Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: 4r8RiUknqPTIDvxAIZQWHIj+tbNZSkrt6bEbJ3d9Wlo=
Subject key identifier: F8:85:FB:47:E5:75:3E:DA:EA:77:03:C5:DC:8F:7B:57:ED:5A:30:1A
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 01976F2CC042CA70ED3EF8E4EB822086D677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 03B6
Signing time: Sat 14 Jun 2025 16:01:33 +0000
Manifest this update: Sat 14 Jun 2025 16:01:33 +0000
Manifest next update: Sun 15 Jun 2025 16:01:33 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: 542ifzM6JpVuID/fZEfGT0bgLmGKDFX8Px7rk0bIwCs=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:c0:42:ca:70:ed:3e:f8:e4:eb:82:20:86:d6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jun 14 16:01:33 2025 GMT
Not After : Jun 15 16:01:33 2025 GMT
Subject: CN=f885fb47e5753edaea7703c5dc8f7b57ed5a301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:6d:eb:24:dc:70:54:b0:29:33:ae:43:c0:
66:f5:a8:b1:aa:9c:44:06:90:22:02:a8:bb:a4:a9:
c3:6b:6b:b5:b2:8d:75:43:9e:35:fa:75:74:d4:ba:
8e:19:f4:94:51:cf:00:33:df:56:a9:ff:76:b9:cd:
7a:48:28:81:22:d4:24:6f:62:d1:cc:9e:aa:a2:ea:
54:18:84:9e:f2:7f:e0:37:af:8b:21:65:90:62:a2:
79:5b:46:4b:7b:77:38:7c:ea:b3:f3:c9:67:9c:5f:
4b:bc:ba:a7:bf:97:0d:04:41:41:39:36:f7:a2:27:
83:3b:7e:c1:4b:3a:76:4b:79:c6:1d:ee:9d:9e:bd:
4a:8a:d4:2d:e6:17:4a:89:ed:fd:26:7c:18:f3:cc:
7e:0c:9f:cb:60:de:66:a8:e7:c2:b8:14:48:09:d0:
36:24:0b:6c:b2:b0:6d:06:a2:97:d7:58:14:3f:3d:
06:98:67:cf:7f:ab:e9:72:68:5a:93:60:a7:07:f2:
c1:6f:af:67:20:71:1e:78:6a:27:18:5e:c2:c7:ff:
d2:2a:aa:ab:6f:31:66:71:71:98:69:bc:e4:5d:8c:
2b:8d:45:24:19:54:2b:7a:23:79:00:c6:22:85:4f:
9c:75:eb:c0:fc:9a:07:a4:04:2b:c0:17:fc:bb:09:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:FB:47:E5:75:3E:DA:EA:77:03:C5:DC:8F:7B:57:ED:5A:30:1A
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0d:f8:0a:88:3b:48:5f:b2:aa:44:f5:d6:16:ff:61:2d:a4:
46:9d:a8:1f:e3:57:e2:12:ea:eb:3b:76:23:74:00:64:e2:89:
31:f6:de:91:27:1e:6c:b7:59:c6:1b:7e:f8:a3:6d:f5:3b:01:
b3:e2:4c:0f:91:d5:bd:32:5b:6d:69:91:49:11:8d:61:2a:30:
ec:c1:66:ff:b6:fc:b1:9a:e8:3d:a4:5f:70:42:52:b7:5b:a2:
87:e5:77:6a:46:35:19:48:b7:be:b0:e7:2e:88:dd:4d:7a:0a:
37:41:f5:15:90:62:fb:4a:e7:10:f5:f5:00:b6:a4:2f:26:02:
58:7e:dd:08:f4:e4:8d:88:d4:16:6a:9a:9d:7c:03:65:d2:a4:
a4:45:84:ed:ca:76:58:f9:31:f2:27:76:c9:0a:f1:bc:45:18:
72:b0:0c:ef:5c:52:6c:8b:ce:f2:fa:83:c8:8d:6a:64:65:7c:
1a:23:3d:56:d0:16:43:10:00:24:5f:ff:74:19:ba:bb:80:7d:
92:1b:07:0e:2d:3b:1c:b8:54:8c:97:53:c2:01:fa:7b:1a:fc:
c8:f8:3b:73:fc:50:5c:0a:3a:8c:38:31:c6:db:37:21:03:77:
19:67:95:0f:c2:59:a5:38:fa:2f:83:1d:14:ed:cc:42:73:8b:
2a:41:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:39:28 2025 by rpki-client