Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: fPAsPJiAWNfyvPOmK+ltdTX8tMlh5MsejR5Arb971tA=
Subject key identifier: 57:FC:36:98:36:77:7C:8D:34:33:A7:CC:93:0C:58:7F:1E:D3:75:EE
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 01974A7A983EBDD23A6624316B9F0908BD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 03A3
Signing time: Sat 07 Jun 2025 13:00:37 +0000
Manifest this update: Sat 07 Jun 2025 13:00:37 +0000
Manifest next update: Sun 08 Jun 2025 13:00:37 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: ulGykGPxCGQHMaFmnbKuKG409x+mAB2AX+M2hMYGgyw=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:98:3e:bd:d2:3a:66:24:31:6b:9f:09:08:bd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jun 7 13:00:37 2025 GMT
Not After : Jun 8 13:00:37 2025 GMT
Subject: CN=57fc369836777c8d3433a7cc930c587f1ed375ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:53:76:b3:58:d3:6b:7a:f0:e3:f7:f5:d2:
1d:42:a2:79:02:b8:11:b3:40:39:e8:bc:3d:d3:52:
7f:ba:d0:7d:b0:c2:62:b2:3c:cb:ab:64:d8:bd:4a:
38:da:b9:2d:e0:65:9b:6e:98:20:4e:6b:46:9f:ab:
62:94:e6:28:5b:ce:17:47:6c:57:13:ee:6f:e8:74:
65:cf:f0:14:13:22:36:62:eb:21:fe:6d:32:3e:09:
3d:8e:de:2a:b1:03:93:3d:66:6c:9c:52:54:30:13:
76:35:d7:c3:e9:8c:be:29:47:0e:38:b5:57:5a:c5:
a7:fb:1b:7e:09:15:bc:f7:65:30:73:1a:b6:40:f1:
82:41:4e:02:04:61:bd:18:03:f4:c8:86:8c:20:b7:
76:14:de:6e:7d:be:9c:e5:f8:33:00:07:72:8d:20:
21:67:9c:db:94:79:44:31:a8:a8:c3:3b:3f:ca:1a:
81:de:19:3b:da:07:24:da:bb:ac:b8:04:de:89:f6:
78:db:03:72:a3:ff:97:5e:60:83:df:7b:3a:a8:a3:
94:22:0d:e8:09:ad:39:9b:73:72:73:80:c2:2c:31:
ae:15:6c:9e:aa:44:89:3f:7a:17:95:b3:26:ca:22:
af:10:f6:3c:a6:4f:de:41:68:49:fd:3f:8f:20:fc:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:36:98:36:77:7C:8D:34:33:A7:CC:93:0C:58:7F:1E:D3:75:EE
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ee:e8:bd:c8:c6:6b:96:c3:af:47:82:85:9e:cf:73:22:0c:
61:16:6c:6a:5c:79:a6:be:b5:6c:ce:89:e2:6c:84:24:aa:75:
b8:25:fa:5a:b0:a0:93:e4:2d:26:70:f3:15:c4:7f:8d:e0:8a:
22:71:0f:cc:d6:24:b6:fd:5f:4f:70:80:5b:4d:24:1a:be:35:
57:87:41:b0:be:20:3d:db:1a:51:38:e8:17:8a:b5:38:e4:44:
05:95:5f:5b:5b:d8:20:32:d1:0c:ec:96:75:b1:20:92:58:c9:
79:a7:3a:86:1b:df:c0:6a:94:16:ab:d6:55:d8:70:1d:c1:83:
08:e9:bb:fd:aa:e3:32:82:35:bd:71:3a:02:dc:89:d9:a3:e9:
a4:2e:86:3a:c4:e1:aa:d8:c8:34:1a:b0:59:52:2a:c3:b6:85:
bb:3d:1e:38:e6:68:0c:c6:c8:51:d4:b6:b5:4a:34:ae:46:96:
23:69:5c:bc:3d:fb:39:cf:ae:67:10:cb:28:c4:6f:5c:06:33:
be:6f:2d:1e:ec:16:a7:4c:ae:17:d2:e2:a5:f2:23:5e:6f:90:
1e:f0:44:86:b2:40:6c:15:5a:60:89:27:6e:a3:4c:65:a8:22:
ab:0c:8d:33:9f:cb:ec:0e:e7:f1:27:82:7b:c4:ba:fe:b5:e6:
11:32:e7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:58 2025 by rpki-client