Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: czoRxTnz9aou8DHV2us4MZ+OCPZohiHaCqR3pl+0cbU=
Subject key identifier: A6:2B:B9:F2:B8:95:A6:14:CA:07:90:70:E7:0B:D9:5F:90:C2:E5:DB
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 0194BABB5D5EB120F88DA53AA5D915309888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: IB8kyPp8IGrIlf2kYb8TdSZYTlJhUyN6QhrTrU3vH6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5d:5e:b1:20:f8:8d:a5:3a:a5:d9:15:30:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=a62bb9f2b895a614ca079070e70bd95f90c2e5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:b3:c6:91:fa:a8:c3:ee:b8:73:81:21:81:
e4:29:9f:3c:1e:00:b4:99:05:e6:e6:c2:79:5b:25:
e2:58:12:22:58:c8:87:08:b6:25:9e:42:02:07:a7:
72:59:ea:a3:8c:d0:a6:6b:63:7d:36:ad:83:b0:d7:
44:32:a0:6e:a0:8f:f5:88:2e:65:55:c8:f8:5b:72:
1a:28:0c:7f:9f:e8:14:a6:e8:88:f5:05:cc:54:2f:
45:d2:a0:9d:f4:d3:14:9c:36:f4:6f:07:b3:50:27:
3c:9a:a0:d4:61:b4:99:d4:db:fd:dd:bb:73:eb:da:
cf:82:b5:82:d8:b0:5e:d6:ee:89:94:3b:61:c4:78:
f5:bb:da:f1:c0:ca:e1:1d:27:c9:6f:85:b1:8b:ef:
7a:dc:91:7f:c5:dd:2c:3d:a7:84:fc:ef:95:d7:ba:
61:32:42:1a:54:2b:6c:20:67:95:22:be:26:9b:71:
44:31:bd:11:94:fa:17:4e:f2:1b:4d:1c:16:7a:9e:
a1:25:9f:d4:fd:35:bd:53:d8:64:d9:9f:d0:0c:af:
98:da:27:c0:d9:ea:2d:f4:5b:43:d2:f8:3c:60:a9:
62:46:5b:a3:a1:2a:61:28:bd:98:e2:aa:bc:44:99:
3f:6c:14:11:eb:37:9d:02:cd:6f:05:81:f7:ff:a7:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:B9:F2:B8:95:A6:14:CA:07:90:70:E7:0B:D9:5F:90:C2:E5:DB
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ac:a5:fb:0c:0e:fb:35:4d:01:f7:16:e6:37:ab:6b:d0:66:
4f:10:4d:87:5f:9c:41:a4:c2:11:aa:be:07:f4:15:b6:e6:fc:
3f:db:dc:99:fd:72:7d:e5:c5:fe:e7:4f:fc:cd:ae:93:7e:13:
b1:59:83:b0:31:39:25:5c:2e:ff:87:b1:f7:82:37:93:5f:e6:
2d:6c:c9:21:c3:c2:6f:3b:2c:b4:0b:e4:3c:93:24:a1:c9:ee:
9f:05:b6:d2:94:9f:4f:19:be:86:9d:e1:04:65:46:4f:02:f5:
b2:3c:65:82:90:d0:7e:c5:6f:bd:63:61:9c:c1:a3:bb:fb:81:
2a:f9:30:42:d2:30:4b:9b:7a:fa:0c:a0:76:59:68:04:12:d6:
dc:52:25:37:c9:c9:fb:77:30:3a:ba:e1:5c:4a:50:87:49:5f:
a2:e8:22:86:0e:9c:f4:36:31:93:e3:68:44:9a:29:89:e8:88:
18:40:d9:e1:7d:bf:c1:ea:19:e1:6d:8f:39:53:11:37:d2:7d:
58:c5:aa:97:4c:01:e0:31:fa:a7:c9:8a:3a:6f:b9:54:01:8a:
8f:a2:d5:81:a9:0e:da:53:ec:b5:e3:f2:7f:19:dd:70:6d:a0:
a1:9e:38:0e:6a:59:85:73:0a:74:57:e8:82:82:83:ec:62:3b:
07:96:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:59 2025 by rpki-client on console-fra.rpki-client.org