Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: l4LqGxRDPnUs/eB9LNdZq8xjW05h0pqS7V1ZzNpXf3I=
Subject key identifier: B0:E7:DB:4A:E0:81:E3:FC:ED:02:3C:C2:54:C4:67:49:93:BB:17:C4
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 0196507F130EBADDAABF81F3F6DA07BAE994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 05DF
Signing time: Sun 20 Apr 2025 00:00:27 +0000
Manifest this update: Sun 20 Apr 2025 00:00:27 +0000
Manifest next update: Mon 21 Apr 2025 00:00:27 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: nd93tlm/kIeioVITNt34Pz+8XZr5mGjfJpvD3SE4Msk=)
2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:13:0e:ba:dd:aa:bf:81:f3:f6:da:07:ba:e9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Apr 20 00:00:27 2025 GMT
Not After : Apr 21 00:00:27 2025 GMT
Subject: CN=b0e7db4ae081e3fced023cc254c4674993bb17c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:1d:ef:94:af:aa:33:48:6e:7c:5c:58:f0:
86:68:27:87:d0:f4:1e:aa:53:3d:c3:6f:37:3f:0f:
47:40:b2:6e:e7:66:82:ca:61:94:9a:5a:59:0e:9f:
fc:b3:aa:0e:38:fd:35:e2:2a:13:26:50:ff:c0:81:
0e:93:41:74:55:8e:8a:e5:be:f3:cd:9b:7a:ba:89:
d8:2a:5a:44:c6:9e:77:ff:aa:c1:ee:a3:7d:91:bb:
4b:5a:c2:9d:76:f6:d1:43:e6:67:33:08:13:44:58:
22:48:a9:a9:bf:62:09:b4:97:65:ed:c0:a4:cd:a6:
bf:fb:48:55:78:ff:1f:3d:33:0d:04:f9:df:ab:ae:
21:96:be:9d:5f:2b:79:eb:9c:0c:d0:83:48:39:95:
4f:ad:1a:05:b8:50:b6:f6:de:a7:7a:06:1d:0e:6e:
be:f6:27:03:7b:6e:de:50:c9:b6:64:94:24:a4:5f:
c4:9e:2f:b5:f0:78:ca:cf:19:23:b6:3b:89:92:2d:
2b:9f:6e:73:0e:66:dd:ed:0f:9a:4c:13:a1:fa:08:
a8:3e:90:ae:86:b4:b6:83:cb:4f:6c:d3:5b:45:84:
11:6e:f3:f5:51:70:a4:ff:8e:9d:fd:fa:92:f9:bd:
4e:b9:29:c7:f8:71:2d:35:e6:46:2a:50:eb:7b:4c:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:DB:4A:E0:81:E3:FC:ED:02:3C:C2:54:C4:67:49:93:BB:17:C4
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:1d:26:20:5d:71:4f:3b:80:53:05:9e:18:2c:26:ad:0d:
09:19:f0:0f:a2:d8:3f:65:c8:11:73:e6:63:d3:51:c7:0f:1b:
c5:80:fd:db:82:34:f4:e8:86:7b:e8:16:03:8d:f4:29:55:ed:
0e:cc:9a:19:ce:46:bb:0b:d4:9d:5e:db:b6:77:a8:03:dc:10:
8f:b3:3b:aa:66:6e:17:83:a7:34:b7:c7:dd:d4:7e:01:a5:9e:
76:79:23:3e:c2:a5:2c:24:fb:6c:02:ba:61:70:e3:f5:da:6c:
d7:1f:4d:4f:f5:23:1c:18:a3:7e:ef:2e:55:8c:2f:08:86:ca:
20:60:38:64:18:b6:53:72:11:16:ed:ab:3c:70:8c:bb:a4:f8:
71:56:8c:2d:c5:a7:9d:c9:01:d2:0d:1c:b4:6d:5c:98:e8:e8:
b1:9c:57:fc:fc:93:1c:ed:cd:6e:45:62:1e:1f:a6:d7:1d:06:
87:4f:92:b5:b1:83:2e:04:5c:61:0a:52:a8:15:ab:a8:b1:2f:
1f:52:33:d0:1b:03:9b:e1:d2:f1:64:df:3e:0c:25:b3:a2:03:
db:f9:20:b8:cb:6a:e4:82:82:b9:95:d3:de:20:61:77:52:53:
8f:e9:21:d5:cd:3b:aa:f0:b5:f7:53:c2:ea:b5:50:f8:6a:2e:
89:07:6e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfxMOut2qv4Hz9toHuumUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjE2NDE4OWY3ZGI2MWU4YjYxZmRkYWU1NjIyYTBiMTM0
ZjVjMTYwHhcNMjUwNDIwMDAwMDI3WhcNMjUwNDIxMDAwMDI3WjAzMTEwLwYDVQQD
EyhiMGU3ZGI0YWUwODFlM2ZjZWQwMjNjYzI1NGM0Njc0OTkzYmIxN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEAd75SvqjNIbnxcWPCGaCeH0PQe
qlM9w283Pw9HQLJu52aCymGUmlpZDp/8s6oOOP014ioTJlD/wIEOk0F0VY6K5b7z
zZt6uonYKlpExp53/6rB7qN9kbtLWsKddvbRQ+ZnMwgTRFgiSKmpv2IJtJdl7cCk
zaa/+0hVeP8fPTMNBPnfq64hlr6dXyt565wM0INIOZVPrRoFuFC29t6negYdDm6+
9icDe27eUMm2ZJQkpF/Eni+18HjKzxkjtjuJki0rn25zDmbd7Q+aTBOh+gioPpCu
hrS2g8tPbNNbRYQRbvP1UXCk/46d/fqS+b1OuSnH+HEtNeZGKlDre0zf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDn20rggeP87QI8wlTEZ0mTuxfEMB8GA1UdIwQY
MBaAFAaxZBiffbYei2H92uViKgsTT1wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYt
ZmJhNjRjMjNkM2RhLzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYtZmJhNjRjMjNkM2Rh
LzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx4dJiBd
cU87gFMFnhgsJq0NCRnwD6LYP2XIEXPmY9NRxw8bxYD924I09OiGe+gWA430KVXt
DsyaGc5GuwvUnV7btneoA9wQj7M7qmZuF4OnNLfH3dR+AaWednkjPsKlLCT7bAK6
YXDj9dps1x9NT/UjHBijfu8uVYwvCIbKIGA4ZBi2U3IRFu2rPHCMu6T4cVaMLcWn
nckB0g0ctG1cmOjosZxX/PyTHO3NbkViHh+m1x0Gh0+StbGDLgRcYQpSqBWrqLEv
H1Iz0BsDm+HS8WTfPgwls6ID2/kguMtq5IKCuZXT3iBhd1JTj+kh1c07qvC191PC
6rVQ+GouiQduhw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:25 2025 by rpki-client