Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: 6j1otLkXHfcqDx4ExNQYYj72NXls67Bf5rsLM/w3TJg=
Subject key identifier: 74:95:9E:60:B2:E6:BC:23:A2:AC:D0:49:52:CA:0F:98:E9:6F:C1:A8
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 0196C984C36E1B30C9300E0F6CDD5B6419DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1490
Signing time: Tue 13 May 2025 12:00:43 +0000
Manifest this update: Tue 13 May 2025 12:00:43 +0000
Manifest next update: Wed 14 May 2025 12:00:43 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: lBBMzxczl3+yN09U0asSOxVqSpgxs6s4r76j8INl7gg=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:c3:6e:1b:30:c9:30:0e:0f:6c:dd:5b:64:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: May 13 12:00:43 2025 GMT
Not After : May 14 12:00:43 2025 GMT
Subject: CN=74959e60b2e6bc23a2acd04952ca0f98e96fc1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:17:7c:c0:d7:27:b9:9f:84:44:e2:bf:0f:
52:64:67:26:a5:db:4e:ff:95:ea:9d:d7:43:55:22:
1a:25:b8:bf:9c:04:11:b5:b7:4c:0d:b0:86:39:5f:
ee:6f:11:10:bf:c7:ee:ba:ab:54:1c:10:f2:fc:8e:
f5:9b:78:46:57:d4:b8:39:9b:26:10:78:e3:22:71:
65:7f:c6:ee:ea:50:66:2f:18:8f:51:50:fe:cf:3c:
d6:d3:3f:b7:1f:0f:0a:70:65:d9:70:25:23:9b:3b:
1c:32:52:0f:b7:6e:57:b2:62:8b:67:08:ac:f3:ed:
0c:25:04:93:b8:47:1c:50:ba:a8:80:da:4b:6b:08:
77:1c:79:5c:2b:6e:50:2c:d6:a0:1d:c6:fc:ff:43:
b2:ef:b2:a9:81:ef:87:38:1a:8e:07:de:48:08:7f:
8b:19:1f:5c:4f:3c:ba:22:36:c3:93:10:6f:ed:7c:
18:70:6d:fd:02:4b:1f:fa:1c:cc:d7:8f:7e:2a:40:
96:4a:02:e5:26:15:5e:9d:87:dc:04:b3:b5:9e:d2:
66:ef:4c:d3:b7:91:52:e2:40:28:fe:e3:4a:b9:e9:
f8:0c:42:33:ac:54:47:78:f2:3d:f5:a7:30:98:0a:
b9:a9:8d:3a:51:cc:76:c3:c6:02:1c:ca:f0:29:7b:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:9E:60:B2:E6:BC:23:A2:AC:D0:49:52:CA:0F:98:E9:6F:C1:A8
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b6:61:93:90:68:e6:45:16:44:94:7b:e3:d6:26:5a:60:ac:
96:5b:9f:99:d7:8d:9d:ea:e8:d9:f4:b1:fe:84:1f:08:63:db:
f9:cb:c9:e9:2b:b6:36:c1:e8:2a:6e:12:91:a1:62:f7:cc:56:
05:47:19:55:cb:cf:95:20:8d:a3:38:09:17:d7:8b:e7:aa:5f:
56:3b:71:59:cb:99:64:ee:28:19:c5:88:c2:bf:10:46:da:85:
3d:01:d3:c8:b6:fc:49:55:c2:f8:a2:a0:6f:75:41:f1:c4:f8:
8f:55:e6:5b:4f:b4:a7:91:4d:04:85:87:ac:fa:1f:df:b5:40:
49:d9:31:90:c7:df:16:81:aa:56:d6:6a:ca:60:82:34:fb:1a:
ac:8d:20:7d:40:b6:39:1b:a3:8c:e2:cd:3a:95:fc:b5:9d:fd:
66:64:26:01:0a:3e:8a:39:f5:6a:9b:26:78:20:7b:4c:03:dc:
69:da:b2:41:8d:36:51:b6:79:a5:64:d1:83:30:77:16:ed:ac:
42:22:ad:98:a7:bd:7f:80:04:22:aa:6d:b4:94:67:20:84:4d:
5e:26:97:2c:db:9d:7f:7b:9d:d9:c0:74:0b:96:49:33:88:59:
18:c1:e4:9f:4e:f1:e8:ce:1f:e8:ab:fb:0d:9e:56:57:77:62:
48:30:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:13:44 2025 by rpki-client