Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: uGinnNJ326fPnoHzpuI2z5mnOhoSO5N6TcbG+bCz0n4=
Subject key identifier: 03:98:CE:24:C9:2C:F3:B5:1E:8F:7A:C4:67:07:A0:F7:C2:84:6C:3B
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 019753B4A53CEC8EF3AEDA1B85BD2597F43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 08:00:37 +0000
Manifest this update: Mon 09 Jun 2025 08:00:37 +0000
Manifest next update: Tue 10 Jun 2025 08:00:37 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: tn0hxBtkRhOaYoBAxRXNFc4gMk+SmaLMfc86fW0fdTA=)
2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:a5:3c:ec:8e:f3:ae:da:1b:85:bd:25:97:f4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Jun 9 08:00:37 2025 GMT
Not After : Jun 10 08:00:37 2025 GMT
Subject: CN=0398ce24c92cf3b51e8f7ac46707a0f7c2846c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:5d:89:ce:7a:97:f8:a8:c5:94:c9:0a:ba:
d0:5e:63:5b:4f:c2:4f:67:05:d7:39:86:26:db:c0:
d6:40:ec:77:f5:93:73:fc:6b:2d:a2:76:29:0b:00:
41:1b:9a:c3:14:c1:f6:cf:53:59:30:22:5d:74:bd:
4b:3c:a8:39:b9:9c:e2:25:a3:cf:b0:d1:4f:83:c8:
d8:a4:b1:87:3a:c5:dc:28:d3:f7:ca:83:10:cc:3c:
48:ab:7f:ca:0a:5d:95:64:da:72:34:76:03:17:ab:
c9:0a:a8:e7:ed:69:cc:4c:6f:57:fc:16:df:b7:4c:
d0:7d:bb:a8:c8:82:89:88:47:d6:03:c5:e7:82:0f:
1b:4f:5a:32:66:1c:64:36:e8:b9:85:ad:c9:48:80:
5b:b3:98:ce:87:89:8a:d9:65:d6:2f:c4:7f:ea:85:
cb:d6:56:b2:2e:c6:72:8b:b3:5a:69:7f:02:36:af:
77:57:f7:f6:13:0d:c2:23:cc:cc:69:63:71:db:ff:
d3:e0:71:e9:c8:9e:4d:17:3a:79:5d:c1:8b:eb:27:
2d:41:77:3c:d8:58:0f:2b:1c:fa:07:f7:49:a9:30:
05:9e:fa:1f:99:da:d5:03:cb:52:dc:c7:2b:49:f5:
0c:bf:81:93:c3:94:90:67:e1:ab:78:51:38:99:87:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:CE:24:C9:2C:F3:B5:1E:8F:7A:C4:67:07:A0:F7:C2:84:6C:3B
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4c:e6:eb:f6:b7:1e:a6:8c:ee:f1:ec:b4:02:59:ad:ef:f2:
c6:bf:06:48:29:4c:88:d9:8a:f5:89:1d:25:71:22:dd:ea:cf:
b7:77:c3:a0:b4:9c:47:6d:6f:b3:4f:ad:49:ab:d2:0e:12:04:
dd:48:d9:a7:b7:e8:55:eb:69:42:f2:55:33:53:a4:64:b3:ab:
fa:38:f5:89:0c:23:f9:2d:3e:c7:47:15:de:82:3c:60:65:53:
54:63:64:64:3b:57:ee:fc:3c:0f:dc:d3:19:c3:86:1e:91:6b:
49:85:6e:5f:a9:c0:d6:36:76:52:b9:81:56:4d:92:68:35:ec:
41:8d:6e:83:84:29:7f:f4:9a:e0:fb:c7:08:48:d3:c3:e3:f1:
4d:e8:f1:7f:37:59:40:6a:a8:90:c5:b6:22:2e:52:99:c2:f4:
12:9a:4f:fa:d5:b9:ce:94:75:eb:fd:03:48:a1:db:31:f7:dd:
22:75:af:7e:66:a0:72:1f:f7:54:ad:9c:82:74:0b:68:6c:5e:
5c:22:f1:b8:a4:e5:28:c6:d6:03:b6:d9:0f:85:50:d2:b1:15:
aa:b7:7f:30:7c:7f:25:d8:1d:60:55:79:71:18:0b:63:f1:63:
94:63:63:c5:33:44:9f:e6:68:86:f0:e5:b8:1a:ec:c6:82:c5:
cf:03:a1:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtKU87I7zrtobhb0ll/Q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk
YWQyYzgwHhcNMjUwNjA5MDgwMDM3WhcNMjUwNjEwMDgwMDM3WjAzMTEwLwYDVQQD
EygwMzk4Y2UyNGM5MmNmM2I1MWU4ZjdhYzQ2NzA3YTBmN2MyODQ2YzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wtdic56l/ioxZTJCrrQXmNbT8JP
ZwXXOYYm28DWQOx39ZNz/GstonYpCwBBG5rDFMH2z1NZMCJddL1LPKg5uZziJaPP
sNFPg8jYpLGHOsXcKNP3yoMQzDxIq3/KCl2VZNpyNHYDF6vJCqjn7WnMTG9X/Bbf
t0zQfbuoyIKJiEfWA8Xngg8bT1oyZhxkNui5ha3JSIBbs5jOh4mK2WXWL8R/6oXL
1layLsZyi7NaaX8CNq93V/f2Ew3CI8zMaWNx2//T4HHpyJ5NFzp5XcGL6yctQXc8
2FgPKxz6B/dJqTAFnvofmdrVA8tS3McrSfUMv4GTw5SQZ+GreFE4mYcZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOYziTJLPO1Ho96xGcHoPfChGw7MB8GA1UdIwQY
MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt
ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4
LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkzm6/a3
HqaM7vHstAJZre/yxr8GSClMiNmK9YkdJXEi3erPt3fDoLScR21vs0+tSavSDhIE
3UjZp7foVetpQvJVM1OkZLOr+jj1iQwj+S0+x0cV3oI8YGVTVGNkZDtX7vw8D9zT
GcOGHpFrSYVuX6nA1jZ2UrmBVk2SaDXsQY1ug4Qpf/Sa4PvHCEjTw+PxTejxfzdZ
QGqokMW2Ii5SmcL0EppP+tW5zpR16/0DSKHbMffdInWvfmagch/3VK2cgnQLaGxe
XCLxuKTlKMbWA7bZD4VQ0rEVqrd/MHx/JdgdYFV5cRgLY/FjlGNjxTNEn+ZohvDl
uBrsxoLFzwOhjg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:11:53 2025 by rpki-client