Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: cKQGcOaw7wyEftueiE1BKRJmn8nwLIZyLfb93XLTufc=
Subject key identifier: 2C:46:9C:EF:70:85:10:D2:B9:FC:B5:62:0F:F0:FB:89:83:2A:35:D7
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 019A72934E278C93531F622520A3EBC20DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 03FF
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: QPdDgRKjug05aJZANM7mh12f0BCM6VIz7yYUvIFDdJw=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4e:27:8c:93:53:1f:62:25:20:a3:eb:c2:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=2c469cef708510d2b9fcb5620ff0fb89832a35d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:e3:d1:28:56:6f:bc:84:f4:44:aa:64:12:
45:52:b0:5d:76:72:e3:a2:b4:5e:6c:ed:e4:6c:e0:
93:5c:8c:a5:9e:cd:0a:bb:67:f2:71:de:09:41:03:
f6:a3:06:d9:8b:23:cc:4a:9b:24:d0:39:9b:fa:97:
04:26:ae:3d:c7:0f:34:25:ea:f8:49:9c:e7:5a:40:
42:3f:3a:83:5c:ec:54:8b:e9:37:8a:69:48:80:5c:
1b:cf:30:35:80:e3:d0:63:d9:13:92:7a:bc:77:8c:
f2:d9:6c:21:ea:cd:ae:48:3c:6c:5c:b2:db:72:7d:
c5:97:4c:5c:5a:f4:41:11:bc:cb:d9:2f:0d:33:79:
6d:ad:d1:88:60:ae:f9:ae:ba:f2:d2:f1:ba:7f:c6:
f3:2b:b5:b6:a4:70:1f:1a:76:f2:68:75:94:f4:6e:
3e:e4:ea:f5:a9:16:9d:90:cc:ae:fc:94:99:5a:e7:
58:8c:54:2e:44:19:19:3b:7f:48:e0:e3:83:f3:35:
06:67:c3:fe:14:91:52:e8:7f:b5:a8:77:52:a4:b5:
d9:5a:f7:e8:8f:35:fa:3f:69:d7:f4:ab:19:71:f3:
8d:d0:2f:50:c0:8b:97:b4:34:99:fa:65:40:01:0a:
1a:ca:2b:14:5d:40:26:ba:04:bb:fc:9b:e9:da:b5:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:9C:EF:70:85:10:D2:B9:FC:B5:62:0F:F0:FB:89:83:2A:35:D7
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:4a:1e:ab:15:2f:0a:83:af:cc:65:66:6f:9c:d7:74:95:
bb:87:70:3a:bf:95:9f:8e:63:2e:de:ea:79:06:89:a5:e4:bd:
e4:62:b5:50:3a:0d:0b:fd:22:0e:35:07:58:dc:bb:8b:49:48:
68:01:90:f7:ae:47:ec:40:62:ed:01:2c:d9:60:d8:72:df:9e:
1f:16:17:f0:55:b7:07:b0:aa:98:f7:4a:e7:82:b3:d8:57:79:
ce:9f:39:61:8d:05:7b:09:e8:b4:fb:0e:42:59:99:7d:1d:0d:
6c:cc:c2:e0:0b:a8:91:04:d4:00:61:d7:5b:35:74:8e:b2:89:
2f:40:e0:ba:b6:f8:f2:8f:d5:ea:0a:2c:8d:65:b9:1e:fa:5c:
93:c4:34:bf:65:56:2c:09:4b:e5:83:5e:ee:4c:35:26:e9:98:
f8:51:06:80:b6:92:23:00:ae:c3:cf:14:b9:d6:b7:f1:80:12:
dc:90:64:4a:35:08:68:87:30:ba:10:67:09:44:79:b1:e8:d1:
62:ba:ca:53:4d:aa:bb:6e:ba:63:95:9f:e7:8e:87:05:c9:2d:
6e:ba:8d:48:da:6f:a4:37:e8:ce:c8:ea:16:4b:fa:42:15:d5:
b0:34:70:14:79:00:87:6a:94:54:43:a0:1b:24:99:12:2b:a3:
8f:ed:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client