Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: GUOQjcUYwOxb1h0JhsSUO6Y3ZxME4A8o08cpZs8B+h8=
Subject key identifier: C0:02:17:84:28:6E:5A:A6:98:1B:A4:0C:D0:66:DB:6B:96:AB:E2:3E
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0196A27700E7B84F8DCF15AA90DF1864ECB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 034C
Signing time: Mon 05 May 2025 22:00:30 +0000
Manifest this update: Mon 05 May 2025 22:00:30 +0000
Manifest next update: Tue 06 May 2025 22:00:30 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: 2nH4hUVsqfSYDRnQRxzk/jQgwA737c5o/lEazbYuS00=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:00:e7:b8:4f:8d:cf:15:aa:90:df:18:64:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: May 5 22:00:30 2025 GMT
Not After : May 6 22:00:30 2025 GMT
Subject: CN=c0021784286e5aa6981ba40cd066db6b96abe23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:77:58:e7:86:35:86:d3:4e:96:a8:83:5f:
8c:16:4d:89:d8:32:18:80:3d:0a:fa:de:a2:d9:de:
de:66:de:ae:05:73:d2:54:5a:3c:fc:ad:5d:fb:14:
c5:d0:c1:a4:85:4f:c5:8d:33:c9:21:7e:31:06:1a:
cc:de:c3:07:d9:1f:7c:91:c5:6e:b2:2a:53:4c:27:
d9:18:57:40:6c:2a:90:d1:67:25:ef:a9:2c:aa:51:
27:eb:ee:c8:6b:24:ee:bb:68:03:b0:6b:ce:50:a2:
e2:10:07:6d:ba:0f:1d:e7:c3:c0:8c:b1:44:79:88:
38:b5:db:8f:c0:85:79:db:99:8d:e0:87:bb:2a:77:
2f:c9:c9:e3:03:db:99:68:a7:d3:d3:f6:19:a8:af:
84:b1:0f:9e:d4:83:2f:66:1c:f7:d9:95:0c:c2:4d:
7d:f2:f4:e5:4b:c5:c7:2a:64:9e:09:c1:7f:be:8b:
8d:2a:bd:12:5f:ec:38:67:96:93:ad:eb:ba:c3:8c:
2b:90:3f:16:b4:d9:27:bd:0f:8d:cc:04:73:c5:30:
7a:e5:04:39:8f:4f:a1:5d:46:dc:64:fb:c1:f7:ea:
d3:02:02:67:b0:3a:68:71:37:36:80:cc:99:05:fa:
63:f1:35:1f:85:10:ca:ed:d6:d7:20:b0:94:32:31:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:17:84:28:6E:5A:A6:98:1B:A4:0C:D0:66:DB:6B:96:AB:E2:3E
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4b:a9:e1:f2:52:52:67:4d:4b:76:cb:08:24:8d:59:85:12:
1f:3f:6f:01:33:1f:ed:9f:ee:52:ad:62:0c:71:a5:c4:20:da:
86:30:da:ca:c9:8b:85:c7:a5:5e:3d:95:01:f6:5c:71:12:c8:
ab:df:36:f3:5d:8d:ee:57:df:06:2d:27:10:ef:aa:57:7c:f9:
b0:54:8b:86:94:fe:64:f6:07:2f:86:0b:5a:68:98:b4:dd:b6:
cf:9f:83:70:7f:06:c3:7a:27:be:5f:85:1b:4d:56:7e:70:bb:
79:8c:9d:2d:09:07:5e:02:a0:0e:8f:88:12:da:b3:30:2f:e6:
b5:3d:9c:52:c8:d0:60:3d:7e:f9:d1:6e:8c:29:62:5c:d9:59:
83:0b:d4:a6:f7:09:9d:b6:29:ce:f4:60:d7:cc:61:a3:06:f8:
12:75:e2:29:ff:86:a6:b2:3d:7e:ee:40:bc:17:ad:9d:a6:6e:
f8:ed:91:01:03:1a:b8:68:1b:01:02:ed:42:a9:61:69:b1:a2:
f6:63:4b:e0:51:b9:a3:85:61:51:89:c6:ac:ca:05:b0:bc:a7:
82:18:5c:59:21:2e:a3:d7:50:f5:a5:6e:99:eb:e4:a4:2c:d4:
09:18:1f:c0:9f:23:a8:71:7c:de:aa:5b:99:0e:e4:25:93:57:
4a:c6:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:27:02 2025 by rpki-client