Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: 9MgPAarf1uevk5okchkRDwm85eHCFEzQY5cFtAj8Upg=
Subject key identifier: 80:1D:CA:EB:3C:BF:09:AD:A6:7D:D1:02:FF:F0:EB:4C:FB:FC:F5:0F
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 0194C463A6888F28754A0CF86110C1C6833E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 02:00:52 +0000
Manifest this update: Sun 02 Feb 2025 02:00:52 +0000
Manifest next update: Mon 03 Feb 2025 02:00:52 +0000
Files and hashes: 1: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: hCP+12MVwpGOKEtzk5eYmRwy3wsHqwYmo6a6J0HQfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a6:88:8f:28:75:4a:0c:f8:61:10:c1:c6:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Feb 2 02:00:52 2025 GMT
Not After : Feb 3 02:00:52 2025 GMT
Subject: CN=801dcaeb3cbf09ada67dd102fff0eb4cfbfcf50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:ce:f7:2d:9f:96:0c:7e:b3:a5:f4:15:b8:
0c:54:10:4b:3f:45:85:fd:df:fd:f3:a3:59:73:af:
1e:11:69:da:a5:5c:56:26:0a:12:50:26:d6:49:71:
c7:61:c2:b5:cf:da:21:12:b3:f1:ec:9a:3d:17:a6:
85:a7:46:75:47:32:9f:ef:79:c7:de:e6:9e:7c:9b:
59:fa:a2:d2:ba:c5:95:ff:83:fd:26:ab:c5:c7:97:
db:ed:02:62:9d:b8:f0:8b:69:1b:08:9b:f8:1a:26:
91:1a:40:54:07:01:bd:7c:ce:8a:bd:e1:94:9d:01:
5f:96:86:04:86:f7:a4:a1:65:60:b5:fe:c2:de:d1:
4f:b5:2c:15:9b:c9:ea:73:56:05:75:11:cc:ec:d4:
ac:90:ff:c1:ee:97:12:34:8d:78:ee:e9:ee:e1:6c:
e8:d6:a6:38:a1:c1:4f:19:b1:f3:37:74:2b:b7:4e:
5c:de:7c:9a:11:e7:3a:1f:47:c7:ec:b4:f4:af:75:
0f:f1:d2:8b:23:b0:33:96:2f:35:3a:af:f1:ab:cf:
53:40:38:35:69:0a:cb:cb:66:94:0c:00:87:40:e3:
a1:ab:13:a6:d0:dd:5c:17:eb:d1:22:83:78:2f:f0:
1f:75:35:45:0b:7d:d2:cf:4b:18:71:78:e5:d8:02:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:CA:EB:3C:BF:09:AD:A6:7D:D1:02:FF:F0:EB:4C:FB:FC:F5:0F
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5f:b0:50:e3:b1:c6:e2:3c:14:88:0b:d3:d0:0d:76:75:ff:
a1:f6:a6:90:10:9f:8b:d6:f5:e8:16:e0:b7:2e:f2:04:74:ef:
18:33:df:fe:b3:4d:f7:43:6a:25:ec:1a:f4:2a:60:3e:97:c5:
98:0d:51:cc:e4:f1:44:ed:d6:c6:4b:f2:0f:26:62:46:fa:78:
ba:6a:45:fd:04:0c:85:86:08:f6:51:4a:58:13:8b:b3:3b:d7:
1a:50:88:2f:8a:16:48:fa:4f:19:40:be:d0:d8:28:2a:fe:35:
95:4c:c3:1a:af:e6:65:0a:a5:0b:9c:31:67:d8:53:19:68:0a:
8a:6e:67:bb:1f:da:69:2f:df:d7:58:cf:e9:1e:2a:51:ff:7d:
82:8d:d3:c1:e3:70:d5:86:c5:9b:2a:7a:4c:a2:1b:5e:cd:ec:
c9:4e:df:36:3d:66:41:fb:04:cf:e0:40:66:1e:43:25:be:30:
40:a6:e3:4b:57:02:b8:57:8b:31:10:06:7c:ba:c3:31:8e:d2:
e8:ef:ae:26:92:2f:1c:c7:1a:33:81:33:d8:43:7f:a5:87:ff:
93:2d:4d:eb:7c:71:4c:95:44:6d:53:3d:87:04:53:ad:44:1e:
6f:6d:94:5e:d3:0a:8c:a1:c7:84:37:c1:af:30:1e:01:57:a1:
23:c0:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:19 2025 by rpki-client