Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: /jvmg79wxHrU0BRqBKEnp1TO3myTR5MpqgArQgenCbI=
Subject key identifier: 71:03:15:D2:90:85:EC:60:78:F9:7C:11:EF:ED:E3:09:F9:D2:D2:65
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019A71EE8EDD5DF5D8E15277925DD5A8F12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 1178
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: hhs8R4Y8DzHbDERsYCuG1JDs5zPqFTlwgF9KTA+tBcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8e:dd:5d:f5:d8:e1:52:77:92:5d:d5:a8:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=710315d29085ec6078f97c11efede309f9d2d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:24:1a:af:de:0d:f9:3a:82:9c:14:f4:43:
0a:07:d1:54:d7:7b:f1:1f:e8:b0:c1:e7:4c:7c:f3:
9a:6d:e6:a8:e4:82:be:c0:2c:86:4d:67:fa:fd:71:
f3:1f:e3:e2:99:36:8e:0b:04:83:13:b6:3f:9c:e4:
a1:8f:e1:3f:1b:71:e4:e8:c3:9a:ba:fb:30:b0:4e:
43:a8:9d:45:ab:5e:1d:62:79:8b:83:0c:c9:74:64:
48:d2:3d:e8:01:bb:35:fb:50:4c:37:05:5b:87:1a:
f5:43:11:e0:89:e8:1e:fd:f2:97:f8:ae:ed:28:98:
ed:5f:78:5a:7d:78:df:6a:d8:1a:ab:41:4b:80:47:
3f:eb:df:aa:4d:af:7f:5f:71:37:bd:66:6c:0b:7f:
f7:50:2d:83:5d:3f:c6:08:d9:c2:cb:b4:f3:fa:40:
d7:5b:7e:bd:22:89:62:2d:1a:01:37:b7:90:04:8a:
8e:84:bb:0d:d5:a3:8b:be:99:9e:20:fb:69:bf:71:
1f:0e:43:68:dc:ca:ec:a5:ca:4f:c5:05:69:14:e4:
52:6a:ef:77:b4:3b:ad:67:4e:0b:99:ca:e1:41:fe:
83:33:f0:c8:2f:65:7d:97:00:fc:ef:fd:c0:02:48:
1b:ce:f7:ce:fe:33:2b:b1:72:09:53:f6:4e:00:e9:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:15:D2:90:85:EC:60:78:F9:7C:11:EF:ED:E3:09:F9:D2:D2:65
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:18:85:41:53:1a:58:da:28:24:a4:96:03:9d:f2:93:8d:
63:14:16:86:8c:52:b5:0f:af:1a:db:5b:0d:58:da:59:74:23:
ff:f8:9c:c2:38:21:ce:bb:5e:52:97:7b:7b:f2:48:e0:cc:6c:
18:a9:52:f4:5b:61:df:4a:f3:9a:80:91:f9:b7:a6:e4:13:c9:
af:b1:71:29:6e:9a:5d:34:d7:a4:c5:b1:86:00:9b:7e:d1:dd:
da:a5:24:9f:84:ab:e9:cf:9c:e9:b6:9d:05:e8:6e:ae:8d:9f:
6c:e9:82:f6:a9:f7:c1:42:01:f5:ac:cd:64:9c:7c:bc:0e:82:
67:c4:88:35:e7:ca:c7:a9:03:f8:c4:cd:d5:54:33:62:53:4e:
e9:0a:5f:dd:94:9a:bd:20:ed:ac:c2:1e:59:04:a2:41:51:10:
55:ae:15:c4:e1:99:93:1e:99:ec:cd:6f:59:7d:8d:3b:4f:4a:
09:f7:1d:fe:0b:da:41:fb:1d:0b:51:09:2f:d7:67:bf:d7:f2:
ab:7e:23:1a:39:b2:4d:08:29:67:93:ea:c5:c0:65:a3:9d:b4:
08:9b:39:0a:3f:79:d3:c9:99:85:5d:c5:c3:c0:02:d1:e4:25:
a5:3d:ef:7f:27:e2:37:82:83:f6:ec:da:b1:92:39:e5:bf:d9:
3e:a3:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:57 2025 by rpki-client