Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: n7fxEBPd2qWVtzZPtB+BAhWgp8rygL31btK0VQwr+Ck=
Subject key identifier: 1F:16:F1:13:34:C6:A8:33:7D:BC:BF:63:57:A9:9A:2F:4B:06:75:C5
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 019678D62E1FE0D2273A461A5B74E2EEA7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 04C1
Signing time: Sun 27 Apr 2025 20:00:24 +0000
Manifest this update: Sun 27 Apr 2025 20:00:24 +0000
Manifest next update: Mon 28 Apr 2025 20:00:24 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: MgwEWommKIhYSXCiFg2g34e0j7pilkLDpfAJ8nho5vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:2e:1f:e0:d2:27:3a:46:1a:5b:74:e2:ee:a7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Apr 27 20:00:24 2025 GMT
Not After : Apr 28 20:00:24 2025 GMT
Subject: CN=1f16f11334c6a8337dbcbf6357a99a2f4b0675c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:fa:c7:24:05:1f:af:8a:b3:9f:f5:73:e8:
53:ea:2f:a7:f6:8b:9b:ea:8d:84:8f:a3:08:bb:7d:
ff:1d:f4:46:61:f9:41:2f:a3:4e:6d:76:df:16:97:
7c:e3:18:d8:c3:80:bf:40:f2:4e:84:7e:2e:1a:6a:
c8:98:b5:b4:a9:f9:1e:f3:7a:2b:37:2a:b7:4e:57:
bd:58:4f:e2:ad:8a:26:9d:89:84:31:e1:1c:47:4b:
91:5f:1e:bc:9e:d8:22:a3:f6:6d:22:58:e6:60:0a:
d4:ab:01:14:5f:4a:d6:ce:76:4b:58:5f:a9:29:58:
8f:cb:d4:45:af:27:b7:25:5f:3d:9f:a3:78:0d:a5:
c6:1e:a4:46:d4:8f:ce:b1:b6:bc:a9:6d:17:26:20:
a3:fe:84:d9:7f:63:75:1a:b5:55:5e:2d:34:9a:b3:
c9:ef:a1:6f:fd:c1:e1:8b:3e:b2:fb:ca:92:1b:60:
02:f0:6d:63:d4:04:42:21:1b:a4:f9:11:53:a3:e3:
fd:c2:de:f9:5e:3e:b3:1b:30:af:14:8e:4a:d0:5f:
04:2a:db:85:ed:f9:04:7c:b3:dd:47:77:4b:97:bd:
57:e9:e6:80:77:d3:23:ae:c7:ea:ff:6e:db:07:ca:
38:1c:0d:48:08:7a:30:8e:e7:37:e1:d0:80:5c:e8:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:F1:13:34:C6:A8:33:7D:BC:BF:63:57:A9:9A:2F:4B:06:75:C5
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e7:fb:e0:63:a4:cb:ef:0b:b8:a0:22:03:e7:32:58:9d:7a:
55:b5:07:0a:4f:a4:d3:7a:a3:7f:22:8c:e1:6d:83:68:f1:c5:
33:83:49:e4:91:c0:26:a8:0c:87:81:55:c2:9f:60:8b:e2:b0:
b2:4f:3d:bc:7c:91:49:e0:1d:c4:08:80:de:b9:66:c7:e9:a5:
03:70:ab:81:73:42:94:2d:4c:ab:d3:05:46:b9:76:90:d4:f6:
74:b5:62:27:38:c7:fe:5c:6e:61:4e:25:6c:c9:c3:a7:3c:4d:
4a:93:53:bb:2f:2b:79:6e:57:67:c7:3c:7d:2b:f0:53:aa:c5:
96:d4:dc:a1:b6:8c:47:39:27:94:e7:eb:7a:37:92:72:3b:c1:
e8:3c:b4:24:71:a4:15:a7:66:03:a7:6c:b2:89:7e:13:a8:b3:
c5:d5:8d:01:53:2d:5b:ef:4a:f5:1d:8b:f9:b0:43:56:b5:9a:
a7:aa:4a:57:73:a1:bd:ca:19:7a:da:7e:89:c2:00:55:46:93:
98:54:5e:f8:9b:ec:a5:89:09:cf:f3:35:9a:6d:29:6c:e5:25:
27:6b:79:95:24:41:8b:8c:03:2f:b8:5f:3b:2e:d9:03:6d:65:
51:9f:ea:b3:e8:31:9c:7d:65:d2:ca:7d:34:ad:f4:af:1c:27:
af:ec:ea:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41i4f4NInOkYaW3Ti7qfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZTA1MWZiOTNlMDE1YTliNzYxYmI0NWFmZTEwOWRiYmUz
NDdjNjYwHhcNMjUwNDI3MjAwMDI0WhcNMjUwNDI4MjAwMDI0WjAzMTEwLwYDVQQD
EygxZjE2ZjExMzM0YzZhODMzN2RiY2JmNjM1N2E5OWEyZjRiMDY3NWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN36xyQFH6+Ks5/1c+hT6i+n9oub
6o2Ej6MIu33/HfRGYflBL6NObXbfFpd84xjYw4C/QPJOhH4uGmrImLW0qfke83or
Nyq3Tle9WE/irYomnYmEMeEcR0uRXx68ntgio/ZtIljmYArUqwEUX0rWznZLWF+p
KViPy9RFrye3JV89n6N4DaXGHqRG1I/Osba8qW0XJiCj/oTZf2N1GrVVXi00mrPJ
76Fv/cHhiz6y+8qSG2AC8G1j1ARCIRuk+RFTo+P9wt75Xj6zGzCvFI5K0F8EKtuF
7fkEfLPdR3dLl71X6eaAd9Mjrsfq/27bB8o4HA1ICHowjuc34dCAXOgL5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8W8RM0xqgzfby/Y1epmi9LBnXFMB8GA1UdIwQY
MBaAFGvgUfuT4BWpt2G7Ra/hCdu+NHxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1CUi01UGdGYW0zWWJ0RnItRUoyNzQwZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNWY4NWUtZDA3MC00ODhiLTg5ZjYt
ZjRlNTlmMzlhNzRhLzEvYS1CUi01UGdGYW0zWWJ0RnItRUoyNzQwZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yNWY4NWUtZDA3MC00ODhiLTg5ZjYtZjRlNTlmMzlhNzRh
LzEvYS1CUi01UGdGYW0zWWJ0RnItRUoyNzQwZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauf74GOk
y+8LuKAiA+cyWJ16VbUHCk+k03qjfyKM4W2DaPHFM4NJ5JHAJqgMh4FVwp9gi+Kw
sk89vHyRSeAdxAiA3rlmx+mlA3CrgXNClC1Mq9MFRrl2kNT2dLViJzjH/lxuYU4l
bMnDpzxNSpNTuy8reW5XZ8c8fSvwU6rFltTcobaMRzknlOfrejeScjvB6Dy0JHGk
FadmA6dssol+E6izxdWNAVMtW+9K9R2L+bBDVrWap6pKV3OhvcoZetp+icIAVUaT
mFRe+JvspYkJz/M1mm0pbOUlJ2t5lSRBi4wDL7hfOy7ZA21lUZ/qs+gxnH1l0sp9
NK30rxwnr+zqQg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:58 2025 by rpki-client