Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: mLPZ4EDo4AyWY8qGWdIOQky5wqM9puAcnMVaS2hnRWI=
Subject key identifier: 89:37:C2:B9:57:72:E7:B2:21:9F:FC:06:40:C4:66:4F:92:B9:AC:43
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 01967C0E2F6A95ECD2C00F8C4022181EEBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0AC3
Signing time: Mon 28 Apr 2025 11:00:26 +0000
Manifest this update: Mon 28 Apr 2025 11:00:26 +0000
Manifest next update: Tue 29 Apr 2025 11:00:26 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: HYG1slVWjcP4AB8YdTgCaUAoPEqBTjYukmy+IWCK0+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:2f:6a:95:ec:d2:c0:0f:8c:40:22:18:1e:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Apr 28 11:00:26 2025 GMT
Not After : Apr 29 11:00:26 2025 GMT
Subject: CN=8937c2b95772e7b2219ffc0640c4664f92b9ac43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:56:c0:99:94:38:52:91:06:94:ad:40:eb:
05:d2:7d:18:f6:81:40:01:96:ac:73:d0:93:3c:f6:
fd:53:e6:53:25:42:98:b7:43:95:74:ab:5a:27:e9:
da:db:d7:66:37:0a:47:94:ea:dd:f9:5b:fd:6c:fd:
53:99:fc:b9:11:4e:92:4a:a7:5a:30:99:c8:46:03:
b2:05:04:10:1b:ed:b1:ef:60:70:11:8d:f7:c0:ec:
af:11:d4:1e:17:4d:51:41:12:6f:c8:29:5d:8c:e6:
0a:94:f4:b6:03:3d:12:0e:5b:b7:aa:67:c8:76:39:
d1:38:91:3b:f6:b8:09:c6:55:98:58:b8:a0:d1:d2:
38:1d:f5:0c:d7:ca:96:23:62:e1:b0:02:d9:19:72:
e8:63:74:fa:49:ce:9c:cb:aa:c9:d3:48:d7:54:7b:
96:63:31:20:1f:a4:11:a3:37:c5:24:66:89:ed:1a:
0b:44:f3:17:d8:e5:f0:3e:e5:da:27:7d:a8:51:61:
35:ed:97:7b:7a:49:b7:1d:1a:3c:73:99:c6:4f:7a:
0e:56:f8:a9:cf:32:a1:db:da:b9:a6:7c:d4:9f:b1:
24:ca:01:41:8f:a9:75:01:e7:ba:f3:c3:8f:6c:ce:
a1:4a:a9:c2:23:90:24:dd:2c:e7:bf:b5:32:26:73:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:C2:B9:57:72:E7:B2:21:9F:FC:06:40:C4:66:4F:92:B9:AC:43
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b3:eb:cf:74:a8:06:0a:e4:40:23:28:ca:84:66:c8:e6:d1:
bd:82:4f:cf:da:a8:61:a8:7f:d5:08:09:f1:c4:ed:11:63:36:
a0:8b:ed:06:9d:1d:42:f5:97:ca:7f:95:4c:20:16:97:77:79:
db:6e:41:be:2f:2f:cf:e7:23:f7:05:48:02:d3:c3:b3:f7:d7:
3b:6d:1e:cb:14:22:8a:35:19:b6:04:d1:fb:b2:4e:59:7c:63:
79:f5:0f:7a:07:1a:47:ad:49:92:d5:6c:41:80:c0:8f:41:4f:
e7:a6:e5:21:03:17:ac:a7:66:6c:fb:10:73:74:d4:28:7d:cf:
49:07:c5:f7:12:2d:70:02:83:46:09:39:c8:b7:8a:91:75:95:
c2:73:ae:53:43:6c:22:d4:18:f4:3c:3f:05:5e:ca:88:4d:ac:
ab:c0:10:75:c3:09:93:47:7a:77:d0:0f:2a:c4:5a:95:0d:ff:
50:5d:63:6d:b2:57:ba:d1:1c:2e:7f:5c:4d:27:8c:39:14:ca:
d2:8a:06:c5:40:d8:a9:56:f8:9f:64:79:f3:d2:ae:d9:7b:82:
52:e8:18:2f:16:e9:02:35:54:15:7a:dd:53:97:95:c9:1f:6e:
1d:77:90:c5:c5:34:ab:25:dc:22:02:18:8b:78:a8:a9:8f:bd:
26:2b:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:27:25 2025 by rpki-client