Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: Ig/btr4F/ic4HTtNE7y/OqHy95wN4sevSj3Z6+vl3qk=
Subject key identifier: 32:6C:1F:3D:00:4C:74:39:F2:2B:10:44:2A:66:07:E5:91:15:05:8F
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019A71EEA8D39F34DDA1289FEE692CB092EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0CD0
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: jpOHYuicQwQ4gqeTc4mkwZnPeDyme++5VwTsHm3ZSbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a8:d3:9f:34:dd:a1:28:9f:ee:69:2c:b0:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=326c1f3d004c7439f22b10442a6607e59115058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:04:cf:b4:18:ec:70:70:7b:6f:bf:92:38:
95:83:a2:b1:6a:f1:d0:8e:64:dc:72:80:3e:05:97:
40:38:b5:d8:bd:ac:6c:2c:66:ab:4d:7b:c0:d8:18:
bc:2c:f9:39:51:07:7e:e0:65:55:b6:3e:e2:79:5d:
8e:56:6b:2d:95:5d:98:fd:e8:a6:f9:b6:36:9b:50:
97:24:21:da:be:17:85:6f:ee:eb:18:2b:97:cc:1a:
f8:42:7b:8c:9b:ec:b1:57:f8:d0:07:60:3c:aa:0c:
be:5d:8d:74:a6:9b:21:88:4c:98:1f:0d:e3:6e:1b:
8d:77:ec:9e:56:38:e5:ee:fe:54:44:0f:76:17:3a:
f7:41:5c:46:ac:e5:ec:46:c7:cc:d7:e4:ba:b3:b3:
d8:a5:09:dc:bd:be:a2:f3:21:a6:b6:64:87:b8:9d:
77:60:af:cf:0a:de:7d:e9:74:19:5c:10:53:8e:4f:
be:d7:60:96:27:25:87:2e:ab:e9:d0:58:60:e7:cf:
16:a3:6e:f2:60:d1:8b:f9:b0:8b:14:9b:90:05:0f:
b7:2b:6e:b7:77:d3:d4:08:4a:bc:26:f6:03:91:a2:
af:9e:70:7d:be:30:1c:c4:e4:85:d7:2c:0d:ca:d8:
47:9a:5e:1a:fe:74:a9:bd:65:d6:9a:ad:c0:41:3f:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:1F:3D:00:4C:74:39:F2:2B:10:44:2A:66:07:E5:91:15:05:8F
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:15:c6:c6:1c:0c:fc:e5:d7:f2:d6:cb:08:2b:d3:d2:78:08:
f9:15:9e:95:06:a6:06:82:55:ef:e2:23:12:5d:46:6e:af:18:
2b:fa:5b:a1:85:39:7f:c5:d9:c5:91:b0:0f:e4:24:bb:eb:82:
e7:40:39:ad:99:6b:15:52:27:80:e6:ab:d1:5c:ef:53:fa:6b:
13:77:42:37:6a:1a:a9:21:34:72:17:cd:e5:57:d6:6e:0c:1c:
50:a2:24:c0:6c:6b:7f:a7:91:22:8c:f9:57:e5:a0:fc:63:9a:
d7:31:fc:49:39:16:ce:f6:7a:d7:21:cd:cf:90:bf:9c:39:36:
48:e6:07:c7:0e:74:cc:a2:da:09:4f:5a:d3:9a:aa:6b:1a:91:
3b:d7:44:f6:3a:f3:e6:40:29:a8:df:f4:6b:3d:68:e9:09:0e:
f4:9d:fd:21:85:e6:a3:ac:2a:d6:21:51:8a:de:d4:36:ff:49:
16:45:99:b3:81:1c:ab:4b:bc:b5:ad:6f:f6:dd:23:9c:5d:6e:
6b:4e:c9:6e:49:69:0f:53:6b:a0:47:bc:8c:e0:34:36:87:ae:
1c:ad:13:1b:6e:39:b8:35:ca:5f:71:a1:70:75:5c:bf:83:15:
bb:23:c8:f7:4f:76:79:05:22:e3:1f:d9:97:4c:1a:5e:85:28:
79:e4:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client