
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: FC9DmP1szLLtx0p2uokqn94UxZMzuc+5OemrWAv/nL0=
Subject key identifier: D2:EE:51:F2:E4:63:C4:96:74:B5:4D:8A:05:5E:B4:A7:26:A2:28:8C
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 01989E5E2F5A8EF2BC49C2E51BA425CE1DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0A70
Signing time: Tue 12 Aug 2025 13:00:29 +0000
Manifest this update: Tue 12 Aug 2025 13:00:29 +0000
Manifest next update: Wed 13 Aug 2025 13:00:29 +0000
Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: uAMdwCyc02ty5k5VHG4iIADNHW6CUgYucX/HMhdsmUM=)
2: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (hash: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:2f:5a:8e:f2:bc:49:c2:e5:1b:a4:25:ce:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Aug 12 13:00:29 2025 GMT
Not After : Aug 13 13:00:29 2025 GMT
Subject: CN=d2ee51f2e463c49674b54d8a055eb4a726a2288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:ae:b6:bd:b0:e5:50:17:24:a7:16:0c:4f:
8e:eb:a4:1f:31:06:55:ff:2c:dc:4b:be:b7:c5:8c:
b1:32:dd:07:09:ae:98:10:30:8d:42:1c:d9:9d:51:
66:0d:ca:7f:e4:4c:c1:c7:27:1e:0d:c5:8a:fa:13:
14:dc:89:40:eb:1b:6e:26:bc:fa:24:a0:2e:5a:3d:
2e:e6:e0:3a:34:2b:bf:26:28:76:18:81:1f:a0:eb:
82:e6:89:5e:53:57:88:c0:33:4c:ec:ac:86:22:7d:
68:5a:bf:3c:cd:ce:61:49:b7:3e:d4:c6:30:ff:f4:
5b:46:f8:10:8a:dc:c6:6c:99:67:e5:08:a1:d7:22:
2f:59:6c:3a:dc:51:34:c7:59:2c:9e:90:7e:04:ba:
13:f6:0b:3e:ff:84:1c:35:8c:36:1f:8e:1c:07:29:
1a:46:4a:f5:1b:11:3d:81:4c:d3:56:83:24:f1:5c:
f6:7f:0c:9e:f8:ab:bb:ac:43:de:89:13:81:f2:1e:
16:4b:6c:f0:78:a6:38:c8:d2:33:e3:da:6f:9d:b9:
a4:e7:2b:54:15:50:a0:e1:1a:6a:6d:e6:85:1d:4b:
07:76:79:2a:6d:38:7a:7b:df:ae:67:71:7d:bf:ff:
e0:80:f4:7d:0b:1d:bd:29:58:fa:b3:a6:7e:16:a5:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:51:F2:E4:63:C4:96:74:B5:4D:8A:05:5E:B4:A7:26:A2:28:8C
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:65:b4:36:02:21:96:d9:5b:d6:22:f1:39:7a:8d:4c:eb:
54:82:60:7f:96:fd:8d:e5:b6:98:0e:86:d1:76:4f:8b:c2:9a:
09:b5:2b:b1:50:45:b0:ad:31:f3:81:3e:c1:a7:c3:d7:a2:ed:
84:21:3f:ea:96:5f:67:21:15:95:85:0e:f2:61:b8:dd:43:2a:
1c:19:87:b0:9c:6c:19:61:db:e0:66:26:30:df:9e:7c:f9:31:
fd:43:32:5f:18:a8:18:5b:77:e4:64:42:9c:3e:45:b9:07:2e:
81:cc:02:46:17:36:ce:eb:d6:fa:d9:42:5e:2d:d3:76:c6:52:
bf:59:84:20:dc:0f:79:8a:83:7b:1f:3e:6f:76:9d:a8:2e:1c:
c6:1f:a7:72:2f:13:3b:75:2a:45:db:1b:4f:5f:5d:d0:31:6f:
1d:9d:ab:e2:b3:ea:39:10:37:4a:36:a7:29:9d:08:fa:a3:11:
23:5d:34:ec:93:7c:50:2f:5d:3b:e2:aa:b5:36:39:45:59:4a:
65:37:d7:38:48:45:95:a5:4e:c5:fa:c7:3d:02:40:ce:63:cf:
16:23:0c:43:37:af:95:08:9f:1c:76:e5:ba:9e:1b:ec:13:31:
3e:ec:0f:e9:f2:95:52:91:94:6b:66:c7:c1:42:2f:36:4f:94:
14:21:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:53:52 2025 by rpki-client