Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: TCaGwIBLlH70nO0v71bjZZlMboQtYBHWenSvD1fH50g=
Subject key identifier: BE:77:4B:E6:2B:80:3C:1A:5B:EE:D8:8D:8E:AE:77:2F:B0:34:35:0C
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 01984BC1C2F441A2D8DF3BD5601F1619DDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 02D3
Signing time: Sun 27 Jul 2025 12:00:46 +0000
Manifest this update: Sun 27 Jul 2025 12:00:46 +0000
Manifest next update: Mon 28 Jul 2025 12:00:46 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: 4QDpnggeo/jDgTZN4OnIzeEw8PjTIxMC83coDsbmCMQ=)
2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:c2:f4:41:a2:d8:df:3b:d5:60:1f:16:19:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Jul 27 12:00:46 2025 GMT
Not After : Jul 28 12:00:46 2025 GMT
Subject: CN=be774be62b803c1a5beed88d8eae772fb034350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:7e:e2:7a:f6:f7:4d:aa:45:66:20:9d:a0:
ab:00:b5:41:05:21:cb:b0:67:4f:04:a9:ab:7d:d6:
2a:16:63:1a:45:08:af:31:f0:6e:1f:ab:d0:6b:18:
3f:0e:e5:5b:35:16:9c:7d:f2:c5:08:07:1b:eb:f1:
31:44:e0:b6:8e:59:6b:19:14:11:94:34:29:1f:07:
bb:cf:b8:4d:98:23:bc:6a:db:34:9e:db:3b:96:c0:
4a:27:ad:8c:64:f7:db:83:4a:00:49:ae:7e:a0:67:
70:27:ee:11:a8:2b:10:1e:39:30:e3:db:37:54:16:
74:f4:1f:fb:79:20:8f:df:b5:f2:fa:fb:dd:01:f1:
e0:39:9a:6e:6b:89:38:65:1f:e8:d6:3e:e5:ae:68:
b7:4b:f7:f4:19:78:34:6e:3e:7c:d5:99:88:d1:c2:
85:6b:8e:38:00:e7:f6:f6:0b:8a:2d:7c:21:a2:bb:
3e:e0:27:d0:6a:dc:60:48:82:b1:3e:c6:6a:bb:b8:
4d:80:f9:b3:13:98:a2:2a:1a:56:e7:69:4b:df:69:
c5:8e:96:0e:50:75:1e:d7:58:7f:f0:73:a4:59:20:
95:77:80:e5:d0:1f:cd:10:20:e6:6c:c9:2a:8e:91:
5e:9c:f0:df:f4:67:e3:6a:20:b1:69:d3:ec:e8:6b:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:4B:E6:2B:80:3C:1A:5B:EE:D8:8D:8E:AE:77:2F:B0:34:35:0C
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:69:98:7e:ac:03:0d:68:d3:e6:05:70:79:94:1c:28:cb:8a:
69:94:5f:39:c7:e2:6d:64:73:ea:15:a7:34:a4:df:a4:21:09:
c4:ea:83:35:ed:db:f3:db:29:ce:18:aa:6f:f2:07:70:c7:2c:
9d:43:a2:10:5a:fc:d7:e5:38:b4:64:65:d4:17:eb:70:a2:f3:
ac:b8:54:24:35:0c:85:d4:7f:aa:b0:b6:a9:a4:70:f6:a5:ca:
69:d8:99:39:7f:66:72:f7:1f:f2:50:2a:34:55:9c:30:21:de:
68:19:86:06:46:1b:d6:0a:34:13:09:09:96:e9:ba:77:0e:61:
18:ae:35:30:30:ce:7d:b9:6e:36:67:09:3f:24:90:2b:7f:a2:
ce:30:cb:26:d0:0a:6c:cf:a5:b9:35:82:86:46:3e:90:70:03:
84:c9:0a:22:89:ed:d7:c9:26:80:83:66:fb:78:66:2e:74:5c:
d9:b7:d3:a9:5a:6c:59:6d:4e:a0:ec:dc:99:84:c2:c9:98:aa:
cc:37:d3:47:27:66:d6:6b:36:01:8b:0c:86:0d:4a:5e:76:ac:
7e:5a:53:81:06:2e:1f:73:92:33:5d:c4:2c:82:be:7a:52:8c:
7c:37:0c:b9:dc:78:60:5e:63:c5:23:06:19:8d:1d:5b:e5:01:
12:4a:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:48:01 2025 by rpki-client