Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: RrfvwLSVLEWgMsBdVYRgx4plYB8MHOsdfBdPKhbZ9v0=
Subject key identifier: 92:47:49:F0:C5:55:9C:C7:6C:E8:FE:45:AB:24:3F:72:3F:B3:10:7A
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 019774F6E31648A06B259CD098F5406D1693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 0615
Signing time: Sun 15 Jun 2025 19:00:26 +0000
Manifest this update: Sun 15 Jun 2025 19:00:26 +0000
Manifest next update: Mon 16 Jun 2025 19:00:26 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: GV8RLOuCz/7F24laMnXO4REQ1JsIbzKOsTlgxrWqJJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:e3:16:48:a0:6b:25:9c:d0:98:f5:40:6d:16:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Jun 15 19:00:26 2025 GMT
Not After : Jun 16 19:00:26 2025 GMT
Subject: CN=924749f0c5559cc76ce8fe45ab243f723fb3107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:17:08:b7:59:a1:66:d4:f6:35:94:1b:97:
cc:7b:3f:29:93:0c:ec:8a:aa:52:1f:62:44:88:4f:
98:04:36:d6:e6:00:c9:af:d0:09:00:e9:13:e3:61:
bb:8b:07:0b:72:33:f7:f4:b7:ee:60:ff:ed:84:8e:
bd:52:49:f1:f9:e3:25:89:c8:d0:50:67:61:eb:28:
b6:af:ff:59:53:9d:38:d7:b9:b0:6b:25:62:ff:79:
34:31:20:90:15:02:3e:58:e2:1c:ca:93:d3:b6:6f:
44:a3:4c:a3:c9:57:a6:ec:4d:09:7c:f5:f7:37:21:
7b:7f:07:2a:b2:a8:f3:db:dd:40:bd:4e:33:25:dd:
de:1a:dc:14:3b:98:fe:36:15:d9:fd:6d:84:00:5b:
4c:1b:e2:ec:2c:d4:91:ba:aa:de:a6:ae:bd:89:1a:
8e:c0:85:36:a1:0b:86:22:b2:dd:d1:a6:d8:a3:cd:
df:1c:ca:6d:08:0c:aa:27:93:03:bc:64:0b:6c:f4:
a1:4a:45:e0:57:88:9e:73:c0:28:a2:35:7c:43:de:
05:8c:52:d2:af:31:1b:3f:65:32:c4:8c:21:0e:d9:
00:71:39:4e:50:87:bb:58:db:1b:4a:23:92:ce:df:
a1:ad:f6:5e:d8:bc:71:ce:14:43:6b:fe:96:61:99:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:49:F0:C5:55:9C:C7:6C:E8:FE:45:AB:24:3F:72:3F:B3:10:7A
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:01:a8:d6:40:b1:7a:0d:26:a6:ed:e2:ef:07:b2:a0:9e:
b9:d0:c5:0c:00:ff:f8:68:5d:0e:81:ef:80:5c:62:7b:d3:16:
e7:3d:98:8c:2d:80:c8:96:ae:2b:20:6f:ff:62:5b:f4:4a:ce:
f3:66:b4:67:45:13:4a:36:96:e4:a0:ee:36:db:b6:04:e4:0c:
21:da:4f:58:17:a5:a7:59:58:70:12:61:d5:fc:6a:1d:3d:1a:
79:09:2b:d7:dc:a3:a0:51:e4:28:0e:9c:2a:01:2c:ee:9b:ba:
f9:42:30:a9:ae:e6:8c:30:61:67:45:9c:70:66:7a:32:38:80:
50:56:88:1d:0f:77:7d:c1:eb:2d:d2:ac:71:c4:c3:c9:68:4d:
db:bf:90:b4:ca:84:1c:c6:8f:0d:a0:de:61:9e:5e:62:47:d1:
e1:e2:1f:b7:e8:f6:f2:75:a2:75:36:26:35:64:de:8d:24:f7:
d6:4f:1e:d2:ca:20:ba:1e:ea:d1:10:9e:76:c3:67:4d:dc:57:
87:bd:42:ab:cc:04:07:28:f5:6a:c5:b8:e3:a7:86:02:a3:a5:
a3:ac:55:f0:c0:0c:c3:82:00:68:ce:d5:fa:b8:ba:fd:dd:95:
33:8e:34:1f:98:69:84:fa:75:b3:42:c9:a2:53:10:60:3e:36:
db:b9:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:32:36 2025 by rpki-client