Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: D5Mlgv6JOTh6R6zvaaU5nEsbi8HxbTWgbvPaWu34mmU=
Subject key identifier: C5:DF:B0:F2:C2:E8:7D:BF:00:74:F1:C5:21:5B:DF:FF:60:2D:2E:AB
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 0198499BDD15BD73F3A52F6A3152EF90CA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0A44
Signing time: Sun 27 Jul 2025 02:00:07 +0000
Manifest this update: Sun 27 Jul 2025 02:00:07 +0000
Manifest next update: Mon 28 Jul 2025 02:00:07 +0000
Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: whCiuL3h3G1B55yTd8BbKCEClUrwax9RtWeLfsi3NIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:dd:15:bd:73:f3:a5:2f:6a:31:52:ef:90:ca:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Jul 27 02:00:07 2025 GMT
Not After : Jul 28 02:00:07 2025 GMT
Subject: CN=c5dfb0f2c2e87dbf0074f1c5215bdfff602d2eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:63:17:9a:6a:44:d8:ad:f4:8d:36:58:d9:
77:93:7c:25:cd:3d:98:fa:08:37:37:2a:66:59:90:
e7:ef:1e:02:36:a9:cf:fa:79:57:d2:8e:30:d6:98:
0e:12:1d:52:7a:ff:f9:86:00:f8:01:9f:30:d4:13:
c1:7a:6e:72:02:ae:ee:ce:c6:30:6c:e1:de:f2:6f:
2f:f8:fd:96:97:22:26:b1:bc:71:70:fb:8d:06:91:
47:50:67:2f:c0:bf:2d:31:87:f0:12:34:42:16:2a:
24:81:34:45:14:32:cf:1a:6a:f3:b0:2f:c7:10:a6:
e8:96:00:f9:82:34:ef:80:13:d2:80:2d:18:4d:53:
53:84:84:29:14:09:b5:43:15:8e:e2:36:85:12:ee:
06:fe:63:27:42:b4:21:a4:bc:81:c6:e9:8a:7a:8e:
fb:2d:e9:47:04:b5:22:04:2a:8b:a4:8b:c6:69:4b:
99:f9:f3:fe:27:ad:71:bb:d3:91:c9:1e:d5:6d:1e:
1e:2d:1e:d9:38:5b:5c:64:b2:fd:55:bb:83:43:9f:
8f:3f:1c:dc:80:08:7c:f6:48:51:d8:fb:ee:2d:ea:
18:27:64:36:8d:50:d6:da:6c:6e:58:fd:ed:c6:a6:
41:13:af:11:f6:46:92:80:28:7c:a2:e5:8f:3e:70:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:B0:F2:C2:E8:7D:BF:00:74:F1:C5:21:5B:DF:FF:60:2D:2E:AB
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:76:cd:4b:5b:d3:36:4a:2d:90:3c:01:f8:6a:00:28:99:25:
b6:c6:58:82:ab:16:03:07:89:42:07:d2:e1:48:83:72:1b:6e:
29:f7:ad:b0:42:20:fc:da:43:66:9c:e4:7b:d5:87:a2:77:8f:
cb:61:36:04:93:4f:ee:cc:4d:88:d9:b6:e2:51:25:8f:a6:d9:
1b:7f:2c:13:e8:c3:3f:a1:49:8e:bc:95:e9:88:b0:e3:2c:52:
f0:85:e9:20:7d:8a:9c:9a:5c:8a:f8:f6:bf:1c:3a:44:d2:0c:
30:6e:ec:06:90:c2:fe:3c:78:dc:1d:10:6b:05:9c:ab:ff:a7:
d5:cc:33:8b:a4:14:8a:a6:b3:9c:d0:de:c1:06:04:ae:ba:21:
aa:55:63:28:96:a6:c5:42:26:30:d5:ee:15:cc:3c:71:ad:2f:
87:80:f8:15:53:af:5f:21:c0:37:91:0c:48:47:08:45:ae:1c:
f2:99:fe:0a:c7:00:93:34:36:d1:59:32:4d:49:08:1f:b3:79:
21:73:52:52:35:cb:d3:0f:0c:12:1e:45:98:44:ef:4b:9c:56:
0b:df:84:ef:c8:31:e2:a7:f8:12:96:3a:9f:56:0f:ce:75:33:
5c:f5:5d:83:11:3e:57:d5:ad:a2:3a:6e:43:f7:f8:fb:5d:99:
5c:58:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:48 2025 by rpki-client