Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: IJyFcMJ8zES0fiqNpOyk0sUz4VEN/fn9DLjIOjW2RMY=
Subject key identifier: 37:83:82:0B:00:B6:A0:BB:E3:F9:0C:7A:A8:41:CB:3A:23:34:2D:83
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 01965424CF0F7B01C2CD57C636B6BC0BBD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 04AE
Signing time: Sun 20 Apr 2025 17:00:20 +0000
Manifest this update: Sun 20 Apr 2025 17:00:20 +0000
Manifest next update: Mon 21 Apr 2025 17:00:20 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: GyGSnzZma9GsmwTVLGrvc4KsDK00kAlsrYiFomMnvxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:cf:0f:7b:01:c2:cd:57:c6:36:b6:bc:0b:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Apr 20 17:00:20 2025 GMT
Not After : Apr 21 17:00:20 2025 GMT
Subject: CN=3783820b00b6a0bbe3f90c7aa841cb3a23342d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:d9:53:e1:4e:f3:2e:60:a0:37:f7:fc:fa:
68:65:2c:53:1b:ab:b9:c4:0e:50:59:5d:42:3d:a8:
e8:01:6c:0c:33:2c:23:b0:90:ca:8e:a8:b8:90:a9:
02:50:64:84:aa:88:a3:60:6d:83:8b:07:73:b6:66:
8d:0f:fb:0c:06:4d:c9:77:8e:6c:88:2d:da:18:22:
58:47:da:e1:f6:60:90:ff:7e:65:72:b3:3b:ff:90:
5b:ff:97:3a:99:3e:23:bf:56:5d:db:e9:33:b5:25:
70:03:19:95:af:8f:4d:16:32:c2:ac:0f:4e:58:4e:
f7:ba:09:cf:74:5d:e2:a5:9e:b2:d2:ca:9c:18:35:
7b:cd:83:94:2a:f8:bb:70:f9:cb:1c:d3:c3:a4:c1:
98:48:11:bf:3a:24:29:4f:43:d1:3b:a5:14:51:15:
53:41:cd:b2:7d:8b:28:d6:ce:e9:58:eb:df:8b:c5:
43:e1:82:e8:34:41:69:ee:13:3c:bd:0f:15:de:8c:
98:83:f4:7e:4a:5e:15:1b:7b:77:85:09:0e:07:7f:
1c:ab:07:27:6d:00:70:5d:f9:a0:a9:00:67:ac:d4:
8e:f7:20:38:8a:07:b6:66:c9:cf:8f:64:39:05:28:
66:c6:c1:57:5d:2c:99:42:9b:fd:4b:09:1c:ae:ee:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:82:0B:00:B6:A0:BB:E3:F9:0C:7A:A8:41:CB:3A:23:34:2D:83
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:7c:45:7d:f7:4c:23:0c:4b:da:96:2b:80:99:1f:4f:c6:
79:d9:0f:8f:bb:f0:d0:50:8e:25:d9:de:03:0b:c8:ce:d5:65:
01:9a:bb:11:34:f6:e8:d3:01:2d:e2:6e:95:4a:97:d1:00:23:
10:8d:47:32:c9:db:b2:b8:96:21:d1:0d:38:3f:c6:a6:1e:ad:
38:da:e9:8f:c6:2d:c0:59:88:38:24:92:86:e5:2d:74:a0:97:
d7:62:39:58:31:7b:c7:f5:0b:0b:4a:a2:64:a1:7e:64:79:c9:
b4:34:38:b0:0b:98:21:cd:32:b7:3b:8b:c9:2e:f2:af:87:0f:
38:b5:f4:3a:25:b9:3a:8c:30:55:20:dd:46:27:9a:7d:97:cf:
37:cf:50:03:18:1f:e1:29:84:99:64:99:0d:12:76:1b:aa:af:
63:6e:ec:38:9b:63:de:7b:5a:81:06:5c:3a:b6:68:99:ed:1c:
e4:40:00:45:1d:71:89:b9:f3:f2:11:cc:51:e3:30:f0:46:63:
ec:b4:2e:b0:8e:a0:b6:53:78:42:98:08:0f:d9:f2:bf:32:ff:
96:5c:d0:ff:f1:d7:77:73:af:7c:82:8b:70:d0:c6:6f:98:c1:
74:39:c6:cc:f5:c6:2a:38:79:3c:bd:84:a2:59:93:e4:9d:33:
17:86:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:59 2025 by rpki-client