Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: Cjm96S2BhycayoSJTo9Nnb/gmR9Az/AY1Ug2SStRS+4=
Subject key identifier: AF:B2:6D:E1:A6:62:6F:23:B4:88:B2:8C:E9:E8:F1:77:77:8A:D0:EF
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 019A7225EC5B4556FBA3FC7C18333A202E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 0794
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: pZG6w6DJ0/uctMOiJkmWEQovVCcp17wkktE/EiFqtpo=)
2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ec:5b:45:56:fb:a3:fc:7c:18:33:3a:20:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=afb26de1a6626f23b488b28ce9e8f177778ad0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:a2:af:85:9b:f2:10:24:92:b1:a1:e1:4e:
ca:2a:ff:09:5e:b4:2f:42:52:ea:bb:33:41:86:a1:
10:aa:d8:2b:72:7b:72:40:a0:bd:d5:05:b8:db:97:
4e:c0:0b:8a:00:b5:a6:b5:4c:a3:7a:39:24:02:06:
d0:be:5f:41:c2:95:88:e6:82:ab:1a:46:cc:47:b6:
a9:4c:a0:27:a9:71:69:18:57:1a:1a:aa:da:9b:c1:
c1:26:dd:c9:c7:28:f6:6a:40:08:74:e5:ef:3f:eb:
f2:2b:36:4d:e1:1b:71:60:97:40:98:3a:68:cd:d8:
07:0d:8b:89:ea:28:9f:69:c3:0d:e1:da:58:a1:8b:
9c:8d:20:d8:a3:e4:32:c8:94:fa:17:77:c1:30:9c:
15:d0:1e:16:66:7a:ff:5d:3d:30:08:0b:21:7e:d5:
f7:8f:3f:25:0d:c2:c3:9b:fb:4a:24:5b:d6:b0:ed:
4b:b6:5b:d6:e9:da:6d:9a:13:75:32:ac:96:5f:da:
66:e5:a2:d2:fd:f4:59:d9:62:01:87:de:3f:4f:04:
b8:68:4f:83:71:30:37:20:b2:00:86:63:9f:99:dc:
11:57:1d:39:1c:5d:a2:d4:c6:dc:e2:6e:6d:c8:2d:
25:66:f0:66:9d:4e:2d:95:68:ab:f4:81:d1:8c:9c:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:6D:E1:A6:62:6F:23:B4:88:B2:8C:E9:E8:F1:77:77:8A:D0:EF
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3e:7b:f4:d4:88:2a:d1:ce:df:e9:d2:ab:a8:e1:50:50:07:
67:09:03:ba:95:9b:7c:8b:24:18:4d:5b:e0:25:2f:f8:d7:2f:
28:0e:25:bf:fe:84:d7:c7:1d:f0:61:a3:3e:37:57:b0:e5:05:
a1:e4:1d:05:60:51:df:54:cd:5b:76:c1:96:9e:47:67:89:85:
19:ce:32:8e:c3:8a:7c:3e:3b:cb:25:a9:fc:f7:55:a6:2a:dd:
bc:4e:98:21:52:76:50:10:96:02:cc:ba:60:4d:98:5f:73:c6:
36:80:d6:17:13:cf:00:9f:8a:92:01:fd:62:09:0a:5f:c7:ab:
0d:3a:fa:d6:9a:f3:53:58:28:67:c1:06:5e:f5:e7:72:23:1c:
6f:b6:2f:f4:01:d7:2d:14:51:e4:4b:bb:52:0c:a5:15:48:1e:
ff:00:50:4b:e9:0f:21:f7:f2:76:28:07:9e:32:20:b6:da:4b:
6d:e5:a8:71:d1:7a:88:09:4a:04:ab:4c:f7:18:5b:1a:77:a0:
6d:01:89:f9:f1:56:ba:fe:de:5c:a4:4c:66:90:54:97:23:a6:
e5:fb:6f:e4:8e:b5:b4:9f:d0:6d:08:ea:29:81:1f:dd:b8:57:
e6:21:02:d8:53:de:74:1c:92:05:cf:0f:f6:38:a7:45:d4:8b:
5f:ad:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:33 2025 by rpki-client