Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: gTekORMBrItPIrg3d1kgpA6IdY74LI/LkA7BX+fuWyM=
Subject key identifier: 88:95:85:08:70:80:30:61:7E:E8:12:52:11:38:51:A6:06:4B:44:7B
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019A4F2B418C37CC1F054E00A8B7672C8121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 1166
Signing time: Tue 04 Nov 2025 14:00:26 +0000
Manifest this update: Tue 04 Nov 2025 14:00:26 +0000
Manifest next update: Wed 05 Nov 2025 14:00:26 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: 64ahRrDTkZeE4n9Vwq/WC1ujKC0T64x3BJYnNE+amvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:41:8c:37:cc:1f:05:4e:00:a8:b7:67:2c:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Nov 4 14:00:26 2025 GMT
Not After : Nov 5 14:00:26 2025 GMT
Subject: CN=88958508708030617ee81252113851a6064b447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:03:cb:aa:df:b8:21:20:76:75:2b:12:70:
c5:2b:e2:1f:05:7e:82:2d:6c:51:88:ec:2a:d2:d4:
56:ec:32:c1:72:2c:a1:f0:bc:d7:84:2f:a0:b0:09:
fd:2d:fb:73:e0:18:b6:1f:1b:24:a3:24:5b:05:e6:
9d:f0:28:f3:2d:8d:e0:c3:00:93:08:fb:49:7a:a5:
b0:7d:64:17:44:b0:4f:0f:4d:6f:8e:dd:ad:9b:f0:
4e:86:09:48:5c:69:11:88:34:a1:f5:00:f2:2b:25:
43:db:0f:e3:e5:a1:e8:3e:a1:ed:3e:f7:0e:25:bd:
b1:e9:07:30:cf:84:3d:3d:84:ab:9d:b9:69:80:ab:
8b:fb:02:7c:11:df:1f:a8:ca:9c:c6:f8:a3:1f:7d:
8f:43:e1:a0:d1:84:e1:0b:a6:b4:c9:e8:98:1e:97:
60:94:4e:bc:b1:fc:36:01:9e:c3:b8:46:da:66:f2:
13:94:f5:8b:60:48:c4:c9:38:e2:d4:a1:a9:63:f0:
ea:e6:4f:b4:a1:44:e1:27:1d:41:f3:53:56:b4:51:
3a:7f:e8:3f:8c:30:46:c0:3f:e5:33:7c:4e:4c:7b:
ce:c7:64:a7:5b:5d:fe:a5:32:30:d3:59:13:7e:88:
e1:57:21:db:b2:ba:36:5a:39:5a:d8:f0:26:ac:16:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:85:08:70:80:30:61:7E:E8:12:52:11:38:51:A6:06:4B:44:7B
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e9:1d:03:49:4d:76:4e:33:f6:8f:50:1c:ec:50:39:04:80:
00:67:18:ae:08:d3:59:a1:a4:0c:7c:61:c7:fc:00:ba:56:07:
67:51:c4:f2:68:a2:c0:70:72:35:f0:54:d9:37:11:5a:0a:17:
1a:03:2d:b5:cb:b8:a9:9c:5e:f4:c8:1d:9b:4c:19:38:67:32:
5d:da:13:49:e8:99:1d:79:89:06:00:b4:e5:b6:d3:48:20:5d:
6f:fe:f1:64:e5:10:9d:d1:74:69:41:f4:d5:1c:bd:f4:ab:0c:
5d:fc:73:75:a5:1b:3f:85:20:eb:c9:f9:b3:11:f6:fe:95:4c:
16:82:73:b1:8c:de:ce:08:79:3f:44:d7:01:1f:51:95:e1:51:
46:2f:07:a3:fe:94:5c:b0:c4:a2:b8:0a:54:dd:00:72:96:24:
5c:ab:25:30:ba:ae:ca:67:af:11:1e:f4:c6:2a:66:fa:7c:6e:
7c:fe:d0:d2:8d:24:8d:f6:47:ba:2d:b3:2a:55:52:47:8e:78:
9e:1c:76:09:2d:ff:96:7a:7b:e6:fe:87:af:14:eb:2e:25:ec:
f2:d5:91:e9:8e:61:4d:af:2f:f6:48:4d:02:41:aa:f9:90:72:
ff:f9:30:81:07:72:9c:9d:29:20:63:56:2f:79:a2:54:fe:24:
38:cb:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:35 2025 by rpki-client