Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: TmVIFqCwbzFs7yf2iOi5sScPggjgDqqrd4kQyXxE/rY=
Subject key identifier: B1:63:BA:E1:96:13:87:5E:1C:62:3A:FE:89:48:48:B3:80:6E:88:C1
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 0197684E3358FE83AFF644BED2788E99CFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 053D
Signing time: Fri 13 Jun 2025 08:00:44 +0000
Manifest this update: Fri 13 Jun 2025 08:00:44 +0000
Manifest next update: Sat 14 Jun 2025 08:00:44 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: 2gESktTsPbghl9EAT1FoOxdDSoYuho7JZ04IkcN6Hco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:33:58:fe:83:af:f6:44:be:d2:78:8e:99:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Jun 13 08:00:44 2025 GMT
Not After : Jun 14 08:00:44 2025 GMT
Subject: CN=b163bae19613875e1c623afe894848b3806e88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:77:0e:55:f0:56:ec:3f:ad:6e:d6:16:23:
db:8d:0b:ce:96:8d:3a:b7:2e:8d:b3:e2:be:c9:49:
9f:b7:21:b1:c5:1f:60:d9:f2:11:76:82:53:dd:2a:
c7:9c:17:1c:79:06:7c:f6:51:eb:dc:42:ae:a2:69:
6b:0f:14:56:c9:68:ee:ad:aa:5e:e1:83:0e:f6:13:
4e:ef:e2:ca:d9:02:45:a3:10:b5:56:9c:56:62:28:
c0:b8:dc:73:d2:45:51:99:0d:c9:ba:ea:b6:a7:61:
cf:66:f4:93:6b:7b:6d:08:eb:b8:df:6a:66:0a:f2:
ed:ff:60:d5:fd:26:73:d1:11:9d:c8:ae:ff:f3:f1:
1e:ce:81:3e:63:df:f9:98:7d:c1:32:e9:1b:59:43:
e6:e8:a3:37:73:80:81:7b:88:f2:a2:89:93:55:fe:
1e:e4:2d:9a:61:b2:37:19:1a:c4:53:1f:e6:08:da:
14:e9:6b:89:4a:31:8e:85:c7:47:98:d0:0d:74:8a:
da:61:e4:cb:16:04:1a:12:aa:b0:ec:cb:da:6a:6a:
fb:57:86:6e:21:e0:fe:79:54:1a:d5:f2:25:e4:bc:
c2:cd:35:fb:9f:f0:9e:a0:0f:35:d6:04:34:04:7f:
b7:dc:16:db:66:a4:5e:f4:8b:e0:aa:a8:e7:92:39:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:BA:E1:96:13:87:5E:1C:62:3A:FE:89:48:48:B3:80:6E:88:C1
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4c:bb:52:70:d2:4d:56:d2:5c:c8:8f:f4:e9:dd:0e:2f:73:
22:74:ab:f4:c1:94:af:ff:57:a4:d8:aa:64:3f:0e:d5:5c:55:
95:55:61:b0:58:c3:01:97:b2:1c:ea:a7:38:66:01:54:3d:18:
90:cf:6f:2a:0a:62:09:eb:37:6f:e5:78:52:12:95:ce:62:47:
9f:78:14:23:be:c8:85:f2:9a:0b:b7:51:51:59:cf:bb:81:89:
41:3e:ac:4b:b7:51:a9:f6:5e:62:7a:0d:5a:a8:a5:a3:5e:3f:
9d:2a:52:ab:6b:f0:8d:cb:4b:a0:82:fe:40:c5:85:88:d7:23:
d6:25:8e:1f:0d:d0:1d:ff:04:b0:99:69:0c:75:95:a8:cc:d3:
58:3c:60:9f:01:7c:f6:89:a0:34:b0:88:7b:fe:9e:3f:0c:34:
fd:a2:87:fa:4d:eb:8b:fc:a0:19:1a:83:5f:f4:20:34:32:dc:
45:49:c9:7b:99:f5:67:14:90:b7:4a:0a:1b:9a:4d:b4:9b:38:
b8:8d:27:11:0d:6b:e4:ff:de:b9:2c:eb:14:76:92:0a:25:82:
f9:df:04:b7:d8:18:19:ce:1a:04:57:41:b6:bc:73:b9:eb:e4:
46:f1:5e:93:f5:27:e2:ae:a9:26:0b:70:02:3a:89:59:36:b5:
8e:c9:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:23 2025 by rpki-client