Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File: Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier: XItxVzvdr9UT0L+QqSKwY4FhKrDRSYQR+GRufKBwk/Q=
Subject key identifier: 62:B1:F0:4C:E8:CA:29:50:4E:91:56:5D:85:35:55:1D:F4:11:EC:A1
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer: /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial: 01962A84E9EF267F78EB29D72387FC60296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 15:01:15 +0000
Manifest this update: Sat 12 Apr 2025 15:01:15 +0000
Manifest next update: Sun 13 Apr 2025 15:01:15 +0000
Files and hashes: 1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: o8x8eofexrWbnVWJTYRjxtF/Zc+yS375OvYgqVzMW1Q=)
2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:84:e9:ef:26:7f:78:eb:29:d7:23:87:fc:60:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Validity
Not Before: Apr 12 15:01:15 2025 GMT
Not After : Apr 13 15:01:15 2025 GMT
Subject: CN=62b1f04ce8ca29504e91565d8535551df411eca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:11:2b:15:54:16:3e:19:af:59:97:58:d1:
be:f6:1a:ec:6d:8c:7e:f3:f3:16:b9:f9:e5:37:63:
fa:ac:79:53:4b:41:26:8e:0d:12:8f:76:c4:9c:9f:
3f:bb:31:67:f9:c0:c0:24:3d:24:66:d8:7d:5c:4d:
98:db:03:1d:a1:46:23:99:64:29:8a:99:df:c4:7f:
50:b9:5b:a4:4a:d3:a7:20:28:9a:f7:1c:fa:80:2a:
b5:60:05:19:d0:f2:2d:53:1f:9d:15:e9:a8:23:f0:
32:da:e0:a3:d0:39:c7:56:e3:b0:3d:22:74:01:6b:
1e:6c:28:68:d6:ad:a3:2c:9d:e4:b0:32:7b:7f:61:
61:7f:01:c8:8b:c5:e9:fc:67:a9:b1:af:f8:2e:d9:
7f:8e:1c:37:db:d9:fb:8d:0f:2a:17:c2:d2:08:3d:
16:ec:35:d5:59:1c:75:ed:cf:49:69:9e:a8:c6:35:
87:7c:26:10:10:78:e1:51:80:00:47:a5:04:b6:e0:
45:99:d4:34:84:f2:8c:f7:dd:15:07:3c:90:c5:ee:
3d:ab:32:74:60:c9:77:f3:1d:e0:6b:67:f8:74:1f:
3d:2e:ae:7e:30:a4:19:e3:91:14:27:05:5d:6e:7b:
0c:2b:b5:6c:bc:3b:90:88:a5:f0:14:d9:63:d9:ae:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B1:F0:4C:E8:CA:29:50:4E:91:56:5D:85:35:55:1D:F4:11:EC:A1
X509v3 Authority Key Identifier:
keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:44:b5:bb:85:0b:c2:8b:c4:85:89:08:ba:a2:8e:55:fc:88:
0d:cc:e3:da:09:64:0e:60:78:9a:dc:86:ba:d0:fb:f0:09:5c:
4a:e7:82:1c:b7:56:f3:66:45:ea:d5:70:dc:74:83:69:70:53:
f9:55:28:6a:1f:39:76:87:05:85:9a:45:52:9e:73:4c:d1:be:
80:b8:ff:64:d1:b0:b5:6e:eb:be:b8:96:00:02:fb:86:7d:06:
bf:dd:02:bf:a3:9a:c7:b6:e5:6b:e0:c5:47:d1:ae:16:49:94:
54:c9:41:d1:8d:49:82:b5:23:c7:62:c6:e5:92:ec:0a:9c:c0:
18:c0:a7:ce:0c:1e:7e:c7:f5:0d:43:f3:2d:ff:27:9c:01:7f:
76:55:2d:7c:87:f7:23:e5:b7:8c:ee:7a:c7:21:dd:9b:8b:9e:
78:ff:2c:a1:ef:76:72:c9:51:0a:d8:4d:c2:41:39:5a:ad:17:
3e:1f:49:d2:42:66:e2:ab:83:ac:bd:ef:0a:11:20:de:74:e6:
cb:88:2f:94:00:2c:f2:e6:d4:64:83:94:32:a3:d2:a3:06:cd:
a3:dd:94:ff:22:00:76:66:95:03:8d:1d:89:02:46:a2:0f:da:
bb:03:02:df:c2:45:d7:69:ff:9f:23:2f:b5:86:5f:56:03:cd:
8b:ec:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:19:08 2025 by rpki-client