
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: UTYVibqiMFrajamWcJwngbi8drruVPnkscZs2oC7QpU=
Subject key identifier: 8C:A3:CC:8B:EC:9E:CE:45:0A:3D:81:A9:EF:FE:63:3C:DF:01:9B:D2
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 0198D660DFBDD9DB0900E6F1DFC16660B1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0A8D
Signing time: Sat 23 Aug 2025 10:02:09 +0000
Manifest this update: Sat 23 Aug 2025 10:02:09 +0000
Manifest next update: Sun 24 Aug 2025 10:02:09 +0000
Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: SGd9xlsDMrJazZQbt2mAkamxXqnp/MVe9yHkfAad3Kw=)
2: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (hash: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:df:bd:d9:db:09:00:e6:f1:df:c1:66:60:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Aug 23 10:02:09 2025 GMT
Not After : Aug 24 10:02:09 2025 GMT
Subject: CN=8ca3cc8bec9ece450a3d81a9effe633cdf019bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:b6:6a:71:28:5e:c6:06:18:a7:93:88:a4:
72:7e:be:85:8a:bf:97:e7:45:40:a3:b3:c4:2f:bf:
8f:2c:42:6a:d7:b4:75:a0:c6:44:2e:95:a7:28:f3:
71:4a:a9:97:b2:e6:14:41:dc:e5:bb:50:2e:2d:71:
09:1d:1f:87:5e:45:12:ab:05:ec:d2:6b:72:13:0c:
d3:5b:c2:25:76:24:da:32:2c:3a:d4:47:b1:59:24:
64:80:ad:4c:e2:9e:02:05:6c:f9:dd:22:15:44:66:
94:cc:00:80:f4:87:ac:fd:94:b7:51:cf:19:03:f5:
36:43:28:94:86:ee:68:b4:3b:8e:b9:8d:96:0d:6c:
49:8e:99:1d:55:8a:69:bf:e7:ca:63:7d:c9:1c:8f:
0a:bb:92:7f:a4:ac:4b:cf:1e:b1:0d:94:9a:9e:5d:
15:50:3b:ac:6b:e0:f8:1a:28:ca:92:b6:6f:b4:d7:
2a:be:b1:99:b1:0f:15:fd:b4:5a:51:5b:3c:0d:35:
ae:22:b0:25:4e:a1:74:64:66:16:ff:b0:3b:47:09:
ce:b6:62:59:ef:05:0d:50:da:04:a8:38:5d:97:48:
48:26:49:1f:fd:ac:23:5f:36:a5:c2:f6:d2:3b:e3:
82:5e:f4:f7:14:e8:75:11:69:9b:bd:64:74:eb:5e:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:CC:8B:EC:9E:CE:45:0A:3D:81:A9:EF:FE:63:3C:DF:01:9B:D2
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:73:dd:a6:6c:01:bd:84:e7:fc:bb:36:4f:0d:c4:8c:67:17:
51:0e:a0:99:fc:3e:a1:7d:fd:43:26:44:1a:5f:fb:00:56:22:
fa:ba:38:b0:05:7e:a4:e6:a0:5e:6e:11:8e:66:84:f1:70:19:
20:b2:f4:01:1b:cb:2f:7b:ad:8f:72:30:8e:46:10:bb:c0:89:
e7:ee:a7:5e:07:0f:b2:17:19:13:95:e2:e7:c2:3c:5c:66:49:
7a:88:21:06:aa:ab:a9:df:4e:85:a9:4b:ce:26:db:51:b7:93:
91:10:a8:5d:8b:19:aa:b0:ef:b5:45:8f:62:a2:77:7e:0a:c4:
a4:bd:30:c6:c8:da:a8:c5:95:54:d6:85:7a:ac:21:80:89:5f:
04:22:44:47:ac:d5:7a:81:34:92:fa:8b:45:e0:cd:ba:4f:49:
58:d5:11:c6:8a:89:b0:fc:b4:68:ff:2b:d0:00:03:78:f6:ab:
24:b9:14:0e:ad:0a:82:2f:b1:b1:1e:f0:8a:0e:65:a1:85:8b:
ce:40:96:40:99:4a:27:05:f8:fe:29:69:ae:49:8b:db:01:67:
9b:e6:af:5b:0e:86:c8:f6:ab:5e:8c:62:e4:c1:52:4c:16:8d:
45:16:97:7b:cc:69:42:ac:da:46:f3:a0:de:f4:e9:07:6f:d7:
1f:cd:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:34 2025 by rpki-client