Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: o+biDwnMgk77fEk1o3SvIXPU5vf3ipm6b65nBfVbGdo=
Subject key identifier: BB:47:38:0E:F8:8A:D7:9E:A0:93:D1:BD:BD:7E:0A:E7:04:D9:07:5C
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019A7149A38C8362851237BF2A672405D9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: xdxwwGafrbBh+RhoEJePuzCMDGcI69mn6UaYE2gg2VU=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a3:8c:83:62:85:12:37:bf:2a:67:24:05:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=bb47380ef88ad79ea093d1bdbd7e0ae704d9075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:d5:70:3b:6b:e2:81:17:e1:24:df:f1:47:
82:1f:c9:72:b4:17:23:b4:eb:f4:19:6e:13:2b:a1:
29:5c:cf:6e:e9:57:fe:ee:76:71:d1:ed:93:82:82:
b4:7f:8a:95:a0:65:b4:20:dc:1d:51:83:5f:dd:3a:
3c:36:d1:9e:e8:b8:87:32:7e:97:4d:c6:28:49:8c:
b4:6b:03:69:bf:82:75:93:02:b3:ab:4a:d7:19:58:
7f:89:eb:54:d4:e5:9e:a7:95:43:ad:9c:c8:f9:ea:
50:19:bb:af:3a:82:4a:3c:ca:4c:fc:d0:2e:0f:6c:
49:45:9d:54:26:f7:8e:dc:ad:43:ee:77:87:83:39:
56:3b:28:fe:5a:77:d9:11:56:8a:79:b9:91:8f:7c:
8a:4c:4c:5e:77:52:49:26:34:68:7a:ab:36:20:5f:
ed:c3:67:04:3f:02:9a:af:67:10:7e:c2:85:8e:30:
fe:45:da:4f:26:18:95:ff:a5:d3:cb:00:91:0a:b3:
f1:2b:7e:04:ab:d2:fa:b5:05:6d:cd:5c:33:e0:a7:
32:e9:f5:fb:66:96:aa:09:e5:07:89:e9:68:87:33:
0c:66:bf:5e:75:41:d1:16:8f:a5:fb:1a:db:84:0f:
93:cd:95:4b:e3:e3:54:08:77:f7:3d:86:72:e6:11:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:38:0E:F8:8A:D7:9E:A0:93:D1:BD:BD:7E:0A:E7:04:D9:07:5C
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:d3:12:7b:ae:a8:38:e2:73:32:61:44:18:cf:56:bc:ea:
03:b7:dd:b4:c1:f9:6e:38:6f:7b:96:b8:60:01:25:3c:89:3e:
e0:b6:7f:8f:19:4d:07:23:1a:16:53:47:2c:d4:48:88:07:9f:
1b:37:12:71:e9:32:37:09:52:90:4c:27:bf:d0:c2:55:83:ff:
47:1e:19:bb:94:8a:c6:f3:1c:b1:4b:fe:a1:b3:bf:48:49:b5:
b2:bd:c5:27:95:9e:b4:d3:92:54:34:0e:7a:9d:da:be:23:c8:
aa:98:10:97:c4:9b:65:a2:78:e2:b0:a6:1d:9b:99:1f:13:05:
07:fe:5c:1c:84:54:48:f0:56:97:5f:db:25:13:49:e6:55:fe:
a3:67:02:38:83:b8:43:2e:11:75:b0:69:9d:a2:33:de:d1:62:
d8:6e:68:25:d4:b1:a9:31:f0:c5:c0:09:1a:28:fb:bf:59:87:
51:68:58:d4:2b:af:5f:3f:0b:31:7d:79:bf:7e:45:52:dc:63:
4c:bd:7b:fe:a8:af:9e:ea:1e:b7:44:49:d3:66:32:11:a8:1e:
d4:50:62:0c:bc:fc:a4:44:06:5d:d3:24:c4:b7:cd:cb:95:91:
64:ae:86:b7:98:b7:57:01:78:fa:7a:92:c5:bd:f7:e7:aa:5a:
a5:6a:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client