Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: iybVftLhCuEzN9Cedne8i5ih+1YhxDbwGH74cSe3DgU=
Subject key identifier: F1:1C:B5:EB:45:0A:B2:48:03:BB:71:10:D4:C9:2B:F4:AF:EA:09:B5
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 0197B6A202CB2312D623CDCF1158775F3994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 069A
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: JdUTcERBwXnFQoXWI5WYeznBrXmQOl4EraDVPvfgIkM=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:02:cb:23:12:d6:23:cd:cf:11:58:77:5f:39:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=f11cb5eb450ab24803bb7110d4c92bf4afea09b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:e1:7c:66:bf:c9:26:13:57:0a:3f:3b:f0:
f1:29:c2:36:61:51:21:86:75:1c:9f:8a:d9:8a:4f:
d1:3f:1e:48:20:47:51:38:fd:0a:ad:41:70:d6:1c:
03:9b:a9:24:71:37:63:0a:8e:a3:de:31:e6:38:f7:
35:2f:25:19:eb:5b:d0:bd:8c:b2:7d:82:11:a3:ed:
1a:1a:9b:0e:0a:6d:10:71:47:4f:39:79:7d:cb:05:
7a:26:43:c0:60:97:8f:e2:0b:76:ce:83:d2:33:16:
ba:67:63:08:5a:31:57:07:bf:28:5e:1e:e2:fb:f7:
c5:3e:59:cd:0d:bb:b0:e6:ac:25:cd:b1:08:83:2c:
e3:eb:ce:fd:27:72:4d:de:53:31:8f:79:03:38:74:
ee:fc:e4:7a:d3:4c:ae:75:30:54:c1:1c:8b:31:05:
90:c1:3c:c5:f4:4b:b0:6c:1f:c0:c2:11:00:bd:03:
4c:79:d7:d1:44:a7:49:6a:58:f9:93:56:c5:28:0c:
33:30:37:c8:cb:72:ad:d2:ed:29:70:52:8c:ec:88:
46:ec:ee:4c:d0:fa:ad:f2:8c:f0:81:a2:a2:72:66:
0b:f0:30:64:8f:c7:49:f7:42:0a:68:39:1d:78:19:
63:b3:25:72:8f:54:db:1e:b4:c9:19:02:57:80:95:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:B5:EB:45:0A:B2:48:03:BB:71:10:D4:C9:2B:F4:AF:EA:09:B5
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:98:c4:25:65:82:52:e3:e0:d5:c2:f3:a3:50:45:89:a3:35:
e4:78:02:e7:ef:ff:76:16:b0:ea:e8:0e:0d:e5:09:e1:04:cf:
62:14:97:cb:5b:21:42:e6:a2:09:4e:36:8e:ac:b0:33:51:8f:
e6:83:4b:b9:33:dd:3d:11:a8:0b:40:b5:ca:b7:53:b6:0e:e3:
9b:a7:d9:7c:da:17:5a:cf:11:8f:87:81:0b:d3:b5:5d:96:a0:
c1:06:9e:b1:08:2b:fa:0a:2b:c8:a4:06:2e:57:76:fa:9a:a8:
d4:e3:dc:6c:df:36:d3:5a:2c:91:fd:26:db:b3:39:82:2b:49:
4d:8b:ee:4b:c0:ac:13:04:64:a2:52:fa:ae:3f:07:b8:dd:16:
0c:b9:e3:18:19:1c:45:b3:51:68:32:14:74:6f:d3:3e:b7:a9:
97:44:ec:51:fe:7e:72:fb:53:c5:98:97:03:3c:e3:89:cf:5b:
53:06:0d:f7:10:5e:dc:06:e5:0d:9c:48:66:e1:3b:32:49:62:
44:bd:64:01:0c:da:5a:55:1f:a6:ed:b6:69:26:2e:df:2d:f7:
b5:d7:57:ca:98:c1:33:1e:37:00:32:e9:a8:8e:ee:77:da:c8:
ae:73:a1:0a:1f:06:47:8f:11:35:b1:6f:84:b7:23:71:59:17:
f5:84:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:42 2025 by rpki-client