Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: I4+6PQoGHJRyn9+OTgQyk3gxIAbSaw59SenvfEaePmA=
Subject key identifier: 43:D6:9C:3E:06:10:A5:F8:74:D8:1E:9D:41:25:26:4E:94:B4:D6:01
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 0196767A2384DFF96A6762FADCB43A4783E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1465
Signing time: Sun 27 Apr 2025 09:00:38 +0000
Manifest this update: Sun 27 Apr 2025 09:00:38 +0000
Manifest next update: Mon 28 Apr 2025 09:00:38 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: ZwJzDRrHaOmT7XQD0B4wZTu6Yvtv4GU9qVDmUcUx2w0=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:23:84:df:f9:6a:67:62:fa:dc:b4:3a:47:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Apr 27 09:00:38 2025 GMT
Not After : Apr 28 09:00:38 2025 GMT
Subject: CN=43d69c3e0610a5f874d81e9d4125264e94b4d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:b3:5f:69:26:a2:1f:47:57:c9:ce:36:0d:
90:8a:7d:d1:2f:93:57:1d:56:77:16:bd:68:a2:5f:
c8:02:01:56:ce:73:24:ed:4f:e3:06:d0:1a:0d:66:
2c:3b:f5:89:02:df:f7:99:79:23:96:c1:bd:a6:e8:
d3:72:94:29:59:0a:30:40:79:aa:f2:26:28:f5:41:
66:90:34:6b:5c:3b:b0:3a:1c:bc:2a:07:b7:aa:21:
5a:18:f0:c8:32:69:26:4e:eb:46:13:10:77:e1:89:
ce:9a:32:5d:73:7b:ab:f1:ed:0c:37:03:09:bb:fc:
11:9e:d5:9f:66:2a:96:5d:57:7a:96:f1:8d:91:a7:
d1:e3:f8:c7:54:03:36:8e:38:87:b4:db:bb:6c:a4:
3a:f2:78:7f:6c:af:a6:42:ae:04:34:d6:52:a3:ee:
d1:6b:ec:9c:d8:09:d1:c8:6f:b5:92:16:fe:e5:ab:
2f:af:88:5b:a6:17:70:fd:0c:50:7c:6d:27:9e:56:
5d:03:aa:59:59:32:9c:33:04:10:b3:76:7d:dc:e8:
bb:19:92:61:33:e4:51:88:14:db:2e:23:3f:3b:18:
d7:65:ad:49:f1:23:26:66:55:da:5c:f1:c4:d8:0b:
c4:72:9b:35:dc:83:97:e5:af:37:1d:90:94:27:de:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D6:9C:3E:06:10:A5:F8:74:D8:1E:9D:41:25:26:4E:94:B4:D6:01
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:68:2b:e3:11:fa:a6:95:94:64:22:e3:95:80:97:7a:cf:e5:
1b:69:19:87:80:5e:45:55:08:29:2a:0a:af:b7:5f:92:d9:55:
39:25:d0:7f:31:fa:f9:74:79:70:2d:38:de:a4:93:e1:c8:c0:
db:00:4d:b9:68:52:da:b2:7c:91:67:41:65:8f:43:29:20:32:
cd:93:3e:38:74:58:19:25:ee:20:7a:30:cf:5b:21:16:d7:11:
32:c0:35:a8:b2:33:99:14:73:05:4e:03:d5:ee:e3:12:08:59:
88:63:4e:99:f3:b7:00:1a:4f:88:5a:d8:22:a7:72:a2:19:ff:
fc:64:91:e3:5a:07:d8:cc:15:88:89:fb:26:38:10:ea:dd:4d:
e4:c8:b3:30:9b:a7:4c:0d:69:09:e7:29:43:a2:d1:cd:5c:6e:
10:f1:ee:ce:32:08:84:b2:69:9c:c7:27:8d:b3:e8:b3:99:80:
82:5f:5d:0c:56:f8:19:8c:82:77:69:23:14:d8:42:a5:16:5d:
e5:30:02:f6:e4:7c:34:04:ec:0f:20:5a:0e:1d:23:d2:b3:86:
54:71:28:c8:28:ee:f7:cc:93:8a:88:0f:05:51:25:1e:9e:06:
fc:46:35:e7:de:42:2b:0a:fc:d6:7b:a3:e8:59:98:1a:1f:39:
d8:63:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:23 2025 by rpki-client