Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: K55BBIs0PBS6YHN+BBlw+R2jfdIE2zayiqjNjyhY6lY=
Subject key identifier: A9:88:E1:3C:9E:9E:CC:C7:4E:A7:57:C3:98:D5:DC:31:EE:B6:06:E3
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0197B88FDD6977F1DB686BA4FAEC60AEDC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 03DC
Signing time: Sat 28 Jun 2025 22:02:05 +0000
Manifest this update: Sat 28 Jun 2025 22:02:05 +0000
Manifest next update: Sun 29 Jun 2025 22:02:05 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: YMCnXXxnTh9wuVFtaB7E7bmiT9tD1YOyeCoHMvefoBE=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:dd:69:77:f1:db:68:6b:a4:fa:ec:60:ae:dc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jun 28 22:02:05 2025 GMT
Not After : Jun 29 22:02:05 2025 GMT
Subject: CN=a988e13c9e9eccc74ea757c398d5dc31eeb606e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:30:93:10:98:de:98:7a:a3:d2:9f:4e:8e:
c1:43:1d:d3:5b:3a:fc:50:ea:fd:84:01:52:4b:a5:
24:87:fc:cb:29:49:5b:c3:5e:4a:cb:b5:03:bd:6e:
6d:37:8e:40:62:af:99:79:1b:85:69:97:97:9e:6b:
80:8f:40:3f:1c:57:b0:48:12:75:de:29:51:b1:35:
64:63:39:d9:eb:1d:d8:59:bf:03:9b:9b:3d:de:f1:
a1:84:6e:10:ad:b3:1a:7b:a2:aa:d5:c4:8d:03:3a:
04:af:71:2d:b4:ff:13:4c:07:c3:1d:e2:81:53:1f:
b1:d5:f7:bc:64:14:2a:ed:d1:78:f8:bb:11:56:fd:
27:00:c2:ba:92:e3:ec:7d:f8:02:8d:03:2e:22:fb:
70:c1:8d:a4:03:2d:41:c0:7a:28:1f:17:d6:4b:fc:
a5:e1:3b:27:62:90:ca:d9:04:48:e7:77:d2:38:ff:
5a:02:35:31:71:b7:1a:59:c5:56:82:f8:fe:29:92:
78:1d:68:6c:fd:95:a1:d2:a0:36:64:b0:22:b7:f6:
f1:09:da:c9:11:12:7f:4b:6d:25:f6:a0:b2:91:bd:
6a:c6:8a:18:29:77:1c:51:45:e1:33:32:91:a2:7f:
5b:d3:f3:1a:7c:57:1c:7c:33:aa:cd:42:4b:d7:b2:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:E1:3C:9E:9E:CC:C7:4E:A7:57:C3:98:D5:DC:31:EE:B6:06:E3
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:35:f3:ba:f7:0e:5d:48:ff:b9:2e:68:72:51:bd:f5:33:35:
cb:6f:1e:71:bd:45:30:a2:93:58:0d:bd:fa:4a:23:66:41:1f:
14:d7:96:b4:08:fb:74:be:8e:56:e0:46:03:37:0a:44:4b:55:
ba:ce:af:a1:ef:68:cf:ba:9c:42:e2:d3:31:6f:dd:0b:5c:67:
80:4e:30:27:83:88:23:0b:15:e1:bd:6f:0d:af:27:1c:39:80:
16:11:ba:cf:22:d1:08:e5:66:b7:1b:82:37:a6:67:f4:ea:76:
a6:2d:c7:b4:1d:78:c2:b4:d5:6d:88:fc:c4:ce:2c:fd:59:0f:
4a:ef:0f:50:83:70:78:45:0b:fc:56:fa:63:50:f5:84:96:3b:
d4:d2:81:13:09:95:38:92:de:66:fe:f4:9c:d9:b3:24:6e:17:
a1:9d:16:57:66:f8:98:0c:34:3c:7c:5b:22:dc:6d:a5:73:67:
86:bd:48:1d:14:ad:b3:5c:5a:d7:03:8a:65:fb:e0:63:e7:a3:
68:b8:09:4c:73:84:e1:2a:40:bc:d1:38:57:f0:e0:85:db:37:
e9:a9:98:ac:59:84:d1:4f:2b:8e:25:b1:02:09:da:8e:7b:1a:
44:38:bf:37:1f:7c:ce:44:f7:3f:53:99:07:22:0d:d3:f6:c2:
77:d2:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:21 2025 by rpki-client