Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: LEtyxrUTPmJ8oe3Uve2JEkF6LgyesBycYUfPoi9TwKE=
Subject key identifier: 53:0F:EB:47:80:CA:11:E9:96:2D:12:0F:79:66:64:BC:21:3B:F8:7C
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 0199239ED92DFD917BF528A4E4DC356B8A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 06F4
Signing time: Sun 07 Sep 2025 10:00:36 +0000
Manifest this update: Sun 07 Sep 2025 10:00:36 +0000
Manifest next update: Mon 08 Sep 2025 10:00:36 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: CqsViUhRh6IN2SZfH8uH10a6bweynHxhGOncPtGbKHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d9:2d:fd:91:7b:f5:28:a4:e4:dc:35:6b:8a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Sep 7 10:00:36 2025 GMT
Not After : Sep 8 10:00:36 2025 GMT
Subject: CN=530feb4780ca11e9962d120f796664bc213bf87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:54:07:32:6e:f3:fb:3b:f9:bc:3a:15:be:
a2:47:f8:a7:c8:25:3c:2a:23:9f:19:8a:3a:f8:6d:
66:8f:fe:ce:1d:94:92:ba:db:2d:73:bb:da:b8:68:
fe:20:ad:d6:87:eb:39:10:cc:d9:cb:ef:c4:40:8f:
1c:6d:be:32:1d:10:d0:df:a5:7d:e4:0a:68:3a:26:
d5:81:ce:21:38:4d:33:26:d4:77:81:19:70:13:79:
95:0a:88:a5:7c:a1:ad:af:5d:99:08:db:0e:44:5d:
51:1e:16:b2:09:bf:6f:7f:12:11:60:19:65:9c:4f:
e3:61:b2:35:fa:de:85:f2:73:3f:64:84:c5:55:f2:
63:19:2e:31:ef:3f:50:5e:a6:fa:e6:21:b6:02:52:
e4:54:80:52:e1:a0:32:3b:2a:2f:ff:50:0a:cf:a8:
12:ad:1f:60:d0:b1:f4:b5:91:09:39:fe:cd:eb:5f:
fc:3d:73:6e:e9:7b:49:34:87:a8:3f:91:f2:7b:e8:
35:ac:56:9e:b8:85:e0:bd:a4:6b:df:3f:a7:c6:3d:
6c:c5:ff:95:4b:ac:0e:8e:26:21:a7:3f:01:89:2d:
3b:fe:2a:6c:cd:48:79:06:53:3b:96:3d:b0:1a:5e:
2e:a4:d7:bf:83:33:06:67:7d:ea:49:0d:2e:94:21:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:EB:47:80:CA:11:E9:96:2D:12:0F:79:66:64:BC:21:3B:F8:7C
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b2:7f:36:d6:dd:83:28:f7:f7:19:e0:9c:8e:e0:f9:43:8f:
9e:da:ca:83:02:df:99:40:ac:0e:65:90:66:18:15:90:38:cd:
7d:bf:06:29:a1:02:2a:d4:58:a1:6d:21:a1:c9:71:87:e6:2a:
42:92:d1:e9:3d:8e:3e:62:43:81:1d:3d:66:4b:95:1d:94:5c:
aa:47:8a:0c:b5:02:ee:66:3f:1a:9b:41:b1:04:fe:c1:c3:ca:
01:35:50:a4:74:a5:aa:80:11:5f:12:bd:d1:a6:73:b7:ee:9f:
6c:d4:20:5a:f2:76:6c:05:20:8f:1f:57:6b:81:f3:df:2d:75:
c8:9e:58:86:3c:4a:98:7b:f4:c9:90:66:9f:8d:c3:fa:02:2b:
2d:08:ab:27:3c:b4:c7:7e:78:26:57:0d:51:94:7a:18:5a:89:
ac:70:82:f6:b5:18:1b:ee:43:93:2c:d7:83:54:be:96:17:d7:
72:9a:10:15:0a:a0:75:9f:10:3d:a4:51:3a:66:b6:cb:74:09:
70:5c:a3:47:35:1d:b2:6e:f8:15:71:f5:73:bb:9b:15:3c:90:
8e:cd:da:d3:95:65:e9:6c:a3:1b:7d:81:38:6a:57:37:b7:be:
f0:58:51:48:fa:e2:e8:2d:cb:01:f9:9c:6c:8f:18:cb:1e:c1:
73:e0:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:29 2025 by rpki-client