Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: c4APURaD278u33DJ+vZB6mT2+7orkdqJApN51bNav4I=
Subject key identifier: BA:FD:1E:78:EB:78:F2:62:94:17:4B:F4:F9:1C:12:9D:0E:E1:3C:9A
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 019A71B8B885592E4A7468E5B243FD48C2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: HV/Gv1lUBD5U2ifKNerX5fm4TfUDin78ojvl91yMPDg=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b8:85:59:2e:4a:74:68:e5:b2:43:fd:48:c2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=bafd1e78eb78f26294174bf4f91c129d0ee13c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:7d:f0:4a:0b:a2:7d:e1:46:d8:60:06:95:
6f:6d:27:04:fe:81:55:d0:2a:11:d4:d9:c5:c7:78:
41:de:33:5d:02:52:c7:6b:24:09:ce:93:ce:09:ac:
a6:3f:69:d9:db:c3:90:8a:bd:98:fd:39:a3:25:89:
f6:52:c2:6f:87:0c:d7:b0:66:52:7a:42:f6:ab:91:
4c:5b:1d:5b:45:82:13:91:50:7a:56:93:0d:07:93:
fc:04:fb:a2:7d:0f:04:92:69:af:57:d3:b1:d2:d5:
3d:63:30:00:2d:f7:19:54:91:ac:56:0b:82:0a:55:
5f:99:20:d9:5e:04:13:09:eb:19:70:4a:62:78:0f:
8a:c1:e9:85:42:f0:85:26:84:8f:bf:db:c7:70:0f:
90:68:60:02:b9:48:8a:48:6d:e1:34:04:7f:2e:1b:
7e:9a:e1:14:4e:c5:78:cd:74:81:b8:7e:8e:d3:85:
49:aa:30:8d:98:d5:6c:5f:08:db:d4:27:b2:6b:a1:
59:5a:59:ad:f4:6e:3e:47:90:e6:64:22:12:28:d5:
63:ea:73:17:47:5f:3a:f1:fb:56:22:2e:76:4d:e3:
c3:63:9c:e7:8c:fa:29:60:37:57:36:94:15:82:a8:
69:0e:80:cd:ef:ad:1f:2d:e7:6d:ac:72:fc:d3:b7:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:1E:78:EB:78:F2:62:94:17:4B:F4:F9:1C:12:9D:0E:E1:3C:9A
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:e9:20:79:2a:ff:ec:fa:32:ad:96:08:6c:ec:5c:13:9f:
b5:99:2f:20:73:98:ba:38:d8:d7:48:8f:19:2c:9c:c6:b9:57:
dd:6f:39:f8:43:ad:86:e9:ed:ac:b4:8d:35:a3:4f:0e:c7:17:
21:ff:fa:f3:f1:39:ea:51:c2:75:89:aa:a3:50:9d:55:80:c6:
4c:aa:a0:a1:8b:b8:07:5e:13:6d:96:7a:4e:d8:54:79:4d:f8:
29:4e:b4:d0:21:a9:fe:b4:9e:90:99:5f:22:2e:ca:61:70:9f:
97:76:a8:7b:8e:46:4a:c2:4e:37:3e:08:44:97:25:9f:f9:ec:
2a:ca:49:9f:7f:53:eb:55:fe:28:61:57:6e:aa:9b:20:c9:25:
5d:31:e3:46:d0:d5:41:e7:6d:44:30:6a:ad:2a:22:1c:6e:98:
88:46:af:a8:0d:03:59:26:2c:cc:e9:42:80:01:4c:89:72:af:
d8:c5:37:a2:a6:bc:3a:06:8d:3d:29:7f:9a:1b:52:9f:08:62:
93:ec:e6:35:62:f5:a3:54:ea:26:b9:4e:52:7d:58:5b:0c:e0:
13:ed:9f:fd:76:ed:96:db:4e:06:cd:1d:1c:0d:20:9e:4a:3c:
24:40:8e:fb:80:fa:4a:de:17:6b:9e:a1:96:46:e5:33:d0:1f:
43:a6:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:17 2025 by rpki-client