Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: g0kqXieRkq8yuqbZrNroiNqqHcTVkTMVxXq5yDYp6hQ=
Subject key identifier: 87:C3:4D:F2:C3:B3:78:F3:E3:01:03:1D:43:90:24:C0:DB:2C:2E:8F
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 0199FDD962E01AC659B740C605CD7F4E7629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 0765
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: iiOmZ4B9qY37p5edG6vEvqSD8v0RBMp+c7dYkFnjw2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:62:e0:1a:c6:59:b7:40:c6:05:cd:7f:4e:76:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=87c34df2c3b378f3e301031d439024c0db2c2e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:c3:32:d0:95:6e:35:c2:29:dd:19:c0:a6:
67:7a:3c:7e:c9:f0:b2:4b:58:f7:8d:ef:3d:34:c6:
e2:fd:2d:86:9d:16:1b:3c:be:2d:fe:7f:dc:ac:5a:
9e:11:14:7d:90:17:b9:26:20:86:69:9f:49:03:c6:
dc:96:50:33:a3:bc:f1:10:ae:65:36:d0:a9:d2:d0:
34:cd:b7:74:56:4c:43:27:20:f1:96:03:46:a1:01:
7e:47:0c:93:c8:9d:75:8f:93:3a:d8:a0:98:d0:8b:
1a:cf:63:dc:4a:a2:c0:36:71:d8:33:65:1c:e2:aa:
86:23:7d:6d:dc:9b:a9:85:38:73:fc:7e:fd:fc:41:
db:1c:20:dd:ed:e0:c8:d1:19:8b:25:48:ca:c1:e2:
57:06:c6:7e:7f:aa:53:8a:4a:8c:5a:0f:2e:93:4f:
c1:e3:6d:12:af:1f:20:d3:59:4b:f7:75:a0:76:77:
7d:45:6a:1e:a3:4e:a3:8e:39:18:5e:8d:4a:7c:f6:
73:a3:51:47:6e:e3:b2:71:fd:d6:e5:c0:aa:88:9b:
ab:d7:1d:7f:04:f5:7e:e3:df:e4:3d:d8:e4:6e:d5:
81:2e:29:85:a2:c3:9f:f4:93:b5:fc:6a:d1:86:ea:
ad:ec:c7:cb:42:05:45:02:62:32:4a:6b:d3:12:1c:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:4D:F2:C3:B3:78:F3:E3:01:03:1D:43:90:24:C0:DB:2C:2E:8F
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d2:e0:00:2c:1a:1f:29:f1:3b:e2:ad:9a:10:4e:50:e7:65:
57:93:dc:c8:87:ad:6d:ac:69:08:54:c3:e5:85:93:df:ab:64:
c1:5f:74:bf:f4:60:3d:ba:70:c5:c5:2b:95:d9:fb:50:e9:39:
1a:91:47:69:05:8a:29:6c:a5:48:cc:29:cd:38:66:87:3f:cd:
26:4f:72:59:2d:e4:da:55:71:35:90:b1:48:91:15:e3:5d:99:
a8:ea:ae:14:8b:d0:a1:69:28:64:e8:b4:5f:19:e8:4f:23:99:
43:7f:d9:ce:2b:74:1d:49:44:56:f1:9c:ad:48:79:c5:a4:2c:
41:2c:08:10:08:21:d0:d6:cf:76:bb:35:b3:e9:ee:0f:8f:95:
c1:9f:e9:e0:42:67:d7:6b:44:e5:97:26:58:f5:ee:59:f0:03:
68:f0:fd:b1:65:4e:7b:f3:0c:61:a3:6f:00:85:c6:f9:56:82:
c2:3e:36:a5:78:c5:4b:49:54:b7:8a:bc:ad:cf:6c:f2:55:f1:
28:9d:a2:f4:07:b3:4a:74:32:97:c1:a7:cb:a2:0d:d2:76:71:
9e:8f:f6:b5:bc:f2:25:6d:81:b8:52:dd:eb:72:8c:1f:42:56:
7d:14:67:45:5a:69:56:9f:e4:15:f7:7f:7c:b8:42:f7:c7:89:
5d:8d:e6:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WLgGsZZt0DGBc1/TnYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzljZWJhOTUzYjA3ZGFhMjJhZjNjOGFhYjJiMWNkNGUy
MjQ4ZDAwHhcNMjUxMDE5MTkwMTQ2WhcNMjUxMDIwMTkwMTQ2WjAzMTEwLwYDVQQD
Eyg4N2MzNGRmMmMzYjM3OGYzZTMwMTAzMWQ0MzkwMjRjMGRiMmMyZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+DDMtCVbjXCKd0ZwKZnejx+yfCy
S1j3je89NMbi/S2GnRYbPL4t/n/crFqeERR9kBe5JiCGaZ9JA8bcllAzo7zxEK5l
NtCp0tA0zbd0VkxDJyDxlgNGoQF+RwyTyJ11j5M62KCY0Isaz2PcSqLANnHYM2Uc
4qqGI31t3JuphThz/H79/EHbHCDd7eDI0RmLJUjKweJXBsZ+f6pTikqMWg8uk0/B
420Srx8g01lL93Wgdnd9RWoeo06jjjkYXo1KfPZzo1FHbuOycf3W5cCqiJur1x1/
BPV+49/kPdjkbtWBLimFosOf9JO1/GrRhuqt7MfLQgVFAmIySmvTEhxgFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfDTfLDs3jz4wEDHUOQJMDbLC6PMB8GA1UdIwQY
MBaAFG55zrqVOwfaoirzyKqysc1OIkjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yY2M5ZjYtMDVmMy00MGQ5LWI2YWUt
MDdmZmI2NmM1NGRmLzEvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yY2M5ZjYtMDVmMy00MGQ5LWI2YWUtMDdmZmI2NmM1NGRm
LzEvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9LgACwa
HynxO+KtmhBOUOdlV5PcyIetbaxpCFTD5YWT36tkwV90v/RgPbpwxcUrldn7UOk5
GpFHaQWKKWylSMwpzThmhz/NJk9yWS3k2lVxNZCxSJEV412ZqOquFIvQoWkoZOi0
XxnoTyOZQ3/Zzit0HUlEVvGcrUh5xaQsQSwIEAgh0NbPdrs1s+nuD4+VwZ/p4EJn
12tE5ZcmWPXuWfADaPD9sWVOe/MMYaNvAIXG+VaCwj42pXjFS0lUt4q8rc9s8lXx
KJ2i9AezSnQyl8Gny6IN0nZxno/2tbzyJW2BuFLd63KMH0JWfRRnRVppVp/kFfd/
fLhC98eJXY3m0g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:03 2025 by rpki-client