Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: hF4NVHbwK3uKRv5Mk2DeUb2JHRSjmugq07OcEKR4Ajs=
Subject key identifier: AE:D5:49:63:22:1A:C0:29:DD:00:EA:84:05:B7:13:CB:A4:63:4F:10
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 01967F0F5EBEDD33C2964CF9C20575F6BDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 01:00:35 +0000
Manifest this update: Tue 29 Apr 2025 01:00:35 +0000
Manifest next update: Wed 30 Apr 2025 01:00:35 +0000
Files and hashes: 1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: cD4oChG4EGhZ6O0yT+lXObj/UrfKA4UIvzcOvarFk04=)
2: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (hash: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:5e:be:dd:33:c2:96:4c:f9:c2:05:75:f6:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Apr 29 01:00:35 2025 GMT
Not After : Apr 30 01:00:35 2025 GMT
Subject: CN=aed54963221ac029dd00ea8405b713cba4634f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:d9:5e:56:64:9c:de:31:f4:99:08:b8:f0:
d8:fa:6c:56:dd:13:e4:eb:be:e8:53:a9:1f:88:30:
21:57:2d:cd:64:82:b2:66:c2:96:9b:a6:33:5d:b6:
8a:9e:b1:ab:1d:8b:2b:5b:f2:cd:f4:2f:15:b4:55:
c3:cd:62:43:b3:2b:02:e2:2f:7b:9f:22:1d:1f:84:
37:f3:49:86:93:30:2a:ef:76:34:66:e2:ef:d3:7d:
3c:cc:dd:48:79:f0:9d:b5:b2:ba:6c:8e:87:fd:3c:
f4:7e:75:85:83:f9:59:18:dd:1f:a1:9a:09:60:7c:
dd:26:8f:7b:54:1a:3c:75:48:6a:40:cd:58:5d:d8:
64:ab:76:74:a2:4d:90:28:67:d4:ec:f9:70:02:b1:
c4:74:07:d5:91:a1:da:bf:b3:4f:02:92:5f:3c:e0:
cc:ce:5c:e1:dd:d6:ee:05:82:52:42:6f:5d:32:e2:
5a:8f:14:40:f9:bb:99:76:bb:96:de:45:3c:47:eb:
29:75:64:c8:d3:d7:38:de:32:89:64:63:51:52:43:
83:37:b4:87:1f:9d:19:4a:81:ea:91:d5:0a:96:17:
cc:85:2f:13:b1:b5:31:00:b3:05:f5:13:d6:10:fd:
03:77:ce:25:f3:d6:04:17:96:ee:ab:94:0d:87:77:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:49:63:22:1A:C0:29:DD:00:EA:84:05:B7:13:CB:A4:63:4F:10
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:77:ef:e7:1a:46:ea:5e:41:3b:68:a3:ce:bf:26:5b:05:
1c:d3:61:da:1d:97:38:b0:be:be:78:28:05:ba:8b:43:e2:14:
16:eb:94:28:bd:11:fb:12:d3:4c:6b:2c:00:bb:26:dc:44:b9:
57:4f:32:00:e1:56:b6:36:16:87:20:5c:21:0a:82:c9:43:3d:
ef:77:a7:80:e1:f8:08:fe:0d:34:84:a1:ef:d6:fd:c7:b6:2f:
01:ac:b6:7c:00:d0:dd:41:2d:fd:54:ba:8a:e2:34:77:e1:9d:
68:f8:29:f2:aa:e2:d5:8f:a7:3a:25:bf:c2:fc:01:b1:71:47:
a6:89:d0:b9:91:ee:17:51:c7:69:98:ec:be:ac:f9:a9:be:61:
69:dd:3d:df:33:73:93:fc:9b:ee:d2:e1:12:d0:ca:f6:58:5c:
9d:ca:e8:82:e8:ad:20:7d:36:0a:91:02:c0:78:8a:b9:56:c6:
48:40:50:d2:2e:82:8d:23:ee:2d:10:b9:75:a6:09:cc:1d:38:
dd:99:ad:fe:b3:41:c3:da:fa:1c:94:72:da:a0:54:af:54:df:
9c:8c:a6:a3:ad:e6:0f:18:d1:51:3b:eb:f9:27:b2:fd:bb:9f:
db:4d:9a:84:fe:f4:1f:dc:ca:24:59:61:b1:83:65:98:f6:5b:
08:e8:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:53:44 2025 by rpki-client