Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: ljP6vhoUKQkD+6Zn1DgGBlDoeeQmfxypgUFEajvuEaA=
Subject key identifier: 45:84:43:C5:EF:C3:37:9D:73:CD:B1:DF:20:1D:9A:2B:1F:D5:0B:21
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019873E24A2FA3CC07F28B789918BE7B4023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 043D
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: VFcP1AUGCVUXft/n4joxSvxNybDxzdczSO4gKCxSIQo=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:4a:2f:a3:cc:07:f2:8b:78:99:18:be:7b:40:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=458443c5efc3379d73cdb1df201d9a2b1fd50b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:d4:91:f0:31:ce:4b:76:16:67:c4:1b:3d:
77:b9:2c:df:7c:6d:e1:4f:61:76:9f:78:e5:f8:4a:
de:9f:a1:6f:48:fa:36:12:90:a0:7d:2c:0d:5a:fc:
40:7b:1d:54:df:4e:ad:54:a6:83:6f:48:12:ba:af:
d1:b0:fb:54:72:49:70:7a:f4:b5:42:f8:0c:9c:ff:
1b:5b:31:09:86:07:28:21:66:3a:45:1a:d4:3a:83:
e4:c5:54:fa:2c:b1:0d:8c:e4:4c:cf:f4:47:97:53:
eb:de:2a:7b:c6:6a:26:c9:eb:98:69:39:19:d9:d9:
17:2d:87:2d:3f:7a:ec:af:72:0a:ec:40:a9:15:e3:
a3:31:94:f1:1a:ca:71:20:18:65:ca:16:a8:01:6e:
54:06:09:e1:d5:77:a8:65:b9:35:73:6e:b4:1a:8b:
7e:02:e8:a8:cb:ec:25:41:6e:58:d6:b0:23:b9:69:
76:a6:9e:86:32:e3:b4:bb:2a:ac:c7:26:aa:3c:54:
96:53:82:4b:86:0e:1c:ee:5c:24:ac:ae:ae:84:18:
60:d1:07:3e:d6:c3:62:64:f0:a8:ac:a4:97:4c:26:
63:2b:4d:1a:8e:b8:97:fb:06:79:8a:c5:3d:71:6d:
7f:21:d7:c3:f0:48:d8:6d:07:db:6a:f1:53:4a:52:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:43:C5:EF:C3:37:9D:73:CD:B1:DF:20:1D:9A:2B:1F:D5:0B:21
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:f6:01:6a:f1:a5:34:d3:ad:4f:82:8c:2e:7b:56:c2:c4:
4a:42:f2:9f:1e:f9:97:ef:54:da:8c:5f:b4:f1:5e:27:9c:56:
81:46:5d:81:b4:59:c2:c8:6e:01:d9:d1:05:63:53:ea:21:89:
a2:dd:a9:29:ce:2b:bc:c5:73:68:f3:f0:7d:3e:fc:59:5a:ac:
70:48:16:c1:c6:a6:5e:11:6c:1b:95:2d:93:c0:a9:14:ff:ab:
ec:b4:da:ea:8d:3d:70:fc:5f:7d:af:0c:2f:2d:ce:a9:d2:38:
ab:e2:80:90:d5:8f:d5:04:7e:a4:f9:13:62:1e:dd:c4:b8:0e:
ee:79:de:3d:88:dd:b9:48:d8:45:e5:1f:8a:54:4c:94:65:4c:
75:3e:83:32:31:a5:81:78:0f:40:61:01:2e:56:14:15:c8:27:
ad:f0:b0:68:9b:b6:3a:ac:e9:b6:50:5f:34:51:c9:68:8f:12:
e1:c0:16:ff:19:80:c0:d7:96:58:a0:4f:94:ee:76:16:0a:c2:
40:1c:06:36:24:4d:65:dd:6a:ff:e6:59:f0:97:f6:c5:84:7a:
bf:cc:d4:43:b7:3f:47:e9:92:ce:5d:a7:9e:fb:fa:22:27:1a:
20:f7:33:c5:af:2f:3e:6f:bf:6c:d2:8d:6d:ab:8d:88:7c:f6:
f3:ca:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:05 2025 by rpki-client