Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: Pf+W5rCl3jUA0zhcjOEGVmr1W2ZQIpPOukuo+MbI+Ds=
Subject key identifier: 1A:E9:C3:4B:CB:DC:9F:ED:C1:88:53:06:E2:87:6E:66:C1:22:70:E5
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 0197BAEBDDDE6B25F8B7037A2B6ED5A04067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 0288
Signing time: Sun 29 Jun 2025 09:01:49 +0000
Manifest this update: Sun 29 Jun 2025 09:01:49 +0000
Manifest next update: Mon 30 Jun 2025 09:01:49 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: lCRboSl4HId2/qZ3SOEtRDZx9RkMGbebpMEIahAF6tA=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:dd:de:6b:25:f8:b7:03:7a:2b:6e:d5:a0:40:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Jun 29 09:01:49 2025 GMT
Not After : Jun 30 09:01:49 2025 GMT
Subject: CN=1ae9c34bcbdc9fedc1885306e2876e66c12270e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:e8:e2:56:ef:38:36:0b:bc:ed:56:15:f2:
79:37:43:88:f1:73:76:0e:56:95:72:3d:ca:2d:0c:
ce:c7:60:2c:1c:36:08:46:e4:01:a2:2f:f1:32:9d:
e3:6e:7e:38:b9:e9:b6:e7:df:93:b6:ba:48:e0:f0:
09:aa:e5:1a:2c:34:6a:f2:5d:2f:90:fb:17:d4:57:
7f:d0:50:7c:48:e2:aa:98:66:c5:12:30:e9:31:69:
94:55:3a:8a:db:2e:bb:8e:9f:83:e4:cc:de:7d:0f:
bd:47:1a:62:68:6f:51:f5:b7:60:da:76:0d:d7:44:
69:e2:6d:ca:b4:3a:a8:28:45:2c:63:43:b3:6d:9e:
76:a7:d1:58:20:b7:27:27:9d:d0:db:1e:dd:fe:65:
e2:aa:6c:39:ce:01:48:13:03:96:ec:b7:dc:e1:7f:
2a:b0:e4:e5:f7:4b:36:ff:51:bf:ad:59:a7:93:77:
7f:97:ae:6b:0c:c4:9e:43:c2:97:c3:12:34:d0:d1:
17:76:e6:73:d3:d5:e7:a3:5e:5d:b4:78:ad:1d:80:
09:70:7a:98:d9:64:cd:c0:dd:21:77:43:f2:74:b4:
93:25:79:6f:11:64:f5:be:99:23:26:cd:ad:5a:2c:
5f:eb:c3:df:99:eb:57:63:60:27:9e:35:b9:17:2e:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:C3:4B:CB:DC:9F:ED:C1:88:53:06:E2:87:6E:66:C1:22:70:E5
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:eb:2d:d5:a9:4e:91:24:b2:16:55:fe:de:0d:c6:c1:62:6b:
9f:ec:35:11:eb:ba:b2:ad:47:10:1f:6f:fc:16:82:98:bf:dc:
51:ef:d8:00:7d:21:2d:b9:00:a5:8b:4a:b4:b8:bc:9f:a3:7f:
48:aa:2c:71:f3:28:22:34:4b:3a:5a:e3:78:6a:ab:a0:86:5b:
1f:c6:d8:1a:05:2b:ff:34:6c:92:58:b7:0b:53:3c:48:f9:93:
ba:6b:2b:4f:58:48:a7:89:34:84:27:0f:57:08:91:cc:15:ab:
61:38:5d:b4:af:63:ed:cc:ad:57:0e:4b:2f:6e:b7:20:5c:22:
7b:18:ca:a1:0c:c4:a0:8e:95:f5:3f:7e:5f:3a:2b:2d:1f:4a:
a7:73:b6:8f:21:9c:d3:b1:ab:12:bd:2a:4a:47:a2:68:ae:ac:
02:f1:2a:e9:ff:94:85:48:2c:2e:c5:43:a2:2a:21:0c:af:9d:
a5:23:d6:c7:1e:59:16:27:07:1a:92:80:f1:3f:35:6e:29:f2:
9d:24:47:d8:30:14:74:87:5d:06:4c:66:db:2d:3b:4c:89:3d:
82:c6:d3:b5:41:8d:d9:c2:3f:11:ea:fa:4d:19:c8:0e:16:32:
0e:54:57:c6:26:55:e0:44:aa:59:05:41:86:98:a7:0d:1a:5c:
36:f4:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:36 2025 by rpki-client