Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: 2yK16pqXuX3vlT/HGkcVxOcDunyJYK/jWcgL9QFj5og=
Subject key identifier: A4:47:DA:90:C2:21:90:F4:60:EB:AE:FB:66:17:46:F2:62:4D:3A:C2
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0196771E98158C9D1578F868D2C5FDFCD743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 0E43
Signing time: Sun 27 Apr 2025 12:00:15 +0000
Manifest this update: Sun 27 Apr 2025 12:00:15 +0000
Manifest next update: Mon 28 Apr 2025 12:00:15 +0000
Files and hashes: 1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: 9SMj0tk6mFaZE9g/+8ltlNUb5zAbTQCNPfgBDdPzaYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:98:15:8c:9d:15:78:f8:68:d2:c5:fd:fc:d7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Apr 27 12:00:15 2025 GMT
Not After : Apr 28 12:00:15 2025 GMT
Subject: CN=a447da90c22190f460ebaefb661746f2624d3ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:b6:a9:ee:01:df:15:e3:3f:07:33:45:8d:
1c:d1:c3:a4:2e:9b:bf:aa:3d:12:0b:b0:80:6f:a9:
4e:eb:fb:4f:95:2a:eb:89:e1:5f:a5:86:9d:3a:8e:
40:47:bb:22:f8:fa:5a:7b:fc:ff:db:ee:69:fa:c1:
ed:31:19:65:fc:42:4d:9b:0f:84:13:99:2b:7f:31:
98:ba:f7:79:58:7f:c2:09:ba:8f:c3:64:e3:81:c3:
74:e6:ea:1f:0f:af:7b:22:cb:b7:5d:ba:42:8a:a9:
70:0c:d3:c8:98:6e:4f:45:83:39:6a:a2:45:5f:3d:
1d:48:2e:44:40:e5:5d:3a:03:40:8b:8e:2a:07:6f:
b6:a1:fc:c6:c3:db:3b:61:97:8e:1f:18:c7:b0:6c:
19:58:4e:7a:ae:0c:c8:2e:25:8e:18:24:65:59:84:
c9:9f:11:5b:75:b1:89:a2:f2:8d:0a:14:9a:7a:68:
3f:3e:59:94:24:16:d8:10:84:5f:0d:ee:bf:bb:82:
c0:ad:53:17:46:8d:62:53:5d:fd:c7:47:93:28:99:
ac:4d:5e:e4:d3:b0:78:5d:fd:38:ac:22:3b:1b:cc:
87:ac:f2:96:c3:8d:d2:4b:d7:91:c0:0f:51:61:c6:
14:45:64:4d:2f:61:ca:a7:33:e0:e8:81:08:75:7e:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:DA:90:C2:21:90:F4:60:EB:AE:FB:66:17:46:F2:62:4D:3A:C2
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:e3:1c:13:42:e2:cd:7c:62:59:70:ff:65:4d:5f:56:1e:
1e:4f:53:1c:1d:ab:c4:bd:6e:65:49:e5:d3:2a:bc:9f:ff:0e:
ca:3b:95:49:fa:a1:96:fc:4a:38:0d:93:81:32:40:37:70:86:
f1:ab:5b:5b:b5:ea:46:24:e5:42:4b:b5:5a:3d:7b:92:7f:70:
9e:b7:15:72:bf:8b:40:1b:9f:64:9b:0f:a7:e2:0c:50:a4:26:
77:3c:24:0d:3b:65:5e:98:b3:cc:09:d2:3f:bf:c5:b2:d1:f2:
79:80:02:dd:b6:fd:23:35:f2:0d:46:1d:eb:41:f7:67:ee:32:
f7:4d:52:8b:fc:18:8d:e4:90:3c:7d:ce:22:90:9b:5d:71:f5:
da:9d:d6:8a:4a:6e:29:51:6c:5d:3e:02:1b:f4:20:f6:45:12:
90:40:39:5d:d1:c7:ba:6d:3f:59:74:ca:33:cf:06:9c:17:29:
ac:1a:70:ab:1f:d4:97:c2:d5:2c:f0:a3:0a:28:2e:dc:9e:50:
92:20:e8:9c:47:2c:94:7f:11:62:3d:7b:11:ad:74:30:03:53:
e4:27:49:9b:21:06:b0:14:b7:22:6f:93:21:cc:59:17:e5:b0:
ba:ff:e5:fa:e0:66:ef:a9:12:b2:63:f3:37:05:40:3a:07:ab:
75:3d:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:33 2025 by rpki-client