6d:53:04:d9:
f1:3b:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:22 2025 by rpki-client