Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: L4ItoU9bN8z2ks7LkRgTU7E7SaoJ2J/wx+qrnpCh0S0=
Subject key identifier: C4:D4:43:D6:17:C9:D0:27:3F:A6:85:4F:68:1C:5C:3E:F3:C6:55:8A
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 019A71B92140D1226878AFFE21D683DEEDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 07A1
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: iGDs4KqkV3/K9UTwaG4KihsbDTtUo4/XxPSgINlXfnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:21:40:d1:22:68:78:af:fe:21:d6:83:de:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=c4d443d617c9d0273fa6854f681c5c3ef3c6558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:9a:c4:fd:dd:a4:4c:b6:cd:82:76:f4:ac:
b8:91:25:9a:aa:2b:bf:32:9a:7a:0f:95:e2:98:32:
4c:fb:70:10:3e:4c:f0:0a:2e:3b:d5:87:4e:23:49:
88:46:a4:65:eb:2b:44:08:c8:14:a1:12:a5:c7:07:
b4:49:63:40:dc:a7:5c:6c:4c:44:84:c0:49:f0:ca:
c7:e0:d7:d0:14:ce:94:84:04:a6:b9:ec:2b:6b:7c:
7b:b7:88:a5:3e:72:4c:de:33:95:c1:e7:34:1c:30:
50:85:c7:0a:db:19:b1:38:a1:56:03:a0:8f:ed:9b:
33:11:0d:4e:28:89:13:14:54:56:b7:b2:be:33:01:
d6:82:8f:d3:87:bc:76:5d:9e:51:e5:4f:2c:86:48:
72:d4:ca:a9:20:67:46:36:5d:64:ab:96:a4:6b:83:
7a:d3:85:62:e1:69:0e:88:b8:af:cf:bd:a8:ca:79:
02:b3:a0:cc:f8:92:94:5a:95:62:40:d4:4e:53:3d:
41:9b:ea:51:6e:1a:b1:23:7b:ab:e9:00:84:09:65:
1c:49:32:29:d5:2a:24:92:83:63:ad:ff:03:d8:c1:
a2:dd:9e:e5:ba:ab:6c:2d:5c:a9:00:f0:d3:4c:e1:
49:e4:3c:df:88:53:2a:0c:14:fd:e3:04:4b:9a:a1:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:43:D6:17:C9:D0:27:3F:A6:85:4F:68:1C:5C:3E:F3:C6:55:8A
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:69:b6:5f:8a:84:11:ac:ef:cd:79:d3:d5:c1:c9:28:3f:6b:
f6:55:d1:86:11:e3:03:73:e1:20:69:b1:f9:44:fd:57:e7:3c:
87:b1:39:e0:39:9c:45:cc:cd:47:ec:2b:e8:ca:09:a3:ab:68:
42:9c:a8:cc:0a:ac:8b:06:0b:9a:e6:ef:6e:44:1a:48:d2:4f:
a3:5f:0f:58:d9:1a:04:b2:c5:50:8b:a2:60:ff:fc:d7:a3:8f:
1d:c3:e2:d8:2d:d4:73:c3:69:46:95:7e:24:2b:79:0e:a6:c4:
5a:2e:12:ed:8f:b6:3a:23:e7:ce:b5:18:ae:57:d0:f9:97:2c:
f2:fd:84:a0:a2:23:2d:dc:c5:aa:81:9c:ee:b5:a6:9c:c1:43:
56:00:3e:04:99:f4:77:48:da:b6:49:da:ec:38:92:7c:db:6f:
59:1f:c3:df:95:bc:ae:d7:d9:73:5b:6b:78:d0:53:f5:60:d7:
d0:ba:a7:95:b0:6e:3e:a7:2a:49:03:b1:59:7c:55:17:0c:6a:
53:c6:f2:24:21:d5:7a:62:37:f3:28:30:91:7e:cc:a3:b8:88:
e3:b7:ed:92:47:98:82:98:fb:b0:1f:c9:8b:69:91:13:85:e1:
01:d3:21:e9:b4:fe:e0:76:36:38:28:a7:9d:34:ff:62:0b:e3:
fc:14:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:06:48 2025 by rpki-client