Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: yyEpE8o/KkAiTi7BWxy9ugSX+ZtpHLfta1amoxxJWP0=
Subject key identifier: 53:7A:1C:70:B3:79:EB:C7:3E:61:7C:4D:C6:53:22:39:06:BB:F4:C7
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 0197B7EA3B1B3AB592998FFC03EBD813FAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0C8B
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: PqF9CblQf/qS8njNOSraWHarIn6mnZ7PnJ3lqezo6KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:1b:3a:b5:92:99:8f:fc:03:eb:d8:13:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=537a1c70b379ebc73e617c4dc653223906bbf4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:2d:b1:3c:eb:dd:18:86:a0:11:e3:24:9b:
7c:4b:57:35:42:13:33:0c:d3:1f:e2:43:4f:94:a0:
7d:df:8c:c3:4a:e8:db:db:ab:30:be:a7:4a:33:6e:
4a:5b:fd:4d:fe:8b:01:dc:bf:e9:ae:fc:c4:0e:2c:
7c:a2:01:2b:7f:6b:bc:58:03:f1:d2:98:a6:5d:8d:
fc:c5:ce:65:0a:46:ec:58:d4:04:4c:e1:fc:f9:1d:
f9:5a:5b:e7:ee:31:28:36:41:4d:e7:73:d3:44:a5:
d8:d4:71:f8:58:11:a0:24:4c:1f:60:33:23:91:0c:
d1:61:dc:4f:88:0e:e3:4a:f1:de:07:c2:e0:bc:91:
31:3d:75:3a:1f:5c:ce:a8:db:c6:b2:54:80:f8:7b:
7d:fd:ac:ed:01:ef:1d:a6:fe:b8:c3:3a:b6:5c:19:
92:65:1f:02:83:e9:79:34:d0:2a:84:79:db:20:ad:
9e:cc:c9:54:46:a4:08:40:f3:e7:ae:fb:53:c3:ae:
e1:90:c3:dd:68:b5:ef:b0:6a:e0:37:8c:98:f1:8a:
87:83:e4:52:cc:27:31:24:49:04:a0:29:11:2f:35:
47:25:f6:48:05:77:7e:6f:6d:e9:37:a3:db:73:7f:
12:e7:20:26:df:3c:40:18:53:0c:6c:89:b3:75:00:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:1C:70:B3:79:EB:C7:3E:61:7C:4D:C6:53:22:39:06:BB:F4:C7
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:19:78:e1:9a:46:79:1b:d0:2b:34:bf:e4:48:fb:91:6a:2a:
92:5d:79:b9:04:e6:0a:9e:c0:60:ae:48:6a:1d:7d:59:8a:8c:
46:68:9f:d5:08:0b:73:47:c3:ca:32:f3:a9:3c:ec:f9:b2:c6:
e8:3a:3d:48:05:70:10:46:7c:55:f0:df:cc:2e:47:e5:c1:54:
71:de:7d:38:1b:e7:79:75:95:77:dd:25:53:af:c2:ec:08:00:
82:71:72:55:33:1e:d7:62:e4:a9:d6:2c:39:ec:30:1c:05:41:
aa:25:98:95:1b:db:af:dd:bc:36:e4:de:42:85:77:34:4c:7d:
b1:47:12:06:8f:e8:42:e8:0c:51:8f:85:6e:08:42:6c:c9:6f:
f4:4d:90:9a:9c:b9:5b:99:2b:43:ad:e3:d3:8b:9c:9c:32:25:
9c:da:78:f5:8f:25:a1:77:38:a8:cb:6d:12:f3:46:3a:2c:ff:
0f:14:a2:10:31:33:67:8d:4d:b1:b1:cc:82:76:1c:d9:29:04:
68:3d:66:c4:b0:12:5c:ae:93:92:6c:71:f6:24:cd:e0:d9:ff:
12:04:ea:50:f6:a7:bd:ca:ef:27:5c:29:42:eb:1f:cf:9d:ec:
34:54:d0:ce:84:31:6e:01:c2:c6:4a:e4:db:ec:ef:23:c7:d9:
63:d6:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:21 2025 by rpki-client