Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: E1z80/AYn4pdMrAj305GU5wNRZB8hwgXuNvqE8vTTTU=
Subject key identifier: 9F:01:1B:3B:B1:58:72:13:B8:49:19:DC:81:E4:E5:BA:3D:FB:29:19
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 0197B6D78A281E4BE28A9844586F09D4EC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 09F8
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: +b0RoUPxh/C657FF6135idvp8onrYRgTUw2n/yUmr7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8a:28:1e:4b:e2:8a:98:44:58:6f:09:d4:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=9f011b3bb1587213b84919dc81e4e5ba3dfb2919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:ee:01:ed:c9:8a:ae:17:b0:79:5a:81:90:
b9:3c:d6:d7:7e:6e:ed:a6:3a:73:61:9d:1c:2e:fc:
d6:33:d5:32:ff:9b:72:e2:9f:97:8a:09:4f:f9:bb:
7e:ca:c4:b8:c5:e1:f7:c7:4e:6e:ff:fb:48:42:a1:
ac:54:84:a2:6a:bf:4d:19:ab:29:d6:c4:07:8f:3c:
90:36:21:92:7c:08:a6:87:49:59:7b:fb:3b:5a:21:
7e:70:68:93:c3:66:e5:ef:57:0b:33:53:8a:c3:89:
1f:a3:99:a1:6f:d7:79:01:51:33:ab:72:de:2c:2d:
e2:93:9c:52:6a:a1:96:ff:fd:ea:3d:fe:ba:6e:51:
f7:52:f1:b6:e5:e5:77:b5:3a:3e:a4:c6:95:c8:bc:
92:7c:45:80:e0:5a:e2:b2:f4:c0:8f:f5:a4:69:4f:
56:d0:85:ed:10:27:c0:3f:aa:a1:cb:74:ed:0e:b5:
50:03:5d:62:19:c5:2e:ed:43:a3:f8:6b:f6:8d:41:
78:7b:11:bc:52:f4:ce:a1:9e:df:03:f4:ff:2d:69:
67:c6:fc:1e:a8:00:91:dc:f8:0b:8e:28:95:6c:db:
26:a6:a5:51:69:e7:d6:88:2f:cd:ff:eb:05:ef:41:
c9:ed:fc:21:e4:06:b1:fb:e2:39:2c:38:37:31:c3:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:1B:3B:B1:58:72:13:B8:49:19:DC:81:E4:E5:BA:3D:FB:29:19
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a5:90:57:30:7c:6d:9a:a3:43:aa:21:22:20:8e:b1:34:a0:
1d:4f:89:74:e6:ec:1f:c8:1f:71:95:3b:70:19:6f:48:0b:58:
17:38:f6:f5:b8:63:86:d5:61:18:d8:85:90:1f:d6:95:c4:31:
64:43:9e:53:87:f0:9b:06:ff:b2:12:5e:89:e8:1d:c6:be:a1:
7f:f4:e3:af:6a:33:89:43:7b:04:ff:3e:ca:52:ae:97:77:4f:
02:9e:b8:14:17:31:04:0f:e6:8d:d5:5e:a2:c6:85:75:f8:63:
64:5f:46:1e:cc:5b:47:31:2f:bd:c1:d0:42:ef:c6:8b:07:6e:
a9:53:3e:71:58:c8:49:9f:00:4a:60:1f:b1:f5:4d:df:50:5b:
dc:db:54:fa:55:6f:33:e2:20:04:c4:db:76:2d:64:24:af:4b:
e3:d0:0a:d5:39:22:32:a4:ef:d6:46:54:f1:9b:ae:c4:db:ec:
d3:f4:2e:01:20:2d:fc:67:be:ee:70:bd:72:b5:9f:31:ec:b7:
3a:bd:9e:39:4e:cf:2b:e0:43:71:60:2f:14:45:28:5c:cd:6f:
10:1e:92:dc:df:2c:ca:11:5e:7e:97:77:67:ac:bd:e4:ba:92:
ac:ec:15:08:f5:ae:39:a8:16:f2:76:79:70:4e:cf:64:27:b4:
b8:42:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:22 2025 by rpki-client