
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: tjCRWyp+h2VENfVbBISXGN6U3Zs6cHGfdvVz5gk2JhM=
Subject key identifier: 97:2B:00:13:76:90:6F:3D:8C:04:D1:6D:88:4E:F0:70:66:53:50:39
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 019873E1C91E1E89313678EC7D88048E18A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 06FC
Signing time: Mon 04 Aug 2025 07:00:33 +0000
Manifest this update: Mon 04 Aug 2025 07:00:33 +0000
Manifest next update: Tue 05 Aug 2025 07:00:33 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: xwU40YeAT/uhqytdzTqB+mgRMUDm501P6lUfEbnWIyI=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c9:1e:1e:89:31:36:78:ec:7d:88:04:8e:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Aug 4 07:00:33 2025 GMT
Not After : Aug 5 07:00:33 2025 GMT
Subject: CN=972b001376906f3d8c04d16d884ef07066535039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:d7:c1:33:58:24:39:1d:63:3d:3c:aa:18:
db:56:18:74:de:d3:cb:27:d9:e4:7f:b8:d5:0c:60:
64:1e:2d:6e:08:78:8d:44:09:a3:66:ff:b1:c3:61:
e9:26:e6:11:c9:81:58:f2:f9:2f:f4:1b:64:ea:b5:
57:de:f8:09:ed:4b:92:bc:a3:31:36:68:52:46:f1:
90:8e:54:01:dd:e0:d3:e4:0e:18:c6:1e:2e:cb:fb:
64:48:86:eb:13:68:e0:57:a1:90:93:27:d2:c8:66:
cc:c7:69:25:25:c8:22:f6:ce:90:a4:8e:51:8f:97:
dd:28:c3:87:5d:3f:10:13:ec:53:39:1b:2f:ba:75:
d3:16:72:e1:65:4b:0d:f7:b9:a6:5c:e5:be:8e:2b:
32:41:42:43:6a:e6:d7:82:d4:4a:5e:2b:fe:ec:67:
e9:80:b0:90:c2:62:22:6c:c6:37:6b:4e:10:7a:f3:
d0:3c:4a:af:29:a2:4c:83:01:b3:85:23:16:fd:c4:
fb:97:e9:af:98:45:0a:03:1d:a8:46:ba:cd:25:8c:
e0:f1:c9:19:5d:18:1c:d2:1d:5c:12:11:02:e0:87:
ff:ad:6b:e6:d3:c8:cb:41:9c:9d:5a:5f:db:74:37:
52:33:45:43:04:87:a4:e1:7c:24:d0:5e:b6:6f:15:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:00:13:76:90:6F:3D:8C:04:D1:6D:88:4E:F0:70:66:53:50:39
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a9:44:67:cd:09:b0:8b:35:54:ef:86:5e:8e:c2:1d:95:92:
50:60:4e:be:84:aa:ba:83:33:e5:75:4d:27:f3:06:de:86:ae:
72:1a:d6:ca:fc:22:d7:63:a3:a8:0a:13:3f:6d:65:ca:9a:c2:
9d:95:14:c0:23:f0:1f:16:e0:32:73:ee:bc:51:f4:8f:1b:ef:
0a:58:ef:85:09:52:d3:af:a8:96:79:69:e2:56:c6:40:1f:a6:
ba:69:ff:3b:85:e6:a7:b0:7f:68:88:cd:aa:c0:df:f1:09:6b:
50:18:9a:fb:6e:2e:cc:f6:77:6c:1b:5c:b8:f2:5c:4f:ea:68:
68:db:6d:2a:59:ac:0e:f2:70:a5:4c:4a:3c:7b:75:6c:d1:12:
98:72:f8:42:b7:9c:f2:ef:76:be:30:da:00:89:57:1b:e3:f8:
34:b3:f3:ba:92:28:44:09:1c:9c:b2:1f:5d:9e:6c:aa:4e:26:
01:cd:5d:f2:1c:c1:cf:53:02:97:00:06:c1:3d:93:99:65:df:
fc:da:35:db:df:65:74:9b:eb:87:07:b4:31:af:8c:51:16:61:
49:1a:13:ff:fa:aa:4e:96:31:55:e4:46:38:70:5b:94:26:f5:
d2:9f:8d:89:8e:56:cc:c1:96:1d:09:a6:f4:d8:0e:22:f7:58:
0a:6e:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:43 2025 by rpki-client