Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: pS50CHRk4yqx6cYU0eVcsd8YbXPPnyYOiOkqjRP7aAk=
Subject key identifier: F6:C4:2B:47:0C:1E:C8:E7:0C:42:3A:78:FC:BF:10:2E:F5:C6:F9:21
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 0199FC21B15664374DF3B2865538D6224AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 113B
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: 6RNPe99bRtHjnpnphpE98DEC8fXM1wwB6te+xth28Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b1:56:64:37:4d:f3:b2:86:55:38:d6:22:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=f6c42b470c1ec8e70c423a78fcbf102ef5c6f921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:cc:74:86:8a:2c:2b:67:5b:4f:b1:13:2c:
21:0c:f3:40:5f:6f:8b:91:44:67:48:ca:9f:d8:d9:
74:c5:ac:cb:3e:78:a9:9c:70:83:8d:f7:9f:92:53:
aa:ef:58:c7:d0:f1:5c:8d:65:87:50:06:28:0f:61:
e8:5d:f9:98:a5:41:b8:00:3b:d9:d9:86:98:a0:53:
cc:eb:7b:26:0c:91:ac:b1:1f:07:38:8a:7a:f8:ca:
a3:31:b9:77:86:e6:c3:02:41:8f:ae:39:34:b0:88:
29:4d:58:26:24:98:2e:8e:ae:b9:de:03:3d:34:0e:
cb:bf:87:c6:f0:dd:e9:c6:ae:67:68:ee:24:bd:f6:
32:ac:59:0d:85:d9:ed:d0:3f:ee:c2:8a:cf:bf:80:
7f:d5:83:72:57:15:58:97:b2:e8:b2:4c:1b:2c:95:
01:b9:5a:13:14:56:c2:39:80:f9:e4:10:b2:5a:a4:
72:7f:2c:ee:90:cc:85:2f:44:b7:05:bb:f8:7a:df:
89:77:b2:ff:63:5b:72:0a:ac:bc:bc:b7:aa:ab:05:
b8:7c:75:af:d5:ce:17:a7:45:d3:68:8a:97:a6:b6:
e1:0a:35:86:94:6e:6b:8b:01:b9:47:b3:e8:05:74:
ed:79:28:b3:df:7c:bf:72:7e:7b:ce:5c:d8:5c:80:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:2B:47:0C:1E:C8:E7:0C:42:3A:78:FC:BF:10:2E:F5:C6:F9:21
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:c1:0a:b3:c6:f1:6f:81:33:25:ec:15:23:2e:b4:8c:1f:
e5:66:f7:36:eb:3d:ec:1e:2e:2c:b9:61:2f:0f:67:78:77:c1:
e9:93:9a:05:11:2a:0d:d8:0d:1a:ef:ca:d8:1e:ee:1e:42:78:
d4:4a:59:9a:b8:eb:a8:45:7c:f0:7c:06:c4:54:2c:be:af:91:
63:e3:69:5b:4c:51:ea:d6:ee:96:f0:31:16:97:20:77:6c:b7:
32:3f:4c:fa:47:6e:28:23:69:60:50:9b:c1:71:31:bf:cc:83:
b5:f8:02:bc:8b:0c:6c:a6:eb:36:e2:6a:02:91:de:3c:f4:23:
c5:9b:cb:1a:53:2d:3c:8a:a0:67:83:38:c1:b2:37:66:19:26:
5f:f5:c8:5c:d7:ec:81:04:ce:2f:47:18:b0:c7:a0:a1:1a:de:
d6:a6:e2:20:f0:d4:69:53:7e:6c:8a:0d:89:d3:15:06:fb:bb:
07:8a:bc:50:25:bc:23:dc:91:00:e3:00:71:6e:74:41:0f:fa:
e2:80:9f:0a:7e:23:41:40:38:16:37:b7:25:9f:4f:f3:de:fa:
74:88:51:1e:6f:00:a4:16:04:45:8a:59:66:b4:45:0d:03:27:
b5:11:a9:9f:8d:7c:1d:8e:8e:6e:d3:59:5a:c6:6a:07:23:81:
fc:c4:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client