Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: h+a/+nXeCk6vjLQ9SRAHh9v3Ird+17KOJStBYhCNaYc=
Subject key identifier: 2E:A1:B7:A8:38:93:31:46:89:81:C6:0C:5F:29:82:EF:9E:82:2A:8F
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 0197B6D72E4DA51888232719B4E2E086B879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 100E
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: 5N0Tz1qBj78pfPBjTI17HIunBd55VbK+QIWjBOaU2W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2e:4d:a5:18:88:23:27:19:b4:e2:e0:86:b8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=2ea1b7a8389331468981c60c5f2982ef9e822a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:d5:cb:4a:9b:37:39:8d:d2:4c:2c:4a:f0:
75:23:ff:0b:af:71:db:3d:52:fd:7e:64:53:20:2a:
17:ac:83:4d:a4:49:75:fb:bd:c3:01:54:91:81:f3:
5e:f4:00:30:b9:30:20:46:5d:2c:34:00:a1:ac:47:
64:ee:8b:0f:b6:e1:58:c0:1e:d5:c1:fb:8b:77:3d:
2e:5b:a8:24:e7:78:1e:99:cd:09:0f:0c:21:e4:a4:
9a:fe:79:e5:4c:e1:1a:98:a9:94:9d:ce:71:67:f2:
88:d1:04:79:0b:48:f7:ad:22:43:e7:83:e3:a8:c3:
9a:b9:69:8d:80:4b:e9:e9:30:5b:a8:ad:6a:5d:c5:
e5:89:82:5f:b8:02:2a:cd:18:3b:e1:c3:e6:32:7b:
e5:3d:2e:8b:98:58:6a:cb:6c:36:c9:c7:e5:4a:4b:
45:be:99:cb:84:d3:98:cd:d2:3d:51:87:78:83:4e:
fd:e6:9f:6f:6c:f4:c3:da:31:5f:75:c6:76:6f:b2:
a2:27:c4:98:9f:6d:6a:4a:8a:b3:c8:cf:0f:1f:66:
e6:9c:d1:31:4c:41:8d:01:73:d3:db:39:d3:2a:a7:
0d:5f:13:a7:7a:42:b1:86:e6:d2:34:1f:8b:1e:5f:
04:b7:2c:de:c0:ed:e8:76:eb:0a:6c:bb:a4:46:ca:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:B7:A8:38:93:31:46:89:81:C6:0C:5F:29:82:EF:9E:82:2A:8F
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:46:a7:fb:b1:72:dd:37:0e:b8:cd:20:05:b5:b7:86:c7:
4f:31:47:63:da:32:b5:83:4f:fe:88:26:c2:7d:b8:cc:c5:74:
11:04:5c:45:f8:f7:0f:09:00:20:e0:29:d1:7e:cb:e4:37:69:
5f:2b:48:6b:d1:11:a6:0a:82:2f:83:29:45:10:b2:13:91:4d:
70:8d:32:ef:df:c3:d0:5f:bd:47:14:55:8b:3c:68:07:fd:fe:
6c:43:5e:70:80:f1:a7:a8:5f:ad:36:b8:1d:b7:43:07:9b:5f:
1b:53:c5:a1:4f:95:f9:f5:e4:c6:27:96:cd:3d:87:16:bb:1b:
30:94:9a:30:8e:c6:38:d3:99:99:99:88:53:ae:9a:47:cb:cf:
b8:7d:5c:38:60:ee:b8:10:df:44:eb:79:ab:cf:70:b7:ad:9c:
75:d7:4f:20:b9:80:ac:02:d5:4c:4b:36:cd:f4:81:d4:9c:b2:
e4:41:e5:03:c1:bf:2b:f7:7e:a4:22:a3:d3:66:dd:06:88:a5:
ba:22:74:a3:62:d8:67:d0:13:51:37:93:d4:4a:57:42:45:24:
58:18:7e:70:cb:ee:a7:ef:ff:35:f0:e9:b4:6a:1c:61:c1:c5:
a3:d2:c5:bb:f4:3b:b5:90:88:ec:b2:95:b6:ae:7e:2e:a0:6f:
03:de:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:41 2025 by rpki-client