Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: x47lFF4n9ju4NkpRyFcC7JnWOxWe/3oqOGmcltPPgPU=
Subject key identifier: F8:E4:90:27:C5:B9:AB:43:C8:40:38:CF:3E:4D:43:E2:C9:F5:5C:7E
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 01984A419B5C8D788A80BD9C3702B9114F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 05B2
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: 5aFkKjaDOoKSaWUoRU3t52BlVvT7iaJJHtid83seq/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9b:5c:8d:78:8a:80:bd:9c:37:02:b9:11:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=f8e49027c5b9ab43c84038cf3e4d43e2c9f55c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:43:1f:61:97:49:a3:44:79:09:31:7d:2e:
3b:6b:ef:4b:a5:68:e6:e7:d7:1b:3c:d7:16:c1:fa:
9e:bd:50:58:12:26:4b:20:5b:44:c3:06:3a:f7:16:
cb:38:ef:47:53:0d:8c:4c:9d:d8:79:97:50:15:ce:
4e:03:62:f7:91:8a:20:16:56:16:d3:5b:54:2a:d3:
0d:40:3c:31:45:99:c4:65:db:a9:66:cc:58:cb:93:
64:f3:56:71:6b:73:28:59:13:fa:17:f7:b8:7d:a2:
33:56:c3:35:49:d2:60:aa:a8:be:f9:54:ff:53:28:
9d:ae:5b:d4:7f:e8:1e:7c:11:96:7f:cd:6d:43:ba:
ea:7b:53:8e:eb:6f:22:57:2f:e2:b9:f5:71:61:cc:
85:fb:ac:ed:4a:6f:46:35:ff:b4:d4:93:e5:d3:41:
79:7f:80:f9:ee:a4:1b:43:b3:8c:36:90:19:de:15:
61:be:5a:6f:5c:60:c8:3a:10:7a:3b:c5:1b:0e:4f:
11:df:75:d7:74:aa:71:22:06:34:4e:20:01:14:7c:
9b:62:5e:ee:86:64:8e:e8:66:31:92:d2:59:a3:88:
24:f8:bf:5a:f6:67:78:6f:66:5a:ab:5a:bb:84:ce:
52:e6:64:5c:75:4c:d3:c0:23:7a:3c:1a:eb:9d:d3:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E4:90:27:C5:B9:AB:43:C8:40:38:CF:3E:4D:43:E2:C9:F5:5C:7E
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:bf:b8:7e:d2:2a:36:94:45:55:70:3a:0d:67:f2:11:bc:
f7:7b:dd:0d:e0:d2:85:e3:7a:f6:f3:a2:62:63:07:99:31:f9:
4a:59:d3:5f:74:c9:12:0e:06:14:96:c6:53:4d:31:3b:e1:de:
12:a2:1b:f1:b7:91:5a:8e:5a:b3:f7:49:c1:a4:44:ae:88:2f:
ea:94:57:46:55:74:1c:86:52:a5:c3:b7:4e:82:4d:b8:66:21:
03:c6:6a:ff:2b:9c:51:a9:68:df:94:5e:b6:25:7e:c7:42:ca:
e0:b2:98:4a:4b:72:0b:51:80:71:ee:4e:0d:98:3a:b9:55:79:
5b:31:b7:a7:4e:9e:0a:9c:da:05:d6:07:10:41:c4:5c:0a:63:
05:9a:fc:78:fc:23:c6:9a:ff:a7:02:86:b3:9b:38:d9:f9:27:
ef:62:9d:4d:59:19:bf:13:e6:8b:9d:4f:90:c6:8a:7a:b3:3d:
cf:07:11:1d:0b:0c:65:91:52:bc:87:95:8b:17:ce:f3:21:83:
fc:3e:43:93:86:6e:45:8a:3a:8f:ff:5b:9d:5f:a8:38:8c:87:
9e:1e:8c:4f:db:7a:f9:ff:4f:f9:aa:51:a0:2a:2b:f2:d3:34:
b4:05:87:28:1f:b3:57:5a:39:47:d0:2e:6e:b2:e7:4e:f7:99:
fe:a3:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:30 2025 by rpki-client