Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: VdqCWIpOCW0vVCkqu9W7ndQj1vxnqLxIKeWBA+7UY50=
Subject key identifier: 2B:7D:9A:5B:39:2F:E1:5E:14:DB:A5:2D:39:46:86:A0:E1:90:BB:69
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01976D7425D1E27A4347399BB75E38DA9709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 0FE8
Signing time: Sat 14 Jun 2025 08:00:17 +0000
Manifest this update: Sat 14 Jun 2025 08:00:17 +0000
Manifest next update: Sun 15 Jun 2025 08:00:17 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: FiP+0qlMCx/nJ3ybzCioyg9CbAHktQe/8Uv6bIBw3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:25:d1:e2:7a:43:47:39:9b:b7:5e:38:da:97:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Jun 14 08:00:17 2025 GMT
Not After : Jun 15 08:00:17 2025 GMT
Subject: CN=2b7d9a5b392fe15e14dba52d394686a0e190bb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:ed:7f:3d:fb:e9:c8:6f:22:48:9e:5f:3e:
2b:1d:b5:2a:c8:ad:7a:30:10:bb:05:bf:e0:b2:a6:
b3:ff:eb:b5:d3:c7:ae:65:0c:64:26:6a:72:f6:93:
32:aa:a6:be:56:5b:42:a6:94:53:9c:14:b1:ed:1d:
48:1b:f2:0e:9d:dd:55:5d:5a:05:81:57:a2:0c:3e:
56:24:21:dc:f0:85:09:9c:6c:55:c7:de:31:7a:b5:
db:ce:89:30:a4:03:d4:ac:ac:01:c2:f3:1e:82:c2:
84:1e:ee:3e:0e:61:f3:d7:60:98:50:8c:d6:3f:3a:
4f:45:37:56:a6:ad:cf:2c:ca:53:5f:49:5a:25:ba:
6a:79:a9:5c:82:c2:1c:5a:5e:b1:c7:e3:de:dc:b7:
29:ce:e3:43:23:ce:a7:68:86:81:a3:b2:9c:13:bf:
89:cb:63:a1:b3:c6:9c:99:22:22:99:3f:e8:79:62:
b0:8f:83:07:a8:01:02:29:05:d7:f8:1e:69:3f:ae:
bd:65:cd:bd:dd:92:6a:a0:b6:37:d6:c8:c2:a4:4c:
f2:e6:28:64:c6:28:ab:c9:ab:ea:33:39:9d:50:e5:
2a:5d:66:ed:49:d6:7e:e2:3e:06:ae:39:1f:57:fa:
6c:78:48:51:37:b3:71:42:dd:52:6b:2a:52:e1:42:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:9A:5B:39:2F:E1:5E:14:DB:A5:2D:39:46:86:A0:E1:90:BB:69
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:e9:96:00:de:81:fb:a5:d1:95:f4:70:36:e7:d9:80:a1:
0d:f2:45:49:49:26:64:fa:45:39:d5:9b:f0:17:5d:48:c4:5f:
93:4a:22:3a:af:63:26:76:48:a0:20:25:25:c8:3d:11:a1:64:
68:fb:9a:9c:5c:0d:22:d3:67:97:93:c9:6a:2d:f5:0a:48:9d:
cb:4b:58:99:be:b7:5a:e0:d1:03:3d:7b:36:13:cd:f5:d4:c8:
95:fa:ff:92:e7:b8:7b:c2:89:91:22:cd:a8:db:e6:e2:c3:7e:
e1:b3:1c:7b:ff:fb:4f:ee:11:41:a3:40:a0:92:f2:b6:63:6b:
4e:a1:e8:eb:89:89:fa:67:82:86:40:87:8c:45:35:c2:0f:af:
86:c6:4b:81:ee:d6:6b:0c:6a:a2:f5:a3:40:1e:aa:81:bd:59:
87:70:be:a7:99:cc:9d:fd:5c:3f:44:01:a7:4b:c9:02:21:fd:
42:12:3d:94:9d:41:96:27:34:fd:9e:3c:2e:2a:28:37:96:c9:
a0:c1:4e:6c:c8:34:c1:c8:5e:fd:8d:24:65:a3:04:03:36:1e:
d9:6f:94:a7:a1:76:84:ff:c0:64:93:6a:b7:07:4e:90:1d:cc:
b5:ee:1a:6a:70:1f:4b:e8:d6:81:d8:aa:26:e8:83:37:87:c4:
62:12:ea:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:19 2025 by rpki-client