Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: c/rxpuqUl+qOMhEeznwZMEahVkrAcZbPzMccWLNrgVE=
Subject key identifier: BA:F0:E3:8C:4B:41:A4:31:78:04:56:18:9C:5E:33:CB:07:B7:7B:55
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 019848F770B7257DCB9D0EBC99E79A788212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:32 +0000
Manifest this update: Sat 26 Jul 2025 23:00:32 +0000
Manifest next update: Sun 27 Jul 2025 23:00:32 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: 4EsB702cBVg9BgTDn4kpqm3zYSZk6oPdHCeXSPc8S3k=)
2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:70:b7:25:7d:cb:9d:0e:bc:99:e7:9a:78:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Jul 26 23:00:32 2025 GMT
Not After : Jul 27 23:00:32 2025 GMT
Subject: CN=baf0e38c4b41a431780456189c5e33cb07b77b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:40:c5:56:23:e7:ec:3d:2f:b5:f1:11:70:
0d:67:80:24:94:fe:13:f2:e5:df:b2:7c:c1:bf:4b:
4d:6e:ab:b8:37:40:a0:89:bf:5f:ec:d2:3b:70:04:
ec:30:32:17:f9:6f:d4:db:ae:3c:cc:84:4a:b3:b5:
9e:f3:74:36:32:f4:bc:87:b2:ed:5e:97:05:b4:ca:
d4:2d:31:9a:df:86:0f:6b:e6:bb:cc:db:ff:3f:e9:
22:b2:e0:72:68:87:cd:ed:7d:eb:74:50:6a:17:45:
ab:f3:d0:6c:0e:ce:eb:8d:5f:ea:b9:18:15:f8:2c:
0b:cd:58:b1:b3:6e:16:7e:d5:da:c9:94:d4:b0:c9:
8e:1e:09:f0:8d:21:be:d9:e9:b5:1f:4c:34:68:e8:
e1:cc:c1:01:b5:6d:3a:72:95:19:58:5c:c1:28:3d:
b1:91:6a:e2:ce:84:b4:1f:91:47:c3:ae:dc:e3:d2:
40:0e:d0:99:72:82:44:2c:93:57:ac:c2:75:fb:b5:
89:10:64:42:d3:59:c1:89:a8:d3:72:f0:e6:2a:c7:
0b:08:6d:a9:31:80:09:65:86:93:c1:01:0c:5e:ea:
87:9d:93:23:3b:cc:cf:98:22:26:49:4d:b4:f7:40:
14:97:1b:cc:ee:d0:d6:2e:17:50:14:85:84:78:a5:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:E3:8C:4B:41:A4:31:78:04:56:18:9C:5E:33:CB:07:B7:7B:55
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:b8:dc:c7:2b:40:f9:04:84:79:db:c4:47:74:23:ac:00:
00:02:89:e7:32:72:16:60:77:67:77:23:66:e2:b4:4c:48:79:
28:fe:27:c3:14:97:c2:63:ff:ec:60:e5:c8:e8:6d:49:6f:52:
86:b4:54:77:a2:22:4a:b1:bb:0d:ad:a1:90:dc:74:72:38:d0:
a1:48:5a:a4:3b:4e:f1:f4:6f:fd:8b:f7:2a:63:f7:60:9f:6c:
b3:74:db:99:16:ce:09:5b:20:ea:a4:5a:f0:8c:39:b5:d1:08:
a4:91:89:6f:63:8b:24:a8:35:1c:ef:77:0f:07:44:a3:1e:54:
e0:28:59:28:04:9c:dd:f1:b9:0f:9b:fe:4a:e1:ec:1c:b7:e5:
16:12:38:1d:ff:c4:b3:30:23:2a:0a:7c:56:99:28:7d:66:3c:
82:7c:dd:14:0f:1f:01:71:0c:be:df:72:f1:a9:f4:5b:75:71:
d1:2c:81:5a:b9:e9:cb:08:de:b7:0c:61:0c:e0:13:3f:2d:0d:
5d:b6:ca:b1:fa:d3:b8:56:2f:15:cb:00:82:26:3f:9f:a0:aa:
1b:3a:9f:bd:f5:20:d0:64:ed:26:24:e6:d0:0c:9f:86:c3:f4:
55:85:b8:3d:8d:bb:06:33:25:eb:9f:4b:94:16:d2:a6:15:df:
20:73:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:09:00 2025 by rpki-client