Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: QOL0twzqe2p+hHLAJlP6vmR0QuDOj7xZzfwAW8dDZ6M=
Subject key identifier: 2A:E8:D2:50:B8:9F:A4:05:31:D3:FB:4A:CB:B1:01:48:F0:B0:1D:1B
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 0196C871B1F73FEBD92B7114CAB06294D6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 07:00:16 +0000
Manifest this update: Tue 13 May 2025 07:00:16 +0000
Manifest next update: Wed 14 May 2025 07:00:16 +0000
Files and hashes: 1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: aWx2UU8vqqlLfmcRQJqrR3UrjHiiDwSchO9cmeA9mp0=)
2: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (hash: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:b1:f7:3f:eb:d9:2b:71:14:ca:b0:62:94:d6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: May 13 07:00:16 2025 GMT
Not After : May 14 07:00:16 2025 GMT
Subject: CN=2ae8d250b89fa40531d3fb4acbb10148f0b01d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:9c:4c:83:e1:74:0c:88:da:0d:e2:5d:58:
33:1e:f5:5b:62:e0:e8:f5:cd:fa:57:6a:8c:c2:a1:
e1:af:12:8a:92:f1:dd:d0:62:95:6f:a5:55:12:67:
bd:4b:a9:cd:c7:ca:5b:c2:86:ad:47:d9:77:00:4c:
d8:6f:9a:ec:14:f5:ef:3f:da:64:bf:9e:49:5f:88:
ef:58:74:64:9a:43:e1:15:fa:8d:f8:90:34:36:4c:
4b:60:4e:fb:ee:57:5e:f9:40:4c:e0:dc:78:35:3a:
f5:d9:9f:24:94:1a:db:77:7c:1b:f3:a7:4e:17:fa:
b0:27:ce:df:af:9c:e5:5f:92:cb:4a:a1:62:84:8b:
e6:7c:ef:70:61:6a:48:94:53:fa:14:5d:6c:54:98:
f7:6b:bc:c6:7b:7b:b1:3d:4b:b5:96:dc:94:c3:4a:
35:16:99:cb:a1:8e:cb:9f:fc:15:72:45:5b:b1:e0:
f1:d6:65:5e:47:4f:52:b3:59:5b:97:1e:1b:a1:ae:
7c:4a:9b:44:72:9f:e7:b0:a0:76:34:9c:99:e5:d0:
0c:a4:b7:dc:5f:c8:b9:dc:fe:3e:c5:b0:85:74:ae:
fc:29:d7:85:a1:d9:4a:ee:82:c5:87:73:d8:3a:14:
71:43:9d:8b:c1:02:e9:29:13:8f:ea:87:17:71:a7:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E8:D2:50:B8:9F:A4:05:31:D3:FB:4A:CB:B1:01:48:F0:B0:1D:1B
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6b:e3:66:54:dd:0c:48:11:72:3a:6a:37:45:ce:93:da:38:
7a:ca:40:ca:b1:e5:7d:31:7b:3c:b1:78:de:28:eb:4d:0c:f2:
98:ce:a4:49:92:98:05:03:f4:d4:d4:a8:0f:d7:ba:e1:c7:3e:
88:45:71:ba:f3:39:8e:fe:b9:a8:5e:d9:0a:18:f5:0e:c5:5b:
66:23:6d:72:63:c4:a1:c9:e4:8f:97:03:6f:2e:cd:da:d1:ac:
b3:4d:12:f5:57:c4:3b:5d:e2:35:7a:2a:82:7e:49:84:14:6d:
1c:0a:c1:63:a2:e0:47:67:9c:cb:6d:ba:7e:cc:e3:23:08:84:
06:8d:8c:12:88:71:19:82:6b:2a:76:08:22:5c:8b:16:a7:da:
62:3e:9a:32:e9:5d:95:6c:7e:85:86:4b:da:35:1d:92:95:bc:
6c:2a:f5:33:a9:73:f5:32:8a:95:39:ce:b4:a4:2a:69:98:c8:
90:79:7a:d9:d4:f8:ae:db:54:d6:fb:46:cf:3c:15:c5:5c:0c:
e3:1d:6c:70:70:58:34:29:48:47:72:9f:f1:81:b4:7a:1f:53:
3e:10:a9:87:f8:f1:04:d5:18:11:29:5f:cd:b9:c6:5f:6d:10:
4c:57:4a:c2:6f:31:69:22:f0:fc:c3:aa:ec:29:64:1a:a5:07:
0f:db:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:18:47 2025 by rpki-client