Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: 6Sx0A7WBFozPF13RXDA1nZZGHuNdZwGqFhMlqMcUmxU=
Subject key identifier: 59:A5:21:E4:AD:12:29:3D:F8:77:3A:DA:B5:DE:41:00:06:38:02:6E
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 019675675E11AADBEBA622E0089EF92CA348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0BE4
Signing time: Sun 27 Apr 2025 04:00:30 +0000
Manifest this update: Sun 27 Apr 2025 04:00:30 +0000
Manifest next update: Mon 28 Apr 2025 04:00:30 +0000
Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: HUIGW++2kaKGE5jXq3SLCu8LypAf4WJVWuMdohvAb10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:5e:11:aa:db:eb:a6:22:e0:08:9e:f9:2c:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Apr 27 04:00:30 2025 GMT
Not After : Apr 28 04:00:30 2025 GMT
Subject: CN=59a521e4ad12293df8773adab5de41000638026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:80:b2:54:9c:a5:bb:6b:82:d0:c8:b7:96:
35:af:c6:ae:85:38:c2:d2:8a:76:7f:96:0a:49:62:
94:72:2e:6d:c4:6c:cc:cb:ce:bd:1c:c0:6e:30:2a:
58:f9:bc:b4:c0:85:a7:ad:a0:5a:b9:99:36:ff:33:
05:5a:26:ea:09:64:65:84:43:62:5b:cc:f3:60:57:
69:9e:1b:f5:24:a0:c8:4b:3f:b2:a9:73:13:fb:f1:
2e:db:e1:a8:41:d0:5b:db:88:1e:79:bc:ae:7e:13:
79:74:32:d7:29:26:53:fc:bd:1b:4f:69:9a:28:14:
76:e3:f8:f4:46:49:27:d5:16:9e:97:d0:9d:66:8b:
75:1c:1a:84:41:6d:d1:22:52:90:fa:8f:f7:38:02:
1a:6e:65:5f:e5:f5:59:0f:d5:33:fb:e8:d3:58:af:
db:a5:65:ec:73:10:9c:7f:09:e6:07:cd:73:47:0a:
79:57:e0:41:cc:07:1a:5b:a2:2f:34:70:14:c7:f0:
3f:54:a6:cd:21:3b:25:4d:ae:b9:eb:d5:ad:71:97:
22:69:8b:bd:0b:38:24:46:6a:22:28:a0:ca:b1:6b:
d5:7d:52:1a:6d:95:dd:24:f1:0e:21:e9:98:e5:d4:
1b:6e:6e:5e:53:42:68:64:14:3c:13:ab:81:a1:9a:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A5:21:E4:AD:12:29:3D:F8:77:3A:DA:B5:DE:41:00:06:38:02:6E
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:60:4d:25:95:c0:4c:10:e9:7c:ea:25:4a:f7:d0:73:e9:a9:
a6:ad:70:3b:68:ec:7b:51:f0:b1:54:8c:1a:cb:73:b7:72:e0:
0a:17:3a:b6:eb:9d:b2:57:9a:a2:31:54:d3:90:1b:f0:14:be:
43:22:fb:f7:b8:a1:99:5e:d2:8c:db:08:47:71:4a:30:af:f3:
b6:1a:06:03:90:e4:15:ab:fc:02:03:9d:98:57:05:ae:95:0a:
20:52:26:2b:a5:0c:23:5b:b5:31:38:0a:f3:e2:d3:dd:6c:19:
97:d0:16:01:4d:db:a3:ae:bb:c4:d0:7d:05:b1:61:1e:da:9e:
df:f0:5f:f5:18:19:e7:63:97:a4:bb:70:40:34:36:2f:9f:e0:
9b:85:09:5a:a7:49:e8:36:46:c6:ee:0f:d7:c5:15:9e:6f:46:
4d:af:1e:a7:6d:80:41:4e:f2:6e:e3:94:87:8f:ad:81:81:93:
68:44:5a:b4:d3:6c:8e:a0:cb:bb:3b:76:f9:7f:33:83:b7:d3:
d7:05:38:4d:0e:7c:46:67:43:c9:7e:fc:2b:16:7e:82:f7:37:
bc:22:f9:65:97:e3:ef:cc:21:da:95:69:1f:c9:bc:60:4d:c7:
b8:d7:d7:39:3a:9f:df:4e:69:5f:2f:90:70:bf:36:91:2f:78:
90:89:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:06 2025 by rpki-client