Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: sKtVNjT6vkZ5WKz1FggsFBatQJf7Ph20T/G/zPBniNE=
Subject key identifier: 10:A0:FE:1A:FC:88:4B:F5:54:D3:C6:15:C8:73:8D:3D:F0:C1:02:D1
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 01964BC6DC4995D0A9CE84E8A9A87298A0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0AAA
Signing time: Sat 19 Apr 2025 02:00:45 +0000
Manifest this update: Sat 19 Apr 2025 02:00:45 +0000
Manifest next update: Sun 20 Apr 2025 02:00:45 +0000
Files and hashes: 1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: 9fVYMGxslXVFoXZpKKWvpxitMjk1C2tI4cKfS2eZgB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:dc:49:95:d0:a9:ce:84:e8:a9:a8:72:98:a0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Apr 19 02:00:45 2025 GMT
Not After : Apr 20 02:00:45 2025 GMT
Subject: CN=10a0fe1afc884bf554d3c615c8738d3df0c102d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:1f:dc:d4:d6:e4:b4:37:e6:23:94:2b:d4:
65:33:3f:81:59:d9:89:11:62:13:a9:b1:1a:e3:0d:
01:92:f8:21:8f:64:15:60:3c:6a:28:d7:29:b1:c8:
90:cc:50:5f:83:5d:56:65:5c:3a:6e:8c:74:cf:8d:
bb:73:54:52:bf:98:ea:c5:cc:dd:cf:41:91:08:f2:
b9:49:82:4a:f0:12:e4:95:31:9d:eb:cd:d7:04:cf:
26:20:6b:aa:8f:fa:00:c0:f7:f8:1d:16:f5:a1:ad:
ff:8d:48:d8:9c:d2:99:50:a8:cd:60:41:79:07:d0:
e3:a4:89:d2:dc:ff:38:37:95:c7:4d:f7:de:f6:58:
d6:5b:c4:30:bb:d2:a1:0f:67:21:2c:10:44:17:2c:
07:18:28:e4:e6:25:cd:c1:33:6a:19:5c:36:0c:ac:
a5:c0:1c:bb:1f:41:28:0e:ae:70:5a:fa:81:e3:bb:
96:09:2a:be:a1:c4:92:c4:2a:ca:59:5e:17:d9:b9:
8c:f5:ec:61:fd:6b:7f:75:74:1e:c5:e4:d4:79:05:
86:88:4a:e4:29:e9:f6:35:f4:2e:b5:7f:4d:dc:f8:
09:36:4f:3e:79:1c:aa:c6:a8:f4:b1:17:2b:f7:76:
f3:77:05:a4:56:55:44:9d:fa:cd:cf:2e:d8:86:91:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:FE:1A:FC:88:4B:F5:54:D3:C6:15:C8:73:8D:3D:F0:C1:02:D1
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:04:4a:6b:f9:2c:ad:ea:53:04:7d:21:2c:a0:d1:3b:f8:
d5:7e:ee:29:05:01:f5:56:cf:03:71:13:02:2d:fe:2f:d1:2d:
5f:7f:1e:5e:00:ba:3f:c1:f3:1f:26:fd:1f:c1:29:cb:37:50:
72:0f:38:02:2c:a4:2c:e2:4c:e7:a2:60:f4:a7:50:77:a3:07:
9e:68:43:05:66:91:b6:62:de:7e:7c:6e:a6:09:46:24:9e:76:
2a:60:05:af:8a:2e:64:56:b8:5c:56:f6:d4:46:34:ad:f4:53:
d6:de:93:50:5a:08:80:56:fa:31:38:2a:1c:8f:fa:7c:b6:ef:
7f:cc:d6:21:70:e3:aa:d5:4f:a0:7a:a6:f5:23:d7:96:80:30:
62:d9:8e:e6:90:ef:e8:9b:d3:9d:87:0e:c6:91:65:bf:43:bf:
01:20:d9:16:5b:66:7a:18:3c:0e:6e:ab:7a:63:13:3c:f1:4d:
f2:0f:f7:9f:e4:e4:48:1f:fe:29:46:1f:2f:67:55:fa:73:b1:
50:4c:eb:c0:db:c7:54:eb:7d:b9:72:4b:4f:03:d9:ee:8f:f9:
bb:78:49:9d:3d:30:1e:c2:43:c3:ad:df:9f:1b:c4:92:cd:72:
a2:ee:d9:59:d2:b8:19:82:19:2e:0a:3c:3a:86:b7:2e:68:bd:
04:8e:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:56 2025 by rpki-client