Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: ECr5UgS5Zd44714mQq2Tjq5BzeTr5vajEkDKCFuMPRs=
Subject key identifier: FB:E2:48:2D:77:C6:E0:44:2A:DA:2A:48:71:2E:76:EA:39:4C:2E:10
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 0197B890667788B0A397213B0E84E78097F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 0638
Signing time: Sat 28 Jun 2025 22:02:40 +0000
Manifest this update: Sat 28 Jun 2025 22:02:40 +0000
Manifest next update: Sun 29 Jun 2025 22:02:40 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: Qeh0jkky4C+S5z4jQSPYoKxvRtOvR0A0ZaosOn/biUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:66:77:88:b0:a3:97:21:3b:0e:84:e7:80:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Jun 28 22:02:40 2025 GMT
Not After : Jun 29 22:02:40 2025 GMT
Subject: CN=fbe2482d77c6e0442ada2a48712e76ea394c2e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:33:3e:23:0c:4d:4b:74:76:e0:24:f0:26:
a6:32:71:4a:7e:a5:a0:cd:f4:1e:d1:5c:50:30:d5:
39:47:77:25:63:0f:63:5d:f6:1b:f7:3e:8e:63:ee:
e9:67:7f:18:9d:fa:60:cd:4a:d4:8a:90:f3:1c:79:
09:35:3a:1f:7c:22:50:56:67:fe:51:01:63:6e:7a:
89:2c:94:06:9d:48:21:b8:90:f1:98:37:11:e0:86:
f2:41:6e:24:65:f1:25:74:e2:8e:18:e3:6b:e2:d6:
3d:8a:03:0c:ef:67:10:ad:f1:a9:70:80:76:9e:35:
22:53:10:7c:d5:5a:1e:29:a9:a5:d5:cb:f2:82:a8:
d1:72:69:9b:23:9a:a2:af:5a:88:e5:fa:4e:5f:d1:
72:f3:36:a7:4e:92:64:d8:e3:d3:fa:e5:9e:10:88:
f2:b1:b1:58:d1:bc:5f:97:89:1e:96:4b:b0:23:ac:
39:87:f2:e2:2d:23:6e:0f:0d:67:a3:3f:cf:a7:48:
9b:71:4b:5a:b5:36:c6:62:10:53:ce:32:eb:5c:c0:
bd:7a:b9:48:5a:b2:bd:56:cd:77:44:1d:e3:d2:1c:
8c:80:ee:56:9b:d0:7a:03:21:d9:3e:fc:5b:76:88:
c8:b7:13:45:a2:50:e6:c4:aa:3f:f8:d4:28:05:66:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:48:2D:77:C6:E0:44:2A:DA:2A:48:71:2E:76:EA:39:4C:2E:10
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b9:a8:d6:2e:bb:74:9e:4f:fb:0d:17:67:49:2d:44:a7:00:
3e:4e:7c:32:5b:9d:c0:e2:37:04:44:6f:cd:a0:79:d2:ea:1e:
9c:a5:6d:c0:71:76:2b:4a:1c:ae:5a:3d:9a:20:0a:09:84:f3:
fd:64:27:d0:96:63:cb:9a:aa:4b:bc:f2:a6:eb:6b:29:bc:20:
61:95:40:78:7a:ca:ad:a5:e0:90:8a:93:a6:b1:69:4a:1b:42:
5a:c8:9a:1b:fd:8b:fb:1c:fb:9b:b5:e2:56:ec:38:7a:b8:70:
59:93:9e:24:fa:4a:f2:b1:cf:bb:79:3c:bb:e7:68:55:84:d8:
24:8d:15:3e:ff:a6:78:cb:d4:28:c7:1f:36:52:3e:0f:cf:1d:
b6:f4:c5:0e:0f:60:42:65:8a:6e:34:28:8e:de:41:10:0f:74:
5a:12:2c:6d:b8:61:36:23:ea:72:a2:8d:b9:ff:ef:4d:06:00:
bf:26:e1:0a:2e:01:6c:7a:ee:cf:6b:61:ab:db:7b:34:4b:c1:
2c:da:30:96:2c:c6:67:ca:00:32:69:02:1a:9b:20:ce:9c:6a:
76:4f:c5:2d:d0:ba:5e:ac:66:ab:29:58:da:55:5b:43:12:8e:
47:e0:c8:15:fd:a9:47:66:f9:a1:60:83:24:a0:6e:44:5d:81:
07:8a:b5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:37 2025 by rpki-client