Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: CEanFqivG2K2quXlBzHiBurYLxuthuaAi7IA6rkFv38=
Subject key identifier: 05:2B:FE:D4:E0:63:1F:43:F1:CA:37:41:7C:4D:CD:CA:16:D1:EB:41
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 0198A083A8C63116980895D17ABF8562C5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 1087
Signing time: Tue 12 Aug 2025 23:00:39 +0000
Manifest this update: Tue 12 Aug 2025 23:00:39 +0000
Manifest next update: Wed 13 Aug 2025 23:00:39 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: DFyzd+vbJNmyrtfgNFfSCYCxFMiHOS3reSQVsv9mP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:a8:c6:31:16:98:08:95:d1:7a:bf:85:62:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Aug 12 23:00:39 2025 GMT
Not After : Aug 13 23:00:39 2025 GMT
Subject: CN=052bfed4e0631f43f1ca37417c4dcdca16d1eb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:31:1e:ee:c1:41:e6:b7:64:e2:ad:b0:40:
99:a9:3a:e9:46:70:a9:ae:27:9c:e1:27:38:59:19:
1c:d6:c4:3b:ca:d8:79:ec:03:05:fa:a2:24:07:bc:
54:9c:14:52:94:00:b2:f0:1f:05:4e:12:5c:19:95:
59:a6:d9:09:90:03:ef:17:b8:4a:ec:4f:f2:ba:dd:
d1:c7:12:d9:9f:9e:0c:a0:bd:4c:fa:38:21:74:96:
94:46:34:dd:34:88:21:49:2e:62:44:79:db:75:b1:
04:d6:13:4b:f5:fd:3f:d8:c1:3b:4b:b3:d7:41:f8:
8d:83:1a:16:7b:c4:70:45:38:05:ff:6d:c2:25:8f:
60:4b:68:07:2b:18:41:a2:e2:d5:fb:df:eb:75:92:
db:f5:1f:87:23:88:94:c0:47:82:fe:48:b5:f7:b9:
18:53:cd:4e:73:d2:51:7f:85:15:36:72:93:ac:74:
67:4c:24:f1:a0:86:4a:40:01:06:aa:d7:c3:09:11:
14:a3:0e:23:24:d5:1c:3b:f9:c3:1c:29:f1:04:f2:
77:cf:a1:ee:aa:de:b3:6d:fd:43:a0:42:d2:83:32:
68:92:55:16:14:4d:fb:69:26:32:8c:c2:46:c2:78:
7e:0a:62:ae:94:1a:2f:d7:28:86:36:cc:d7:0f:78:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:FE:D4:E0:63:1F:43:F1:CA:37:41:7C:4D:CD:CA:16:D1:EB:41
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:c6:82:67:27:89:f2:a8:05:b2:a7:ed:93:93:ce:26:1a:
7a:5a:7a:59:4a:02:5c:fe:4f:3d:e5:9f:78:06:4c:54:4a:6e:
78:7b:72:7f:f6:a0:d0:0e:f4:34:0c:51:23:d8:c3:ee:f5:43:
30:b0:cd:27:84:b3:6d:61:d0:86:95:78:b1:dc:31:57:ee:53:
80:f8:fd:ca:43:8f:56:4c:f8:2d:ff:16:2c:13:6f:48:f8:f1:
60:46:e1:02:b1:13:33:33:89:32:5c:07:95:0e:e8:b4:75:1b:
5c:ee:14:3f:67:1c:f7:26:1f:54:c3:7f:7a:48:53:51:bd:f6:
9f:f2:c1:fd:c7:cd:41:a2:6a:3c:95:b5:95:91:ac:e2:8c:36:
38:57:8c:b0:08:8d:9e:39:4d:a7:c2:f2:69:ce:5d:d4:5f:56:
f5:fc:20:f6:99:0c:05:d5:dd:02:09:34:d6:6e:ba:9e:23:3d:
a7:5b:7f:39:e9:b9:49:04:9a:e8:74:4d:7c:f2:a4:ff:4d:d7:
1f:0d:6a:c4:c1:19:bc:2b:00:ee:0e:ed:60:ea:8e:4c:eb:eb:
db:05:d4:33:b0:fd:4d:5e:e5:ea:af:e1:10:ad:ce:fc:2a:f9:
25:3b:e8:26:05:16:f5:d1:21:30:66:00:bb:d4:90:7e:ed:f2:
d0:17:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:11 2025 by rpki-client