Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: kLSg6nkdhhYqZVMOsT9trsRzngFuUV6/vBfuwNp0v4A=
Subject key identifier: 2B:77:A9:BB:53:33:1C:38:B5:02:84:97:60:C3:AE:FB:4E:94:3E:4C
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 01969D199191E1C4D3F91403523385EBAAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 01F4
Signing time: Sun 04 May 2025 21:00:20 +0000
Manifest this update: Sun 04 May 2025 21:00:20 +0000
Manifest next update: Mon 05 May 2025 21:00:20 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: g/F/HiKevDv5MgLQTsBeLQubaWSl4RQ4NGxy7hbXtv8=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:91:91:e1:c4:d3:f9:14:03:52:33:85:eb:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: May 4 21:00:20 2025 GMT
Not After : May 5 21:00:20 2025 GMT
Subject: CN=2b77a9bb53331c38b502849760c3aefb4e943e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f0:28:46:8e:82:ab:8e:62:50:13:66:2e:f0:
a6:0b:4d:ed:ea:2f:fe:6d:f8:e4:17:9e:93:de:b5:
04:91:ee:84:41:ba:43:84:71:20:0c:53:a0:bb:85:
66:e1:d5:8a:99:82:a8:50:2f:6c:49:a6:b5:4f:d7:
19:9c:5a:e9:e3:c4:79:32:ff:7e:10:e0:f6:40:22:
ef:ac:01:64:82:df:4f:11:e1:78:46:4d:e1:92:c7:
e3:11:35:32:43:c3:1e:d3:7a:04:2d:b6:73:0e:56:
a0:f3:fd:0a:86:78:e0:41:80:8a:06:85:9a:8a:08:
cd:e5:f5:13:61:e4:c5:32:9b:c5:f4:83:56:2a:de:
9b:5e:23:2f:ec:6f:58:f3:e5:a4:d9:6b:b1:cb:d7:
58:33:b8:d3:b7:91:2c:b8:4a:6e:90:5b:04:2d:a0:
fc:77:a0:2b:6b:e4:f2:50:77:1f:58:ad:98:44:12:
ee:9a:43:03:06:78:c0:5d:0e:6b:7c:94:95:d8:e1:
cc:48:9b:57:0c:4f:fb:c0:13:68:d8:1b:06:20:16:
cf:8b:a9:07:1b:ec:c4:40:c7:c4:70:33:69:fd:ed:
eb:c4:f4:8e:a8:fa:01:3f:96:fc:f6:6c:e4:b9:1d:
ed:b8:c0:17:63:2e:3d:1f:1c:8a:44:cf:a4:9b:3a:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:A9:BB:53:33:1C:38:B5:02:84:97:60:C3:AE:FB:4E:94:3E:4C
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6d:8b:e1:d8:31:e9:a7:bc:6d:c9:9c:9f:73:9d:d7:e8:6a:
3e:c7:75:ee:75:aa:47:e0:a1:8d:57:6a:02:9f:9b:62:e3:69:
60:c2:14:01:cc:f7:2c:60:b8:f4:b1:e1:25:82:58:3a:8d:fc:
4d:45:6b:3a:49:8e:4e:4a:8c:7e:61:36:10:0d:99:92:bf:25:
64:8d:b3:2d:60:89:28:b3:99:cc:97:e6:15:4a:bf:5e:b4:ca:
bb:78:b2:ef:1c:67:d2:7f:62:27:60:56:cd:7c:35:5b:ea:8e:
c3:1a:55:ed:77:ef:ab:c3:ac:e8:90:5e:8b:7d:6c:45:72:84:
0a:75:d1:ed:30:ea:ca:d3:3c:7c:8d:d6:bb:bb:42:31:02:17:
4b:a2:f6:8d:c1:a3:c3:0e:99:98:22:49:f5:db:f5:1c:36:81:
cd:3c:2d:6e:09:62:90:8a:5d:d4:c2:f7:00:57:54:57:93:09:
91:b4:15:d7:8a:7d:8a:33:ce:ff:da:29:d4:e6:6a:93:16:d8:
df:45:da:f6:13:87:50:fc:78:2f:5a:ee:18:52:f8:79:01:d7:
43:ca:92:10:1e:92:ba:27:99:6a:60:bd:46:02:e1:08:9d:bd:
91:d6:16:a5:69:6c:53:b9:c5:82:f8:3a:e8:a0:83:7f:1b:34:
15:36:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:37:18 2025 by rpki-client