Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: N0qyqyJE192Ox3IrvAhOq9dX2HpoecZQVHvwuQp1KQQ=
Subject key identifier: 42:6D:DC:98:A8:A8:E9:2D:14:FB:3B:0D:CF:06:A7:B5:37:ED:A0:60
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 0198D6CCE2AF3A76BB636F6052CA0D148B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 06BF
Signing time: Sat 23 Aug 2025 12:00:08 +0000
Manifest this update: Sat 23 Aug 2025 12:00:08 +0000
Manifest next update: Sun 24 Aug 2025 12:00:08 +0000
Files and hashes: 1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: xCBgQcIuY9YdiU1a0cj0E4og6WdZItRlgjA6yQVoQPM=)
2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e2:af:3a:76:bb:63:6f:60:52:ca:0d:14:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Aug 23 12:00:08 2025 GMT
Not After : Aug 24 12:00:08 2025 GMT
Subject: CN=426ddc98a8a8e92d14fb3b0dcf06a7b537eda060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:03:ca:e5:51:1c:b7:99:d0:77:d7:2c:30:
d6:79:8b:ef:2b:41:6c:07:9b:7d:d3:2b:2e:8c:1f:
52:ac:c1:6b:5d:48:6b:b7:aa:7c:13:b4:64:c7:96:
4d:16:b0:81:55:78:65:ff:dd:8d:60:45:7e:86:a0:
8d:69:d5:7f:45:cc:85:e8:57:89:49:01:60:9f:3c:
6b:27:5c:15:d6:2e:ce:95:bf:82:c6:8a:4f:eb:71:
3b:45:5b:4c:7e:24:53:16:03:b2:4e:d9:d9:e4:6a:
c6:94:1a:38:db:86:ac:5d:60:b6:b4:b9:2d:ff:40:
a4:b6:ab:85:d8:b1:fa:60:c8:08:88:7f:64:9d:d1:
3a:43:4e:23:36:8f:fc:02:c8:90:17:ea:38:d4:39:
ad:08:90:37:f9:0c:d7:8b:7d:3a:6c:c9:90:c0:da:
65:8c:e3:60:d4:49:03:84:08:39:f9:aa:40:67:51:
ce:01:7e:89:f7:4a:cb:4d:fa:7f:cd:6c:a4:1c:cd:
d3:75:ee:c3:19:55:ed:be:8d:6d:35:b6:b5:2e:b0:
15:16:51:02:28:72:a1:96:45:2a:bc:41:36:c3:10:
b0:04:5d:ba:c6:96:cb:2f:7e:88:93:fe:9d:05:ec:
a1:e7:22:c4:a3:e8:9b:a9:44:bb:fc:33:95:01:ed:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:DC:98:A8:A8:E9:2D:14:FB:3B:0D:CF:06:A7:B5:37:ED:A0:60
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bc:6e:22:e5:a6:ba:f8:7d:5d:1d:16:1c:a2:cb:ba:61:9b:
57:28:62:bd:21:bf:fc:71:7b:bd:20:2b:f8:0f:9e:9c:56:e2:
70:93:3c:41:02:a6:3e:89:0b:0e:ef:f0:93:2c:8f:f9:ca:cf:
60:be:19:08:50:6d:87:99:62:08:d2:34:fe:d1:9c:1a:fb:71:
1e:b5:4b:37:db:df:d8:6a:ed:95:c1:03:b9:5d:1c:f6:10:4b:
4a:9a:46:c2:70:f1:4d:c5:67:28:59:d3:dd:00:5b:44:87:65:
30:05:56:04:40:a1:e9:f2:a3:66:83:00:5f:7b:f0:73:ff:93:
8a:c0:cb:46:86:f7:78:66:ca:24:da:07:01:0e:b1:f6:d4:21:
fa:3a:e9:a0:32:de:71:a2:45:34:f4:97:78:60:ef:6d:1c:c1:
cf:47:39:b7:1b:c5:cd:c0:94:26:a7:18:34:ad:2d:4b:7a:8f:
88:0a:a0:b1:5d:c8:d8:da:c1:98:d6:0b:28:ec:b3:91:81:9e:
5b:ce:a5:f4:1b:e5:95:8e:7f:e9:a4:f2:36:4c:b2:28:91:86:
c2:18:12:10:4b:4c:c4:dd:ab:7f:55:8a:64:96:07:5c:b2:ba:
27:9f:d9:92:dd:8b:3b:a9:d9:31:73:11:6c:91:57:cd:3d:a5:
fb:f0:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:37 2025 by rpki-client