Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File: Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier: b8aLAFvMqKx8UGaQlOG2EgtNMpJDHgjyj8LcmY2zQew=
Subject key identifier: C1:6C:2D:E6:C5:BC:84:6D:1B:2D:1A:61:04:30:17:43:EF:3D:83:67
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer: /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial: 019A492AA4EB2195C05DD9326424A0C77EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number: 170B
Signing time: Mon 03 Nov 2025 10:02:02 +0000
Manifest this update: Mon 03 Nov 2025 10:02:02 +0000
Manifest next update: Tue 04 Nov 2025 10:02:02 +0000
Files and hashes: 1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: ps59ZNVjrfzU2O79wMkpKLOaiupqNgCsYwys9T3NBAY=)
2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:2a:a4:eb:21:95:c0:5d:d9:32:64:24:a0:c7:7e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Validity
Not Before: Nov 3 10:02:02 2025 GMT
Not After : Nov 4 10:02:02 2025 GMT
Subject: CN=c16c2de6c5bc846d1b2d1a6104301743ef3d8367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:d5:bc:5a:f0:0d:cc:6f:94:f9:f0:b8:1f:
2c:cc:8c:81:f3:f2:54:94:9a:95:d3:5a:a9:31:f5:
21:f4:fe:36:8e:ec:b6:ff:65:5c:fb:7e:46:34:18:
82:cd:ca:f6:d3:ed:a5:f0:1b:dd:7a:52:b6:23:b6:
2f:13:07:67:76:17:0a:f8:bc:ea:05:36:42:25:6f:
db:5d:5c:ba:1c:32:10:b4:e9:d3:59:3f:85:32:60:
38:1f:45:44:6b:50:de:79:5b:1a:51:ec:77:0e:25:
03:18:a3:53:39:a4:01:57:ba:a3:2f:de:12:03:eb:
ba:e6:0b:d2:88:f2:c4:85:e3:3a:63:28:64:1d:3a:
15:48:0e:94:3c:9c:cc:88:af:aa:99:f0:6d:39:ca:
fb:2a:5a:7f:bd:d5:61:39:30:c5:5c:09:8f:28:6a:
c0:50:a2:42:f4:f9:78:8b:24:08:cb:2c:0f:85:51:
4a:94:f6:df:d2:bd:b1:6b:f4:f2:e6:e6:4b:33:fe:
a8:f3:65:9b:df:3e:d3:f7:e8:30:1a:b1:17:0a:c7:
16:81:4d:f8:75:29:dd:f8:46:1f:99:ef:6f:1a:7f:
32:af:2e:fa:e1:92:03:1e:f3:08:86:28:c1:46:2d:
04:74:0e:aa:d3:58:91:79:fb:a3:5b:ad:c2:07:0d:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:2D:E6:C5:BC:84:6D:1B:2D:1A:61:04:30:17:43:EF:3D:83:67
X509v3 Authority Key Identifier:
keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:ec:bc:e5:6a:75:c0:ac:6e:6d:f1:45:d0:e7:cd:ca:ab:
ac:80:a1:fe:29:10:4c:86:bd:ad:fb:eb:89:2c:71:ba:05:92:
04:77:c1:9e:6a:a6:05:c1:fe:67:11:1a:a7:86:34:b9:ff:01:
b4:95:00:ef:10:3e:5a:3c:6e:ce:1b:f8:d4:31:97:30:1e:85:
af:e6:b2:a5:0e:65:3c:f0:0d:dd:8d:4e:4c:e8:09:96:74:9c:
82:d3:21:bf:19:4b:fb:c8:59:b8:f4:c3:9e:33:01:6e:9c:98:
f2:25:e8:93:9d:9f:e4:de:15:11:4c:4e:39:96:69:ad:fa:de:
4d:74:de:d8:fe:41:8f:87:56:5f:a7:25:3e:1b:bd:5d:55:05:
60:ca:b7:63:51:db:b1:19:c8:6d:a3:04:47:d7:cc:3b:e6:07:
dd:db:43:02:2b:73:b0:f8:53:9f:73:a6:49:76:94:be:0a:ce:
e9:59:f6:46:f5:5c:bc:80:6f:54:08:1f:49:89:5a:b7:7d:5b:
d0:cf:69:34:f2:89:74:d5:23:74:36:ea:93:ad:a6:c5:c6:ea:
89:1a:b9:57:d1:55:65:00:bf:5e:86:cd:dd:60:2d:c8:89:84:
d8:2c:36:3e:c2:0f:53:fa:3f:cb:f6:2a:fb:7e:bd:f7:58:0b:
c8:15:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:39:43 2025 by rpki-client