Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File: BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier: H9mYhTH0D9qc/3SGYdZy0QCzJYQkB62OVB8xXn5u7D8=
Subject key identifier: 84:4B:AA:27:8E:CB:A5:6C:73:C3:6D:9B:67:E0:B2:99:53:8E:42:7D
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019A71B7EC5D24733A6D8FB435B701A6D950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number: 0B62
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: JSC35fgOChdpum3qDCKdo4KBoWYNgPLM1w9Z6Edo3w8=)
2: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (hash: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ec:5d:24:73:3a:6d:8f:b4:35:b7:01:a6:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=844baa278ecba56c73c36d9b67e0b299538e427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:1f:3b:30:51:bc:96:3d:f8:66:50:ee:af:
bd:51:3d:48:07:26:a1:01:83:7a:8f:ff:0b:08:ff:
51:86:67:ed:0a:9b:48:fb:61:04:4e:b6:b7:f3:ee:
19:79:9d:b8:3a:5f:12:9c:b2:13:a0:0f:78:fc:e6:
66:f1:2f:f8:e8:11:19:54:af:8c:a7:ac:89:be:64:
06:69:25:59:bd:b0:3a:a5:f0:b5:b8:c1:89:dc:65:
8e:d0:5e:45:2b:c0:12:15:45:fd:00:62:7f:b6:ab:
69:bf:fb:b0:7b:63:75:9a:34:50:ac:e8:7f:2a:e3:
d1:48:97:45:74:1e:48:91:9b:63:f4:60:32:3c:31:
e7:91:a1:36:a7:4c:81:90:f9:01:34:49:8f:9d:f3:
07:9d:af:44:8d:04:15:23:81:14:ea:cb:87:59:66:
0c:4f:08:73:ee:fe:6e:d3:51:1f:cd:8b:b1:4a:0e:
1e:3e:4c:56:c3:cc:3f:ff:26:c2:c7:94:cd:c8:60:
6b:33:92:4e:05:f2:42:18:78:84:56:7a:12:e3:60:
d2:06:fd:88:61:19:a8:96:5c:b8:4d:46:93:61:2e:
a5:2e:d6:3e:74:66:75:4b:46:05:32:be:e6:d9:be:
02:75:2f:f2:5b:53:48:4e:16:10:b6:d8:9b:ad:bf:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:AA:27:8E:CB:A5:6C:73:C3:6D:9B:67:E0:B2:99:53:8E:42:7D
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ab:a0:e5:b7:d0:ed:b2:f8:4c:c2:eb:5a:3c:af:46:2f:bd:
05:69:11:4b:4b:8d:bf:04:70:b6:47:39:fd:9a:7c:b4:d8:e8:
3e:54:7b:bd:31:ea:5d:ee:9b:53:73:63:53:24:e7:cc:88:d6:
a1:9e:45:01:78:f0:67:34:73:93:a4:b8:e4:40:cd:38:61:5e:
69:a2:4e:50:e1:9c:97:5d:50:8b:11:e9:1d:c6:a9:a7:ba:00:
c4:14:63:41:d2:95:4a:92:73:d8:7e:bd:bf:64:03:9c:e2:3c:
06:ca:c9:90:e6:00:dd:ad:74:91:82:22:34:47:47:f8:f8:76:
63:38:04:db:9f:9e:d7:08:72:30:d7:92:19:67:f4:89:55:3d:
53:34:ea:5c:94:ab:c6:e8:85:87:fe:8c:92:81:6b:43:eb:75:
de:3b:3a:53:a2:a5:b6:dc:f7:d5:fa:62:06:b1:71:99:54:2d:
93:7c:36:c3:a1:86:ef:e3:9c:74:af:0b:79:fe:c1:bd:b2:e5:
51:cd:16:74:84:cc:41:29:11:80:1d:3e:8a:16:d5:d0:ae:bc:
03:56:7b:e0:72:1c:68:b4:4c:90:77:e9:26:d1:b2:e9:76:4f:
51:6c:5c:de:f8:2f:c9:49:a3:8d:dc:64:73:8f:87:b0:1e:23:
26:83:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:47 2025 by rpki-client