Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: dI0v2kpV2f979ce6Qu1kso7H6LNje2G7DD2WhjxjeLw=
Subject key identifier: 71:6B:9A:A6:5A:E0:A6:80:4A:D3:90:D6:A3:BC:21:9C:BB:8F:CD:5D
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 0197696116B01B0E58842F1F4726AB220BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 0672
Signing time: Fri 13 Jun 2025 13:00:59 +0000
Manifest this update: Fri 13 Jun 2025 13:00:59 +0000
Manifest next update: Sat 14 Jun 2025 13:00:59 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: yCXNxzD8ZKkQKHK6cdYtU7/1H1ItUp1peukFMIvlyOI=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:16:b0:1b:0e:58:84:2f:1f:47:26:ab:22:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Jun 13 13:00:59 2025 GMT
Not After : Jun 14 13:00:59 2025 GMT
Subject: CN=716b9aa65ae0a6804ad390d6a3bc219cbb8fcd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:7a:46:fd:ba:2e:f2:1d:77:b6:85:7d:d0:
f1:43:f3:3d:87:ca:10:0e:82:0e:51:9d:9a:8c:70:
63:a0:99:14:36:cf:66:54:9d:0b:80:bb:a7:9a:87:
51:e8:2c:90:75:20:51:0f:83:dc:70:1d:a9:c2:ad:
87:cd:2d:88:17:eb:25:f9:c5:d4:d7:58:bc:25:ee:
d6:e4:f7:38:41:5b:07:bd:6c:4b:dc:e6:25:21:99:
56:d4:9a:3d:9b:9d:87:8a:b2:19:c1:59:b1:1f:ce:
e4:d7:18:86:26:bf:26:18:79:66:22:9d:84:81:ee:
97:bb:54:c1:39:8d:90:c8:e1:66:01:b4:88:07:fa:
ff:2f:66:aa:ba:5d:dd:70:29:77:8c:8c:a2:cc:8c:
01:07:57:9d:ea:40:6d:bf:55:e6:e4:97:61:89:90:
de:86:42:0f:7c:3f:fe:b4:f0:37:ce:02:d0:83:db:
19:7f:ca:c6:18:1e:1c:3b:97:bb:5a:eb:a2:38:e8:
9a:b5:80:f9:2d:25:a9:55:31:99:54:ea:f5:8c:5b:
04:a7:c9:8f:e8:d2:98:21:23:ae:f3:15:4c:3c:91:
f9:60:d8:b7:98:1c:04:38:cc:0d:9e:2c:a1:d9:eb:
50:ba:56:2d:30:ef:dd:07:b5:dd:23:41:9c:f7:f2:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:9A:A6:5A:E0:A6:80:4A:D3:90:D6:A3:BC:21:9C:BB:8F:CD:5D
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:05:2b:de:0e:b1:d6:b3:ff:c0:f2:4c:85:de:d1:ab:79:
8b:9d:ae:81:24:2b:6e:ef:3a:a2:62:a5:f0:91:e9:32:5a:de:
11:6a:ca:30:2e:ea:27:42:10:ad:46:27:99:30:db:7e:c8:21:
b1:11:dd:52:fb:1a:53:16:9e:06:c7:41:e6:4e:a7:c9:3b:b3:
ac:ca:5b:c3:8f:c8:2d:cb:21:d8:74:96:dc:46:f1:fb:aa:a5:
d5:cb:8c:c9:a6:80:b4:71:ee:91:5e:e2:3d:f3:f9:82:2a:2f:
58:84:32:ab:26:5c:af:c7:cd:41:34:f3:28:48:1e:7c:b0:f2:
89:f1:e2:64:24:78:ef:6b:50:cd:29:85:07:60:6d:34:1b:88:
6b:52:85:60:1f:01:a3:7b:c4:34:60:85:40:8e:77:c4:ea:ba:
31:ef:94:28:8c:02:6c:4c:bc:25:a7:3a:3b:3d:f5:37:ce:bd:
1b:03:73:73:3b:ea:83:5c:c3:0f:8d:06:f1:c1:99:cb:8b:73:
58:42:41:f4:fd:60:d0:d8:1e:44:c5:c6:13:2d:6a:53:56:af:
25:c4:a2:dd:c8:63:20:19:49:79:4c:b7:65:8d:7e:ca:30:82:
33:c6:f4:a2:62:3d:c2:3f:36:85:e9:c1:5b:5d:d4:c3:b0:a4:
e8:b9:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:58 2025 by rpki-client