Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
File: caNBPUB9it-Ktr5VcGCU7-nD1do.mft (raw, json)
Hash identifier: WQ2HKnR0j1qoBauxPIsg90kbxjz1VmQh5cfKi2+ghag=
Subject key identifier: DD:C4:C2:6C:E6:A6:FA:99:6D:30:34:94:C9:E4:62:A7:77:44:96:E7
Authority key identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
Certificate issuer: /CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Certificate serial: 0198499C0017C41BF4D5616FDD4FFB7BF231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
Manifest number: 11C7
Signing time: Sun 27 Jul 2025 02:00:16 +0000
Manifest this update: Sun 27 Jul 2025 02:00:16 +0000
Manifest next update: Mon 28 Jul 2025 02:00:16 +0000
Files and hashes: 1: 7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa (hash: 2r8MgNw8qHVAZHcXcB+fjTECDN+jibhAZMIq0CBmNHM=)
2: caNBPUB9it-Ktr5VcGCU7-nD1do.crl (hash: f8wku+VRSrmiF0V/crNvN7S6B2K19YylNtLx0wdEydE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:00:17:c4:1b:f4:d5:61:6f:dd:4f:fb:7b:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Validity
Not Before: Jul 27 02:00:16 2025 GMT
Not After : Jul 28 02:00:16 2025 GMT
Subject: CN=ddc4c26ce6a6fa996d303494c9e462a7774496e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:81:dd:9e:72:54:9e:bc:31:1e:b1:45:87:
c4:a9:c7:26:29:b6:0e:4d:34:06:a0:64:c8:49:f5:
37:8d:55:ba:2a:e8:3c:ef:45:0a:a8:85:80:03:a6:
03:c7:03:24:ca:ca:ff:8d:45:34:6b:f0:c3:c2:db:
9d:ae:6d:ad:33:cd:5d:21:cb:d9:e9:80:06:cb:1e:
9e:a5:4b:d9:85:a0:97:98:cf:3e:9d:c7:e6:ec:af:
2f:80:44:68:63:a0:f4:8b:1e:51:5c:08:a1:4f:ca:
9e:23:6b:92:75:40:d1:f3:2f:da:8f:a8:18:a0:39:
d3:34:a1:27:0e:03:82:86:03:c3:47:e5:a2:60:d3:
c3:ff:82:59:55:cc:40:89:cd:29:ee:41:1d:6a:99:
23:41:f5:a0:13:87:a0:7e:a4:dc:0d:4e:43:da:9e:
a7:64:43:99:f1:a4:4a:0d:51:7a:ca:f8:92:51:7f:
e8:b8:9a:d0:58:ec:a1:04:68:9a:7c:43:58:0b:ae:
79:f6:82:ad:8c:fc:89:18:9a:a1:57:8d:bb:97:66:
d2:eb:da:8f:05:00:36:1a:45:ca:a1:0f:e7:bc:d8:
09:d6:30:ea:c2:21:bf:8f:03:ea:e1:b2:00:8f:da:
5e:d6:4d:bb:ef:80:ab:70:f3:2f:b3:88:b5:7c:6d:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:C2:6C:E6:A6:FA:99:6D:30:34:94:C9:E4:62:A7:77:44:96:E7
X509v3 Authority Key Identifier:
keyid:71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:98:34:0f:74:d4:17:58:d3:2c:ed:cb:0d:4d:8e:a7:aa:
cf:2c:19:2d:19:b4:0d:79:20:da:d2:7c:01:82:c6:15:25:e3:
c9:ce:9d:dc:45:f7:12:f6:9e:f7:4e:e2:56:38:4a:47:8c:87:
4a:b9:b3:5b:8c:b5:74:7f:35:b6:7a:d1:c1:c6:c8:c7:12:78:
8c:42:bd:7c:64:74:37:0a:59:9d:c8:77:ee:26:08:5d:78:9e:
ad:d3:5b:4d:f4:79:ba:fc:79:98:f8:d6:8f:fc:e8:86:64:82:
10:48:c7:3f:33:00:78:53:aa:b4:5e:11:3c:91:b6:bb:44:8c:
ef:a2:be:12:44:f8:3c:dd:21:20:9e:12:9b:cb:53:ca:16:f0:
19:57:d3:3f:57:a8:84:c2:17:35:11:80:ff:9f:92:81:83:44:
4d:90:9d:1b:2e:3e:9e:2c:0e:06:07:59:ba:56:9a:77:70:f7:
d2:ca:ea:13:77:18:03:40:2d:cb:37:e4:c8:0e:7c:3b:10:46:
92:24:34:8b:ad:bc:38:80:53:e1:8b:2a:5d:ba:93:05:92:aa:
10:1e:8d:82:0e:05:44:7d:dc:b2:28:e0:bb:45:d5:86:9f:f1:
92:49:cf:63:48:83:1d:6a:6a:df:1b:b9:3f:9d:5b:15:53:c6:
e6:72:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:45 2025 by rpki-client