Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: mk3kUQ0Fw5agDNJ+e8SPaJsVCQsrNzKEC/VhlD6dgOs=
Subject key identifier: 50:F0:47:7F:E8:A3:35:68:88:01:50:64:1C:E0:DC:AB:D3:9F:31:6B
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 0197684E718D8CAA4BA12C44FA6E9D3F66D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 08:01:00 +0000
Manifest this update: Fri 13 Jun 2025 08:01:00 +0000
Manifest next update: Sat 14 Jun 2025 08:01:00 +0000
Files and hashes: 1: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: p/faWkI8J/mMeHavyK7CoUXssacKFqfacyPJJHmqkEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:71:8d:8c:aa:4b:a1:2c:44:fa:6e:9d:3f:66:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Jun 13 08:01:00 2025 GMT
Not After : Jun 14 08:01:00 2025 GMT
Subject: CN=50f0477fe8a33568880150641ce0dcabd39f316b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:de:78:a7:9c:f9:3d:be:f5:ce:ed:f6:6d:
2f:92:e1:e9:62:86:f1:fd:31:f9:7d:b6:15:33:1a:
a5:14:3e:03:04:98:c1:bf:a7:1c:56:62:c6:93:e3:
a1:af:12:f4:79:38:f6:6d:4f:16:9d:6e:cc:4e:55:
29:7a:65:7e:07:35:6b:86:dd:4a:df:f3:b1:78:ca:
e1:b8:b2:cf:d9:8e:53:1b:99:ec:45:11:ff:76:52:
09:92:2c:16:cc:ab:59:2a:27:63:8b:76:63:23:35:
61:2e:47:ba:2c:02:6f:c2:82:bb:7b:9f:b4:ca:4a:
7d:cb:8b:8a:88:7f:3c:53:d4:32:0c:a5:65:6b:9f:
21:fe:fc:91:80:fd:a8:20:1c:5e:90:6b:15:82:42:
c5:5d:56:07:9d:e3:2b:99:18:42:bd:9e:3e:14:ad:
d9:c0:c9:e6:7f:4b:5c:c5:16:c1:f7:a9:e0:5a:ad:
94:b6:06:44:fe:ac:fc:2a:47:88:0f:e5:bd:f3:e8:
ae:1b:6a:92:f8:2c:58:10:be:60:44:8d:8a:9a:67:
57:1f:e6:d0:98:74:d3:da:5b:87:fa:6a:f2:cc:8e:
09:a2:ab:ec:e0:f9:15:8b:2c:64:9c:87:ec:46:da:
a3:8d:5c:08:dc:cd:f7:c3:c4:ba:c9:a0:fa:ae:f7:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:47:7F:E8:A3:35:68:88:01:50:64:1C:E0:DC:AB:D3:9F:31:6B
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fb:c2:45:f7:43:59:03:42:3e:bd:85:6b:0d:15:aa:a7:27:
5f:f4:1d:53:6c:41:6e:28:78:d2:24:08:5d:fa:99:ac:d6:1b:
2b:a1:2d:b2:2e:11:d2:a9:cb:3c:3b:79:9c:5b:ac:01:0a:b7:
a6:b1:3d:8f:27:d9:f9:8b:da:c5:74:c2:31:c4:df:f7:07:a2:
0e:f9:f1:24:39:68:5f:68:09:39:0e:ea:8a:29:00:c4:f1:e9:
3f:6f:43:06:fe:9a:b7:3b:71:7f:b3:06:36:28:a9:d8:91:5e:
a6:94:73:6a:4b:e4:d0:05:97:d1:a8:c2:5d:57:dc:f6:c9:0f:
3f:24:a7:1a:92:6d:e3:b4:85:07:99:7f:0b:e9:d0:f0:8e:9d:
ee:05:42:ce:5a:95:af:b5:ec:3f:b7:8c:56:43:c1:28:d5:66:
c7:da:da:0f:e3:b8:8e:2f:ad:3f:40:95:5f:3e:22:f3:74:b5:
26:b6:55:98:c1:8c:a7:3c:97:08:a9:2f:12:32:66:94:e7:2e:
3c:05:ea:19:a8:fa:f3:de:e2:cf:d3:d6:c3:3b:d3:33:c8:ad:
d1:78:a3:c6:4e:7a:9d:6e:55:e5:32:56:74:16:97:16:ca:02:
17:b8:e6:e5:47:c7:2f:d9:a3:98:05:fd:36:0c:c7:03:bc:46:
02:4a:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:18 2025 by rpki-client