Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: U94dqybSCdfpx/FcYsC5bUOum5KsFlS9XiIYnkBFMPw=
Subject key identifier: FD:53:C9:0A:80:68:3A:A1:98:F1:28:08:B7:07:96:3B:0C:90:5E:D9
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 0196BCA4D3FD168A915424B8494E0B4D2FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0617
Signing time: Sun 11 May 2025 00:00:40 +0000
Manifest this update: Sun 11 May 2025 00:00:40 +0000
Manifest next update: Mon 12 May 2025 00:00:40 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: nA6KZ0IOiMsfcna4OikXs9/x5M5xO+E+kPSQb93/vo0=)
2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:d3:fd:16:8a:91:54:24:b8:49:4e:0b:4d:2f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: May 11 00:00:40 2025 GMT
Not After : May 12 00:00:40 2025 GMT
Subject: CN=fd53c90a80683aa198f12808b707963b0c905ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:96:49:48:3d:06:75:98:d2:a4:98:2c:fc:
f7:93:dc:fb:ed:e3:23:03:72:46:3d:07:1b:27:ff:
ef:59:63:9d:f5:d5:5e:e4:09:8c:de:4c:cf:9d:aa:
52:12:e8:2a:70:62:da:c3:59:12:f9:b1:67:0c:e0:
0b:84:bf:92:c1:de:cf:42:c1:01:c8:b2:65:40:a7:
f3:25:c3:8b:34:96:ed:45:a9:75:0e:a9:5a:66:10:
17:43:b5:47:35:e0:14:29:d3:9f:ba:48:c7:8e:8e:
2f:12:bd:35:aa:81:32:e8:30:58:7f:fc:16:77:04:
f0:51:ad:04:7b:1a:9d:c6:c9:7c:7a:b6:19:ba:29:
bb:8b:9b:3a:10:7d:2a:b1:3a:64:43:73:4b:d3:90:
9b:28:63:b3:7b:ac:04:f2:1c:37:94:38:0f:39:25:
ad:65:e2:7c:e6:7c:1b:83:71:b7:e3:33:6c:c8:9a:
a9:40:2c:f0:50:82:8d:9c:25:d9:be:0a:13:87:4b:
51:6b:28:47:05:ac:3d:dd:04:19:d3:d3:87:29:2e:
15:03:7c:2c:22:e7:e6:7f:a4:a0:77:9b:64:25:c1:
a1:80:ed:b4:ab:a9:64:84:5f:43:41:e6:e8:82:af:
7b:4c:7c:5b:b6:e2:93:d4:af:5b:b8:a7:90:1b:88:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:C9:0A:80:68:3A:A1:98:F1:28:08:B7:07:96:3B:0C:90:5E:D9
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f8:20:d9:49:21:44:ed:70:1d:7c:87:e7:df:1a:b5:51:ad:
c5:38:00:80:69:60:9d:97:02:ac:4d:df:32:fe:8f:99:c8:41:
73:5a:42:7c:94:07:3a:d5:f0:b3:1f:91:ea:f2:6f:bb:42:25:
70:2e:3a:7b:ac:cd:fe:dd:4a:c2:6b:ad:41:a6:37:da:91:ac:
34:da:cc:f1:c9:91:2b:a8:12:30:cf:aa:37:6a:30:0a:5b:ab:
93:bd:b5:7c:ef:8d:d7:b4:b9:e5:ec:b8:a2:9b:18:99:56:1a:
37:0c:c3:09:64:6c:ea:01:88:72:75:86:41:de:0b:3b:65:60:
83:4a:25:3d:9b:3f:a7:34:f4:a8:8c:26:2f:23:36:2b:83:a9:
c3:44:48:d8:78:a3:ef:5c:d6:22:0a:dc:1c:b2:2a:b5:06:c1:
03:a0:1d:af:5b:a2:65:58:87:e6:40:f9:6d:b3:0d:33:ec:f2:
3e:7e:78:74:b0:72:a0:8d:73:b5:10:d6:34:8b:14:7d:17:f2:
87:be:4e:40:b1:4d:ad:3d:6d:77:55:a5:87:25:26:6d:d3:73:
6c:0e:f1:c5:13:e1:d7:6a:1a:0d:4b:c8:ab:5d:c6:bf:7e:43:
84:1e:39:0b:6e:f9:88:e4:d8:20:40:06:48:fd:b3:42:48:be:
dd:91:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:57 2025 by rpki-client