Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: 9iC8CGpDmz25ENa6BIgHifprAQ/X8o7vYFxjENUE7ag=
Subject key identifier: 1D:C8:11:AF:36:11:F2:31:0E:53:88:F7:F0:B6:94:3E:63:28:CF:65
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 0196BAED567DFD15806E872F9B13B1B4A16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0C08
Signing time: Sat 10 May 2025 16:00:38 +0000
Manifest this update: Sat 10 May 2025 16:00:38 +0000
Manifest next update: Sun 11 May 2025 16:00:38 +0000
Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: wwII9qEWqQ4OI8ALGMKcrK6XY8igqo4PcW0a3osOcHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:56:7d:fd:15:80:6e:87:2f:9b:13:b1:b4:a1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: May 10 16:00:38 2025 GMT
Not After : May 11 16:00:38 2025 GMT
Subject: CN=1dc811af3611f2310e5388f7f0b6943e6328cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:7b:14:79:d4:c6:d0:3e:27:9f:92:71:36:
8f:70:9d:ee:25:82:97:d9:4d:c2:1a:b2:f5:4b:3d:
ee:c7:9d:e8:7f:88:35:df:ef:8b:6c:af:44:4b:93:
17:59:fa:e0:52:78:2e:a4:1a:23:e0:a9:4c:12:8c:
0c:b2:02:11:af:2a:68:60:8b:52:77:a3:81:7c:1a:
0e:75:72:6e:75:a0:52:c6:22:eb:22:1b:1f:ed:23:
40:60:a6:74:cf:98:bc:26:54:e6:d6:34:23:1f:68:
ae:64:d6:ef:4e:5e:ea:99:92:56:95:e7:26:f1:0b:
54:01:8c:c6:81:fc:af:72:33:3e:80:6e:ea:a0:c3:
40:1b:9a:a4:81:d4:6a:78:c2:77:de:58:a0:e9:b7:
f6:2c:03:3e:de:e8:ca:3f:89:38:b8:d8:7a:2c:a8:
99:7a:02:e5:eb:fd:46:c3:0d:fd:71:f2:51:86:50:
46:b2:40:88:16:34:d2:c1:bd:23:94:39:ae:50:d0:
ee:e2:3d:9c:ab:14:df:51:05:df:de:ee:c4:2e:20:
f4:ac:13:53:e4:43:a5:76:5d:0e:59:1b:9f:6e:09:
2a:c9:6c:39:70:21:93:0d:39:47:7b:65:2c:2b:a4:
23:28:6d:fd:5b:4e:17:0d:39:eb:a4:7c:43:4f:69:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:11:AF:36:11:F2:31:0E:53:88:F7:F0:B6:94:3E:63:28:CF:65
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:c5:e7:66:00:f9:c6:a4:01:92:83:de:ab:f1:88:29:d2:
84:9d:ad:3b:17:e1:3e:94:a5:8e:ce:bb:80:ac:11:80:95:d2:
cb:0f:7b:b0:9f:e6:14:5c:48:07:f0:2e:80:68:90:ee:ba:84:
36:31:de:e7:e3:9b:05:34:73:c5:49:41:ba:e2:bb:cb:bf:3b:
a8:92:ff:3f:a9:c6:b8:e2:1d:d0:7d:93:95:67:9b:6c:17:53:
d4:f2:f3:f6:d7:8e:d7:8a:de:47:ed:f6:dd:75:f2:1a:0c:19:
14:21:c3:f0:aa:a5:dd:ee:eb:75:0e:a3:f8:07:0d:e8:ed:09:
47:d1:99:a6:72:af:3e:c9:9f:f8:a7:d8:a0:25:38:23:b3:ae:
e9:50:39:02:d2:ed:d2:81:41:50:76:15:65:f8:cd:12:dd:28:
ad:6d:6d:36:a2:91:55:fb:82:5c:1a:c2:71:ae:bc:45:f2:f5:
f5:f8:f8:b7:34:82:ef:11:7d:21:b0:dc:5e:f0:2e:80:c5:63:
19:1e:cb:2c:dd:30:7c:cb:86:61:23:88:25:98:33:91:11:b0:
92:ab:53:f5:0e:b1:96:b0:03:dc:f0:91:99:cb:8e:7a:66:25:
0c:b9:08:82:7f:9b:82:07:ab:b1:b9:23:b8:2c:c4:38:88:c1:
f6:cc:fd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67VZ9/RWAbocvmxOxtKFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3
NDJlNzYwHhcNMjUwNTEwMTYwMDM4WhcNMjUwNTExMTYwMDM4WjAzMTEwLwYDVQQD
EygxZGM4MTFhZjM2MTFmMjMxMGU1Mzg4ZjdmMGI2OTQzZTYzMjhjZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F97FHnUxtA+J5+ScTaPcJ3uJYKX
2U3CGrL1Sz3ux53of4g13++LbK9ES5MXWfrgUngupBoj4KlMEowMsgIRrypoYItS
d6OBfBoOdXJudaBSxiLrIhsf7SNAYKZ0z5i8JlTm1jQjH2iuZNbvTl7qmZJWlecm
8QtUAYzGgfyvcjM+gG7qoMNAG5qkgdRqeMJ33lig6bf2LAM+3ujKP4k4uNh6LKiZ
egLl6/1Gww39cfJRhlBGskCIFjTSwb0jlDmuUNDu4j2cqxTfUQXf3u7ELiD0rBNT
5EOldl0OWRufbgkqyWw5cCGTDTlHe2UsK6QjKG39W04XDTnrpHxDT2kN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3IEa82EfIxDlOI9/C2lD5jKM9lMB8GA1UdIwQY
MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt
MDc3OTAyOWFlMjIyLzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy
LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM7F52YA
+cakAZKD3qvxiCnShJ2tOxfhPpSljs67gKwRgJXSyw97sJ/mFFxIB/AugGiQ7rqE
NjHe5+ObBTRzxUlBuuK7y787qJL/P6nGuOId0H2TlWebbBdT1PLz9teO14reR+32
3XXyGgwZFCHD8Kql3e7rdQ6j+AcN6O0JR9GZpnKvPsmf+KfYoCU4I7Ou6VA5AtLt
0oFBUHYVZfjNEt0orW1tNqKRVfuCXBrCca68RfL19fj4tzSC7xF9IbDcXvAugMVj
GR7LLN0wfMuGYSOIJZgzkRGwkqtT9Q6xlrAD3PCRmcuOemYlDLkIgn+bggersbkj
uCzEOIjB9sz9HA==
-----END CERTIFICATE-----
Generated at Sat May 10 20:31:11 2025 by rpki-client