Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: UH5PXM7DsHnGv3IDZRWyuhTlMOJtG+myZZMrQ10lnik=
Subject key identifier: 8D:57:C0:6E:4B:72:6E:DE:60:F9:C6:4C:E0:3F:AA:CE:52:64:FE:F6
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 01974E5727BA50BD5E7C0FAA55BB29C5EC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 0601
Signing time: Sun 08 Jun 2025 07:00:24 +0000
Manifest this update: Sun 08 Jun 2025 07:00:24 +0000
Manifest next update: Mon 09 Jun 2025 07:00:24 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: 1kOqf9qkKxRaLoe8+7Es7HdlnrIkGIh0B1EzYxI0l7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:27:ba:50:bd:5e:7c:0f:aa:55:bb:29:c5:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Jun 8 07:00:24 2025 GMT
Not After : Jun 9 07:00:24 2025 GMT
Subject: CN=8d57c06e4b726ede60f9c64ce03faace5264fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:b0:76:6d:28:37:1c:70:b9:69:52:5e:c5:
6c:5a:e6:d1:5b:4a:5c:d9:33:ba:06:86:16:dd:88:
3f:f0:51:f0:49:d7:b1:6e:c1:0a:95:f4:cb:7c:c6:
19:7c:d3:02:3f:f3:8b:b4:13:98:3e:d6:d7:58:00:
bf:6b:cc:e2:ff:62:c7:03:42:a7:aa:b8:2e:e7:8c:
9b:7c:65:3d:57:a3:a3:9d:d6:01:ff:e2:ef:81:56:
79:0f:f3:6a:a9:6b:0b:4a:fe:ce:15:68:d0:01:c9:
3e:57:81:a3:63:c8:90:be:ba:c1:c0:88:ea:85:0b:
f2:65:eb:0c:82:f1:f3:83:c1:82:3e:1f:7f:c5:57:
95:56:ed:09:94:83:fe:b5:d1:e3:ef:bc:31:c2:60:
ae:da:9b:0f:51:f7:73:62:90:ee:f4:5e:e5:1c:0f:
f7:47:70:f9:a5:61:eb:fe:a6:7f:9f:44:2f:d1:4c:
b8:fc:f8:37:1c:a3:de:97:63:43:28:53:14:d5:4f:
35:c1:b6:fa:06:ed:8a:29:02:f5:a6:d1:69:7f:f7:
87:98:be:58:18:65:b8:6c:e2:8f:84:3b:84:d8:2a:
0f:21:67:f4:a7:a1:9f:b0:20:cd:07:0e:4b:d4:42:
0a:c8:02:d9:fc:41:5c:82:d8:5e:39:a2:02:7f:c4:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:C0:6E:4B:72:6E:DE:60:F9:C6:4C:E0:3F:AA:CE:52:64:FE:F6
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:7d:1a:28:4e:e5:f6:f6:0b:aa:8b:15:78:54:d1:97:97:
27:b7:3b:96:43:c1:0c:92:98:22:32:3e:c7:8b:11:b1:c6:a4:
92:99:92:93:26:cb:8d:f4:93:e2:fc:ab:c9:15:0f:2d:07:1d:
4d:35:10:bc:77:80:3f:52:b1:08:a4:2c:c6:a8:92:5a:2d:78:
ac:13:c4:6e:b7:df:82:7c:1a:67:f8:c8:23:60:98:64:9d:8a:
d0:a4:c0:34:6e:71:6f:67:49:81:07:1c:25:0a:5e:5c:ef:19:
71:a8:05:ce:6a:64:37:16:20:aa:99:a3:6c:39:b0:37:33:61:
1c:ca:0f:8f:cd:07:81:66:dd:7f:08:63:31:1e:5d:d4:3c:65:
9a:7e:4b:b6:44:bb:6c:76:d0:53:07:dd:0a:17:5b:86:a2:b8:
70:48:46:82:41:23:d8:ed:1e:a8:91:c7:1f:a5:8b:67:3e:26:
80:48:3f:53:b5:ed:f9:7f:8e:99:18:88:d1:ed:b1:27:d3:43:
f3:c7:49:05:e0:9c:05:c8:f0:53:2b:4f:f4:12:49:8a:ce:ed:
39:22:c1:3d:3a:19:89:12:20:da:4b:54:f2:82:26:3b:fa:11:
6a:b3:63:de:9f:06:a5:c5:18:4d:f7:07:2d:be:aa:95:75:88:
1e:1b:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:11 2025 by rpki-client