Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: f5pIcoqqt5txXMn1V1rhR8kvKSEZh+b9gQVDgLIHSwQ=
Subject key identifier: 4E:2E:BE:45:23:18:A0:B5:C1:F5:ED:D4:1E:3E:B5:E1:3B:ED:21:37
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0196722F641BB03F7055322C848A2298AFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 0333
Signing time: Sat 26 Apr 2025 13:00:30 +0000
Manifest this update: Sat 26 Apr 2025 13:00:30 +0000
Manifest next update: Sun 27 Apr 2025 13:00:30 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: tzC5sYtsmiS+MXlSAvTbK1l23LbqE6GSELd3KTjOVFo=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:64:1b:b0:3f:70:55:32:2c:84:8a:22:98:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Apr 26 13:00:30 2025 GMT
Not After : Apr 27 13:00:30 2025 GMT
Subject: CN=4e2ebe452318a0b5c1f5edd41e3eb5e13bed2137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:16:8a:3b:8a:7c:b4:fa:57:8d:df:68:b6:
a7:3e:5b:8e:f3:e9:69:71:25:f7:07:f2:f9:bd:6c:
fc:0c:22:d4:d6:19:48:03:ad:48:27:e0:78:25:20:
94:3c:c9:26:d6:63:09:a5:80:62:17:a6:2e:e4:94:
61:60:d4:b2:b1:26:fc:55:f8:a2:6f:c2:02:11:4f:
cb:bd:5f:97:0b:01:18:24:06:6e:6d:07:df:d6:de:
9e:14:91:c4:e6:28:e5:72:9b:45:48:30:73:39:07:
09:59:63:89:db:b9:2d:ed:2a:50:ba:02:c7:7e:95:
96:b5:52:06:63:83:21:67:db:16:9b:a8:1f:d3:35:
e6:0d:2c:3b:22:40:a9:85:cd:c6:20:7a:af:bf:39:
44:8c:47:5e:f5:ad:cc:fa:e5:95:7f:27:b6:ae:78:
d6:d8:71:71:24:b1:e7:5d:fc:b9:2f:66:23:47:11:
4d:0e:8f:e4:8e:08:bb:61:1c:a3:61:a9:40:24:b8:
4d:a2:f9:29:ab:ac:5c:e1:f3:1a:ef:5e:a1:64:28:
d2:c9:cc:5f:ed:04:5f:e0:06:b3:e9:11:b5:72:e8:
3d:70:bd:92:c0:0d:b3:8c:4e:9b:11:7f:18:bf:ec:
25:5e:91:b0:67:61:46:a1:9b:ae:56:0d:c0:67:53:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:BE:45:23:18:A0:B5:C1:F5:ED:D4:1E:3E:B5:E1:3B:ED:21:37
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:d2:2b:d9:04:bc:f1:0c:bb:00:58:a5:3f:2d:db:dc:33:
0b:8e:57:3c:7e:cf:31:23:a0:89:8c:7d:c0:11:27:02:e6:97:
e9:c7:76:1a:d0:7c:93:c9:c7:79:28:95:84:d9:91:c9:72:ee:
5a:4b:63:9d:fd:40:54:cf:1e:0e:c4:10:0f:65:99:5d:8c:6f:
6d:1a:5b:6f:e0:0e:88:4b:84:68:df:46:8e:02:03:dd:ab:68:
a1:21:a9:c6:8d:d7:df:30:65:fa:3b:57:89:73:f1:a0:85:17:
88:de:f9:c1:5b:9b:bc:9a:e0:f5:4b:66:69:80:d7:4b:32:b0:
2b:d7:94:36:19:ec:cb:00:34:af:a7:f6:5f:c2:dd:21:f2:03:
8d:56:09:6d:17:5a:b2:53:bc:62:02:a6:c3:27:90:6e:b7:bc:
3f:28:55:1c:2e:78:e1:03:82:92:57:78:85:98:b0:a6:47:92:
2e:13:bb:15:70:52:43:48:61:b6:55:07:72:d3:40:10:58:4c:
c9:1b:a9:7d:52:d6:f7:39:fe:3e:e3:fb:b2:0d:73:d4:d6:8d:
f9:38:f4:3d:31:a0:dc:7f:89:df:cc:88:a8:8a:6f:ab:c4:6d:
43:2c:66:45:5a:33:26:57:24:65:91:b0:96:c7:13:72:ce:36:
21:e1:85:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyL2QbsD9wVTIshIoimK+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj
ZGQ5ZDAwHhcNMjUwNDI2MTMwMDMwWhcNMjUwNDI3MTMwMDMwWjAzMTEwLwYDVQQD
Eyg0ZTJlYmU0NTIzMThhMGI1YzFmNWVkZDQxZTNlYjVlMTNiZWQyMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEYWijuKfLT6V43faLanPluO8+lp
cSX3B/L5vWz8DCLU1hlIA61IJ+B4JSCUPMkm1mMJpYBiF6Yu5JRhYNSysSb8Vfii
b8ICEU/LvV+XCwEYJAZubQff1t6eFJHE5ijlcptFSDBzOQcJWWOJ27kt7SpQugLH
fpWWtVIGY4MhZ9sWm6gf0zXmDSw7IkCphc3GIHqvvzlEjEde9a3M+uWVfye2rnjW
2HFxJLHnXfy5L2YjRxFNDo/kjgi7YRyjYalAJLhNovkpq6xc4fMa716hZCjSycxf
7QRf4Aaz6RG1cug9cL2SwA2zjE6bEX8Yv+wlXpGwZ2FGoZuuVg3AZ1MtZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4uvkUjGKC1wfXt1B4+teE77SE3MB8GA1UdIwQY
MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt
ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2
LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNvSK9kE
vPEMuwBYpT8t29wzC45XPH7PMSOgiYx9wBEnAuaX6cd2GtB8k8nHeSiVhNmRyXLu
Wktjnf1AVM8eDsQQD2WZXYxvbRpbb+AOiEuEaN9GjgID3atooSGpxo3X3zBl+jtX
iXPxoIUXiN75wVubvJrg9UtmaYDXSzKwK9eUNhnsywA0r6f2X8LdIfIDjVYJbRda
slO8YgKmwyeQbre8PyhVHC544QOCkld4hZiwpkeSLhO7FXBSQ0hhtlUHctNAEFhM
yRupfVLW9zn+PuP7sg1z1NaN+Tj0PTGg3H+J38yIqIpvq8RtQyxmRVozJlckZZGw
lscTcs42IeGFSA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:33 2025 by rpki-client