Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: +y1q7TGRDbnZVw/KO/ONEs037+7amxspOxceu4LVVKk=
Subject key identifier: DA:55:EA:A9:50:F1:BA:CB:11:0C:F9:EB:1D:9C:E4:1D:22:DE:7B:6A
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01965D284FC3CFF5B4B9B648F694D3A885A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 0F5B
Signing time: Tue 22 Apr 2025 11:00:44 +0000
Manifest this update: Tue 22 Apr 2025 11:00:44 +0000
Manifest next update: Wed 23 Apr 2025 11:00:44 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: Zj6M17jIDg6Ucr5RhIEXmLypa3Mcjyyn6E2loXSwK+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:4f:c3:cf:f5:b4:b9:b6:48:f6:94:d3:a8:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Apr 22 11:00:44 2025 GMT
Not After : Apr 23 11:00:44 2025 GMT
Subject: CN=da55eaa950f1bacb110cf9eb1d9ce41d22de7b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:60:97:90:8e:02:c0:75:3c:92:2e:a5:2a:
dc:05:7b:cf:6b:2a:56:a6:25:63:09:aa:8b:c7:4e:
5d:a1:ee:af:ec:d6:a0:03:a3:4e:5b:47:68:26:e3:
a6:43:98:c6:ab:67:04:7b:35:35:72:c1:fd:e9:66:
97:25:95:9f:6c:1c:3d:f8:c3:6a:2d:a2:30:f4:a0:
c0:87:d4:22:24:b5:cf:ef:de:3a:fb:92:92:17:d1:
29:fd:41:4a:43:e3:83:da:02:5f:8f:17:9a:0e:3f:
85:40:9e:49:28:6d:a2:67:59:f4:f2:dc:0d:36:7f:
e1:bc:89:75:ca:b8:46:ec:82:2e:b8:66:4d:87:24:
6f:bb:9e:c9:71:72:ee:e0:12:80:bf:57:4d:4b:0f:
c7:a8:ab:93:b5:a9:20:2d:6a:93:18:b8:1b:9f:f8:
5b:92:3c:b7:7b:c3:3e:fc:77:83:e4:54:22:42:68:
94:43:a6:75:8e:03:9d:9c:72:5b:2e:06:23:cf:6a:
15:91:69:ba:38:6c:c8:a7:db:0d:31:0d:b3:b0:b0:
24:1b:12:32:1c:85:3d:b0:19:95:3d:52:50:1a:4e:
8b:b4:23:0b:6a:7b:11:28:1d:bf:c6:69:47:a8:ed:
e6:e0:2f:c2:3d:ba:55:11:64:18:eb:4a:56:d7:6f:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:EA:A9:50:F1:BA:CB:11:0C:F9:EB:1D:9C:E4:1D:22:DE:7B:6A
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:ad:56:a4:bc:8e:f0:e4:d0:39:09:e0:08:e0:42:a4:ba:
a8:0d:c5:25:f0:eb:c0:a4:fd:26:e5:bc:13:ee:7e:3b:23:cb:
3b:39:89:fc:7d:3e:28:7d:0b:4a:ad:4f:cb:ad:46:7d:d1:a0:
63:5b:49:2c:c3:f9:5d:30:41:4d:92:66:fe:00:46:c5:b2:ce:
43:b5:ba:77:9f:cf:a1:f1:00:d1:67:77:a2:b5:a2:ca:3b:93:
e4:39:f5:a0:83:8b:03:2a:88:57:71:33:69:e1:15:bc:52:fc:
76:fe:05:f3:ba:f8:55:7e:6f:15:2d:51:fc:e6:06:e5:12:6d:
2a:ed:23:db:50:3f:e9:bf:33:cb:ac:6f:bf:ed:29:a9:46:5c:
f1:94:83:27:bc:64:96:19:ff:2d:40:74:ae:2c:c5:82:79:7d:
2d:6b:62:1f:f2:d0:eb:e2:88:95:73:92:83:87:bd:f9:e5:2b:
c4:56:ec:74:0e:7f:d2:86:70:e4:cd:af:0c:c5:66:fb:ce:12:
36:bd:83:4f:73:ad:28:31:7c:cc:52:6e:54:e1:f6:38:c8:84:
91:7a:02:f2:fe:08:3c:28:3a:13:f3:59:f2:31:2d:8c:0c:95:
7c:0c:95:c4:f3:5c:c2:61:3d:72:28:47:75:a9:a2:69:08:50:
4a:dc:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:58:43 2025 by rpki-client