Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: bx1D/faQEliE7REQkF/KU8C1usFx60OJ3qHKyX7ORNg=
Subject key identifier: 75:F7:4F:A0:58:C6:82:09:34:45:A3:D2:E3:13:3D:CC:4C:A4:3F:AD
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 019674F9A528293B94886FFAB8E96B24F923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0947
Signing time: Sun 27 Apr 2025 02:00:39 +0000
Manifest this update: Sun 27 Apr 2025 02:00:39 +0000
Manifest next update: Mon 28 Apr 2025 02:00:39 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: dNsugFdC/6zvTrN15K6+bnZ2bsIyVZ3JVHEci/zbgdQ=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:a5:28:29:3b:94:88:6f:fa:b8:e9:6b:24:f9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Apr 27 02:00:39 2025 GMT
Not After : Apr 28 02:00:39 2025 GMT
Subject: CN=75f74fa058c682093445a3d2e3133dcc4ca43fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:df:f8:bd:9d:c1:ce:6d:dc:e4:a8:8f:00:
f3:77:ba:1d:bf:02:e2:12:34:13:93:46:fc:12:a0:
69:28:0f:b6:a4:95:58:e2:6f:28:2a:c3:d0:a4:e9:
af:9f:02:54:6d:2d:db:e0:76:69:30:e1:fb:af:ba:
7c:50:6a:1c:3c:88:2b:f8:d8:54:49:47:56:de:80:
dc:5c:fe:eb:79:92:10:44:fd:96:bc:a9:7d:c5:02:
ec:bc:52:6f:f1:2e:88:a4:fd:8f:43:c1:74:d4:d9:
c7:de:55:a2:a0:95:e8:63:b2:e4:74:d5:cf:b6:92:
2f:9e:dc:6c:5c:5a:d0:72:e1:46:bb:07:cb:4f:3b:
a3:c2:50:6d:bc:ef:05:56:3f:41:ca:e5:17:d8:6c:
02:f0:3b:b7:75:08:d3:f7:94:ce:c4:f9:f7:ab:ad:
58:fa:ff:15:82:9e:57:9d:9e:79:cf:24:93:74:b6:
28:93:3f:10:9c:16:d1:0a:bc:91:e0:2c:7e:bc:99:
ff:8e:48:8e:14:02:6f:b8:d7:97:1f:10:73:55:58:
c0:61:fa:28:41:8b:1f:f3:f7:e0:c5:e5:74:2a:64:
34:92:84:5a:70:cd:7a:70:3c:d2:b7:03:f9:07:24:
fe:d8:a7:78:69:90:9c:a9:2b:c7:77:12:bd:ea:d0:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F7:4F:A0:58:C6:82:09:34:45:A3:D2:E3:13:3D:CC:4C:A4:3F:AD
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:db:91:a9:69:c6:d1:56:83:f9:be:c2:5a:14:3e:be:3c:e6:
e6:77:c8:de:ae:d2:97:01:bf:38:6c:c6:79:1f:a7:5e:7a:76:
de:c3:5b:f8:5a:4f:62:22:f1:4e:ef:d9:a8:bc:be:a1:9a:30:
03:78:d5:6e:93:a2:04:4a:eb:df:cb:0b:86:03:fd:d5:49:57:
6d:e9:fc:b8:8d:0b:eb:c8:70:33:07:e2:c0:52:cd:eb:37:4e:
4a:e5:1d:fc:b7:13:ee:1c:53:29:44:c6:34:6e:91:dd:40:06:
ab:be:af:c6:2b:cb:f1:48:41:a9:fe:2f:35:ae:0e:7b:e9:81:
73:66:49:8e:39:df:33:22:b8:f9:e9:73:22:a3:6d:ff:87:80:
7a:62:46:f3:1e:17:d8:3e:d9:f6:74:e5:ab:d9:c1:72:c1:e3:
cb:95:b6:ff:05:49:b9:a4:d6:e6:8e:73:f0:70:78:bf:43:bd:
31:f3:b7:a4:6e:24:f2:ba:dc:8f:c5:b9:81:71:59:85:9b:21:
f0:77:68:6a:d9:e4:f5:1e:67:00:10:78:46:e0:73:33:43:89:
0c:9d:1a:ec:6b:95:a6:d6:f5:66:1c:9b:5d:7e:62:54:95:8a:
8f:cd:bb:5e:79:a5:34:b6:05:49:4b:04:2f:c3:94:a9:5e:a7:
7c:d5:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:43:30 2025 by rpki-client