Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: emvRiUzyXmDdzW2wiVjqNPC5RRhm/tiNRpna+9BQkrM=
Subject key identifier: EB:A6:53:81:CC:B1:57:D2:D3:B8:72:8F:9B:8A:21:3C:78:1A:87:B7
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01967FEAC8D8C22A8C1D6527651782EEC8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 0F6D
Signing time: Tue 29 Apr 2025 05:00:15 +0000
Manifest this update: Tue 29 Apr 2025 05:00:15 +0000
Manifest next update: Wed 30 Apr 2025 05:00:15 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: TUaxI149fVNANgZ9ju1u+OoiZqHhG0lbxYn7KsjrTVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:c8:d8:c2:2a:8c:1d:65:27:65:17:82:ee:c8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Apr 29 05:00:15 2025 GMT
Not After : Apr 30 05:00:15 2025 GMT
Subject: CN=eba65381ccb157d2d3b8728f9b8a213c781a87b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:e5:66:c1:bc:6a:b1:a3:e7:1b:0c:2f:69:
72:99:07:ca:22:e2:97:00:60:5f:6c:3c:10:78:be:
46:18:2d:39:9e:66:54:2b:fb:f4:c7:a8:9f:9f:61:
97:00:ea:80:db:c2:df:4d:c8:eb:21:40:36:b5:b5:
ae:d4:7f:6f:25:0d:c8:68:2e:e4:ea:8a:e8:0b:ce:
d1:ba:41:61:47:7b:cb:19:e3:7f:bd:2f:7b:77:da:
4d:03:ce:a3:75:d6:8d:dd:42:9a:d6:9a:b2:d0:d4:
4e:b0:ea:2b:5a:fb:25:09:eb:6c:c4:e5:8a:65:f6:
c2:06:82:a5:d1:2c:f1:ed:68:5d:a2:53:f2:bb:e2:
23:35:a3:09:0a:f6:ff:6c:c8:df:e9:0c:ef:27:4f:
95:f3:30:f9:16:61:5d:a2:eb:58:08:92:f5:40:77:
39:7d:80:79:a0:3c:a0:b6:8c:6a:f4:77:5a:63:db:
2d:c4:59:8a:d6:60:20:3b:ba:04:19:26:77:d1:ce:
dd:17:df:3b:d5:ee:86:19:9d:f6:2a:a0:dd:84:81:
0d:33:77:3d:83:09:62:2f:41:46:12:74:0c:e9:8c:
6a:a3:24:42:11:f3:86:8f:12:c3:ad:0e:45:14:ba:
5b:01:0d:e7:f8:c6:c7:45:40:c7:81:7e:af:7f:d3:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:53:81:CC:B1:57:D2:D3:B8:72:8F:9B:8A:21:3C:78:1A:87:B7
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f1:ab:16:e4:bb:ff:d5:e0:81:87:08:b7:24:18:6f:b1:04:
c5:a8:87:b1:ed:88:c7:7e:8c:a3:4d:44:1d:ad:1e:fa:2a:9a:
dc:53:dd:0e:7e:9b:25:73:0c:69:9b:3c:33:82:27:16:c7:7b:
dc:5c:bd:69:a9:7b:81:ef:9e:7e:2a:12:c6:51:31:20:f8:c0:
8a:63:03:28:79:e3:85:2f:e9:6b:17:6b:7d:ae:7d:18:ac:78:
a4:44:a8:e3:90:a0:58:82:89:e0:8b:1e:46:b6:b6:34:18:cf:
b0:a6:81:9a:22:35:99:15:08:44:3d:28:39:05:ff:67:3c:0a:
6e:28:44:b0:35:6a:af:33:af:e3:a8:af:93:ec:2e:16:3a:1d:
98:8c:27:13:d9:d8:ac:9c:07:a1:60:4e:f7:12:92:0e:13:d8:
25:e5:6a:79:36:80:b1:e2:28:f8:b9:1f:3c:b3:f3:0e:d9:08:
d0:5b:12:5d:81:ce:b3:bc:4b:c7:f2:da:81:7d:77:c3:11:77:
b7:e2:17:58:bb:69:e6:ce:dd:d0:c4:88:6c:9a:35:53:5b:a0:
8c:65:28:85:b0:72:a4:a2:e8:a5:36:87:60:b9:69:8a:32:46:
48:a3:55:73:43:e9:cd:b9:f7:d5:f1:69:d6:25:b9:35:56:3b:
69:09:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:56:01 2025 by rpki-client