
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: Rs+qXO4qAsi2ozCwB14552PYC3Vi95jWST7+cemnFzg=
Subject key identifier: C7:02:62:24:9B:A8:88:A2:A2:D5:89:3F:B8:5C:6B:09:83:33:83:03
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 019849D34A783F984F808F0674DFF2E3942D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1557
Signing time: Sun 27 Jul 2025 03:00:40 +0000
Manifest this update: Sun 27 Jul 2025 03:00:40 +0000
Manifest next update: Mon 28 Jul 2025 03:00:40 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: YVsQdr488ev9/z7s/9etWDMBm3TDr+IxlH6SDynNVSw=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4a:78:3f:98:4f:80:8f:06:74:df:f2:e3:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Jul 27 03:00:40 2025 GMT
Not After : Jul 28 03:00:40 2025 GMT
Subject: CN=c70262249ba888a2a2d5893fb85c6b0983338303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:ac:84:6e:91:a4:1f:28:0f:2f:13:f4:64:
01:33:b8:30:9c:00:12:5d:c8:1a:ca:49:01:99:76:
20:d7:97:09:9d:c3:48:7f:1e:eb:05:ff:c8:cc:43:
2d:a5:e2:50:c2:1b:40:e8:46:1c:2e:b9:eb:32:cc:
bd:f1:7c:f3:12:18:b2:24:49:1f:22:4a:ba:f8:8c:
30:24:c5:96:11:45:2f:d4:e6:74:cc:ca:b0:09:7d:
05:78:c8:f9:a6:69:f3:d9:22:cb:0a:87:3e:05:0a:
2b:5f:27:9f:64:69:c8:19:0b:97:a6:1a:af:d3:7f:
10:ad:40:61:8e:bb:d6:b6:3e:b5:f1:3f:db:4e:56:
5d:25:39:e0:fc:05:9f:7a:0a:c7:13:71:8d:ec:c2:
8a:16:1c:81:1d:9a:9f:08:b0:fe:64:ad:21:02:c2:
fb:b5:29:4f:4a:7b:12:df:a4:a1:b1:62:7e:93:61:
f0:d7:5e:f0:ec:bc:a9:a1:59:8e:ed:a6:79:45:1a:
3d:3c:d7:76:cf:ef:9c:df:ab:dc:15:9d:19:bc:64:
ee:96:43:a1:2d:38:65:06:00:17:82:c7:3a:74:ee:
2d:35:14:7e:92:c7:d4:11:31:89:5f:13:9a:38:ab:
ff:14:66:24:4a:b2:af:96:86:bf:63:50:8c:fe:2e:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:62:24:9B:A8:88:A2:A2:D5:89:3F:B8:5C:6B:09:83:33:83:03
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7d:a2:35:ac:ce:f3:5c:24:9b:2f:b7:3f:86:ae:b8:4c:6d:
8e:70:dd:91:0e:8a:d5:da:97:b6:cd:7f:fa:31:68:0b:28:67:
3e:49:96:2e:70:9a:73:1a:6c:9d:90:5f:c2:8e:ae:2a:21:fd:
74:35:1b:48:c2:22:ea:96:cd:24:8a:7c:79:b1:79:df:33:44:
03:2b:8d:86:ba:44:41:45:c1:ff:d0:70:cf:d4:e1:df:38:ed:
52:40:55:7b:46:bb:f4:c3:cd:4e:b9:9f:7a:1e:8b:28:64:ff:
ed:b6:96:12:54:17:4c:fa:52:6c:cd:da:55:33:90:2e:f9:cb:
d6:dd:6b:2e:dc:58:50:9b:e5:e3:50:1e:0a:ba:cd:3d:e9:8e:
5e:5f:e8:53:e8:5b:6b:07:0b:15:c6:44:17:34:f5:f3:76:75:
ec:6d:f5:7e:e5:3e:d1:f1:e9:f2:c6:56:fe:8f:a1:e7:68:ab:
7c:70:eb:f9:34:cc:42:12:08:3a:01:ea:ce:76:56:cf:75:cd:
cf:0d:21:b7:2f:d3:78:d0:2f:78:c3:bb:8e:c0:a2:13:53:2e:
43:9d:d5:00:91:d2:9f:87:3e:38:57:03:68:0d:76:90:2f:35:
b3:7d:11:4c:0a:3c:90:52:de:a7:d5:35:23:85:0a:62:f3:b0:
c7:b4:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:44:42 2025 by rpki-client