Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: omwOAJr59gMl5Db0FFZ0pGSKKtE0DIMRwQ0Dnerrjvc=
Subject key identifier: C9:A3:0B:89:A4:11:86:39:0D:A5:7F:42:89:C3:02:06:89:1B:1D:B4
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 01989411AF533B545692158E2EC2CC73679E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0A16
Signing time: Sun 10 Aug 2025 13:00:43 +0000
Manifest this update: Sun 10 Aug 2025 13:00:43 +0000
Manifest next update: Mon 11 Aug 2025 13:00:43 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: DSz50hqiACQuAsJQZCFVJUk2X0SbmW5tgEbRNMN2L7s=)
2: bDkAt0CCYnB2xqRfpALpEK1gmgo.roa (hash: HzyjrIASJdGjjHtk6b54LHkaX+3Gt8eRcO+z/aYxOaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:af:53:3b:54:56:92:15:8e:2e:c2:cc:73:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Aug 10 13:00:43 2025 GMT
Not After : Aug 11 13:00:43 2025 GMT
Subject: CN=c9a30b89a41186390da57f4289c30206891b1db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:98:bf:5d:2b:0a:bc:34:5c:53:07:68:29:
1b:b8:a7:61:0c:72:c9:88:63:8c:74:0d:8d:ac:7b:
7d:ed:52:3d:e0:fa:b8:c4:93:3b:3e:22:f1:aa:7a:
f6:7b:cd:a3:57:3b:5d:cd:b2:7b:ad:ac:f9:2d:6f:
6b:54:eb:c5:98:64:3d:2b:09:38:a9:04:34:2e:8e:
75:c2:2d:24:89:ac:f0:1b:ec:99:e2:e9:92:a6:eb:
f8:76:6a:5b:1d:ae:07:78:a3:88:aa:00:56:7f:d3:
fc:f1:bb:6c:07:e0:d8:86:d3:95:ef:2a:3c:95:ee:
8a:14:56:ef:c4:aa:8e:b9:2a:a1:fa:0b:8b:4d:13:
89:94:c4:d1:4f:b7:82:92:73:e7:af:0b:a7:26:52:
0d:d8:7a:50:51:9b:19:69:96:aa:bc:ae:53:11:4a:
68:ef:fc:2c:13:5c:e0:4f:3d:01:0d:b5:ec:d0:07:
a1:8e:0b:15:66:e3:49:af:69:84:d8:dc:f8:2f:b0:
da:53:8d:7e:69:d4:4a:48:b3:ce:05:25:22:a1:d8:
36:d7:da:37:04:36:76:08:15:e9:f3:3c:1f:a1:a1:
62:b4:12:d6:ca:b2:6e:ac:2c:99:ca:30:f8:d9:c7:
0e:f2:28:02:38:a1:55:f9:d4:25:63:91:78:85:f9:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:0B:89:A4:11:86:39:0D:A5:7F:42:89:C3:02:06:89:1B:1D:B4
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:9c:64:1b:24:01:ed:14:9a:b6:b6:50:c4:5a:61:3f:ce:
eb:66:82:3a:0a:21:71:24:d2:d8:8b:99:60:8f:59:fd:f5:f7:
28:e6:8f:63:b9:bd:55:f4:ba:c9:23:bb:90:0a:a8:81:5a:e7:
3e:10:af:1d:b4:26:b9:36:53:77:8b:40:5e:3a:aa:57:3e:6b:
b3:4d:9a:f7:11:8e:bb:45:d1:6e:0c:d8:7f:2b:4c:5b:43:e9:
d0:97:79:69:65:3f:5d:9b:14:50:68:95:81:32:4e:35:10:c7:
a0:65:26:d3:84:de:51:bd:be:9b:03:20:d7:bb:52:8d:3f:1e:
f8:03:2d:de:a5:ea:95:1f:3c:27:40:44:0b:6c:31:7d:5f:e0:
c3:d8:48:98:e2:de:fd:29:59:5c:77:d0:5e:e6:b1:33:f0:38:
63:f4:56:ca:f6:63:28:0e:2f:67:67:dc:a0:f0:e1:b7:78:9c:
4f:3f:85:f0:b3:11:2e:3d:3f:0b:dd:12:42:7d:6c:86:f4:21:
fa:57:7f:11:d2:24:f9:a9:e4:f7:d2:e4:e3:1d:81:65:75:7b:
04:dc:dd:d6:61:74:16:17:4e:61:59:66:dc:d5:e4:80:3b:fa:
be:6f:5c:bb:aa:9a:ac:e9:1b:5d:5c:bf:95:be:e2:f6:16:13:
de:89:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:43 2025 by rpki-client