Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: QFChDO6X3qIEITpycNy+GYmDZCyjMtsasYSr8gfRjK4=
Subject key identifier: 72:B7:4F:DC:F3:01:E3:2F:4D:BE:99:F2:93:62:05:5E:6E:77:3A:5B
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 01964AB3F456D591F4BD959AA50A3E67DCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 0E2C
Signing time: Fri 18 Apr 2025 21:00:29 +0000
Manifest this update: Fri 18 Apr 2025 21:00:29 +0000
Manifest next update: Sat 19 Apr 2025 21:00:29 +0000
Files and hashes: 1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: 636gpHnHLm4SFqQPqwbpCG5WHJonJ18OPuZ5QxT0ljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:f4:56:d5:91:f4:bd:95:9a:a5:0a:3e:67:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Apr 18 21:00:29 2025 GMT
Not After : Apr 19 21:00:29 2025 GMT
Subject: CN=72b74fdcf301e32f4dbe99f29362055e6e773a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:44:07:45:ae:bf:65:f6:02:44:b5:ad:cf:
11:34:1b:06:77:5e:0f:3b:06:cf:77:75:ea:08:40:
b1:59:c6:f0:d9:07:d6:df:88:61:23:e6:1f:7b:01:
45:5e:ad:d7:d9:f7:11:a2:2c:0a:d5:37:0f:0b:7d:
f2:87:a7:cf:89:b7:b1:e6:a3:11:c0:b0:80:a7:28:
01:b4:a8:54:46:00:47:b9:82:7e:aa:f4:2d:43:b2:
11:86:b5:d2:88:87:0e:34:af:c6:52:38:56:44:c6:
43:06:e0:84:06:3f:64:2f:50:72:36:a4:17:be:4a:
62:fb:47:fc:bc:6d:51:7f:9c:9b:54:8f:97:7d:6a:
11:59:ad:ce:81:ad:97:f2:e1:1a:b4:eb:e9:83:3b:
66:2d:2d:ff:b2:87:56:e1:42:7c:e5:bd:12:64:f8:
8c:bf:87:3a:27:f4:32:ff:86:df:38:92:eb:42:65:
60:0c:1a:2f:23:25:95:69:d0:71:fa:98:9a:7d:71:
47:9c:d1:c4:46:f2:ac:f2:c0:ab:65:02:7d:e4:a5:
d3:1b:02:48:41:4b:1f:a9:6d:0a:38:ee:9d:79:ea:
a3:7d:7a:d0:64:86:77:e4:af:9e:a9:b3:f6:c1:8c:
0a:05:c0:9e:49:75:3b:51:90:bb:b5:ea:a7:0b:ca:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B7:4F:DC:F3:01:E3:2F:4D:BE:99:F2:93:62:05:5E:6E:77:3A:5B
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:88:8f:80:61:d9:8e:4c:12:5c:8a:e4:28:ab:77:dc:b2:83:
38:be:c4:59:02:54:67:ce:3b:88:a4:57:56:a8:4c:83:2f:eb:
0e:b9:7c:ba:a4:ca:8a:4d:0a:b0:16:82:17:93:d5:fe:60:68:
a8:f5:2c:6b:fe:5b:ea:74:e9:a6:50:4d:17:e2:26:10:04:66:
da:15:c3:30:fa:cb:fa:37:40:85:c3:5d:af:83:36:72:30:27:
fd:29:88:49:c6:54:38:73:24:de:f2:3a:18:82:8d:ee:60:72:
0a:36:17:1d:96:70:64:33:64:31:c8:fa:24:44:ac:fc:76:f2:
5c:11:cc:06:39:8e:5d:a2:e0:dd:02:13:6d:8b:8b:3e:85:f0:
31:df:9b:a4:77:2f:4b:2d:aa:5e:3c:c8:98:14:ae:cb:96:15:
d8:63:e0:9c:b1:d5:69:2a:ba:a8:ec:b4:19:10:39:57:0b:54:
ac:40:fd:0a:23:01:80:fd:e4:38:50:65:59:3a:21:17:35:0b:
6c:08:7f:89:2a:f1:8f:33:e4:a4:22:df:87:66:00:47:25:dd:
27:40:49:44:22:d4:04:60:9d:6f:94:2e:31:30:41:36:f3:53:
44:10:0c:92:08:75:39:ef:13:5e:e6:ea:ea:8d:11:71:c5:ae:
06:c3:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:29:15 2025 by rpki-client