Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: J/EvPfxz4xJWoprc8GNqmnEafD/tSZd0jMGZBkmFfbE=
Subject key identifier: 6C:AE:97:1B:04:3C:FB:60:8B:16:1D:46:71:BF:DA:AD:77:59:81:0A
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 0197B5C5118C62CDD6A7757D74B526594B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0698
Signing time: Sat 28 Jun 2025 09:01:20 +0000
Manifest this update: Sat 28 Jun 2025 09:01:20 +0000
Manifest next update: Sun 29 Jun 2025 09:01:20 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: gNvqObgCSiWnXnNk3Dao1tsGBAgx1Lkx2INWK/+MM70=)
2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:11:8c:62:cd:d6:a7:75:7d:74:b5:26:59:4b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Jun 28 09:01:20 2025 GMT
Not After : Jun 29 09:01:20 2025 GMT
Subject: CN=6cae971b043cfb608b161d4671bfdaad7759810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:e8:fb:df:50:0a:78:13:92:d2:ee:26:9b:
33:21:d9:8c:16:9b:21:d3:b2:ca:2e:55:e6:06:00:
a4:89:07:9e:d5:f8:ec:0f:2b:69:34:f3:1b:0b:72:
1d:49:ff:ec:6f:7f:c8:04:a1:46:e0:7c:64:8c:aa:
15:a1:35:dc:b0:e8:78:b1:a7:42:a7:6e:a1:a0:18:
c4:1c:ba:4f:cd:65:15:ea:e7:75:6d:a6:69:3c:10:
fe:d2:54:bd:79:ae:aa:71:d0:63:bc:7b:16:06:18:
7a:2e:fe:20:b6:71:61:3c:84:22:cd:1a:f3:f1:22:
98:87:5b:0a:81:52:eb:1a:8a:02:f8:9c:b2:0f:0e:
f2:d7:33:c1:a8:b0:06:4b:15:d8:d3:95:cd:68:f5:
63:33:09:e2:f0:79:4b:29:c8:1c:04:20:dd:05:25:
f0:6a:2a:1a:1d:97:1a:17:2d:6c:64:04:a6:84:f5:
f4:95:d1:aa:55:cf:3f:e3:3e:39:f3:92:a7:16:f8:
ea:58:4f:3c:f3:25:86:dd:d9:a2:78:ab:6e:5e:b7:
0d:04:6f:b1:d8:12:d9:0b:49:60:ae:62:ca:10:9b:
8e:4c:69:e2:d5:03:3e:8a:3b:1a:8f:aa:23:76:01:
29:ae:a4:b8:db:cc:95:d8:ea:72:7f:34:b1:a5:94:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:97:1B:04:3C:FB:60:8B:16:1D:46:71:BF:DA:AD:77:59:81:0A
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:71:7f:c8:6d:15:fc:c5:bd:78:55:eb:b4:c5:8c:fa:d2:6c:
7b:fc:a3:ed:47:a3:5d:54:04:91:62:93:9f:50:d7:1d:88:98:
4b:57:0f:c9:86:60:6f:2d:c7:c1:5d:27:05:a4:2f:36:b4:26:
72:ad:63:fc:16:8a:84:57:ff:ed:00:f1:52:fc:63:bb:32:31:
ed:2d:df:f4:32:2d:58:2a:76:36:22:4f:27:f0:da:b8:5c:c3:
fb:41:89:79:21:94:d5:87:fd:c8:11:ec:a8:6c:12:f2:f7:91:
ad:b7:79:e8:24:2d:8b:1b:ec:99:e9:91:5f:f9:f7:58:5f:c3:
59:61:6e:9b:de:24:a8:09:80:64:de:a7:95:6f:c0:a8:3f:90:
a1:c8:09:fd:02:26:92:eb:42:cf:99:61:37:2e:ec:5c:f1:01:
c1:dc:ff:91:89:41:3b:2b:39:6f:dc:5a:bf:c0:70:6f:26:75:
83:e7:d7:54:f8:44:85:03:35:f9:88:c6:93:cd:f5:4b:df:3d:
45:17:b6:bb:a4:ea:c0:67:fe:5f:b7:4b:e1:17:e9:f4:c6:49:
ec:64:dc:23:9a:d6:cd:38:a3:66:34:a9:5e:b9:ad:4d:53:d5:
76:8b:58:3b:5a:12:30:11:82:24:c6:73:e4:be:f7:70:9a:47:
d2:76:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:15 2025 by rpki-client