Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: lTLLbo0/FmOa9TLzzfraLILrgQnzyMulmnCE5+vxSqk=
Subject key identifier: 59:FF:3F:66:05:37:D4:72:DD:D8:D8:C4:BB:6E:0E:D0:F3:D2:33:5E
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 0196C916DE7FCBD670ECC9DB850496735B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 05BC
Signing time: Tue 13 May 2025 10:00:41 +0000
Manifest this update: Tue 13 May 2025 10:00:41 +0000
Manifest next update: Wed 14 May 2025 10:00:41 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: 2hcAdOMfjgqIqA+f6AnJIYrBgfCtz2aqocYkIgMpOss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:de:7f:cb:d6:70:ec:c9:db:85:04:96:73:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: May 13 10:00:41 2025 GMT
Not After : May 14 10:00:41 2025 GMT
Subject: CN=59ff3f660537d472ddd8d8c4bb6e0ed0f3d2335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:92:5f:9f:79:ef:a6:8c:26:1c:fe:75:e7:
e6:eb:2c:3a:28:2e:4f:8b:ef:6f:5d:f1:86:29:53:
c2:13:f5:af:11:c3:76:67:20:6d:0a:2a:f6:aa:47:
68:4e:b2:35:51:e2:72:2c:c3:ab:a4:4c:8e:17:60:
42:f5:f4:59:35:f9:3b:98:18:83:f5:aa:6d:51:84:
4a:9d:38:fd:91:8f:17:79:c9:a4:71:2c:33:d6:dd:
8a:9d:4a:4d:50:19:21:a7:de:0b:ea:da:3c:cb:17:
56:a2:a7:b3:c5:45:49:25:aa:ed:8a:c3:f7:7d:18:
59:95:06:9c:a0:99:9e:d9:46:74:24:08:fe:91:c9:
d9:2c:ef:f4:1d:2c:d0:83:ed:26:53:0b:89:d3:e4:
b2:49:6c:15:c3:44:a1:ad:dc:20:39:d3:fd:74:54:
7a:ba:e7:81:52:1b:52:d6:1c:08:35:35:e6:cb:3f:
19:5d:62:8b:93:6a:d3:80:35:63:e3:db:68:6a:57:
16:c4:01:d4:46:26:5b:3e:f4:da:8a:59:3e:88:5c:
47:01:f8:ed:03:64:a1:22:d9:76:02:c6:10:e2:93:
53:db:e9:6d:76:aa:82:e6:5a:6d:ce:1c:47:6f:e9:
98:6a:ff:47:46:90:ca:24:a2:b4:96:02:90:89:e6:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FF:3F:66:05:37:D4:72:DD:D8:D8:C4:BB:6E:0E:D0:F3:D2:33:5E
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7c:8d:17:9c:08:3c:60:ea:a0:03:6e:9b:b6:6e:64:4e:8c:
fd:cf:f3:cc:0f:6b:65:8c:ad:72:95:d0:d3:a7:5a:2d:f0:c5:
50:44:e3:9c:92:f5:0e:4c:59:57:68:65:3f:db:e9:ed:97:6c:
f5:0b:8d:e1:3b:a6:4c:99:9d:a4:58:78:24:45:cb:a6:53:17:
ca:0a:7a:64:5a:34:94:c3:6c:d3:9d:f1:eb:1a:06:b0:cf:54:
18:7d:de:7e:39:90:6a:27:b7:31:b0:55:b1:26:67:61:13:91:
73:31:45:dd:9c:90:12:f5:62:64:c0:12:3c:4b:b5:b8:be:27:
98:67:e1:4c:6f:68:b0:89:86:d8:4a:e4:26:1b:a5:2f:41:4a:
91:8d:d4:ad:a5:bb:60:4e:d8:c2:48:84:53:c8:5c:03:a9:cf:
a5:40:5c:3c:ce:15:b6:56:9e:2e:72:5e:ce:33:26:c6:f2:c5:
f5:80:ea:d9:a8:d5:f4:02:4e:73:6d:a5:32:38:4c:7e:ec:15:
6f:e1:32:12:a0:af:0c:57:72:d8:a8:98:d4:d0:7a:77:a9:04:
b9:1b:d1:6b:0e:bc:85:ae:70:df:42:2f:9e:aa:eb:8b:82:91:
bc:ce:1d:b3:72:3c:ab:e5:ad:18:a1:81:84:39:b0:e4:21:e9:
4c:fa:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:50 2025 by rpki-client