Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: 8uP+K6u3KshkzLgL1l/3Gd/36WOT71SPfOHkl/xF5/0=
Subject key identifier: C0:AB:1B:87:ED:01:61:D1:6B:56:E4:1C:DE:4E:9C:6F:C3:FC:B8:F1
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 01974779E72DD056FDB70CB3ED88BF66539A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 025B
Signing time: Fri 06 Jun 2025 23:01:00 +0000
Manifest this update: Fri 06 Jun 2025 23:01:00 +0000
Manifest next update: Sat 07 Jun 2025 23:01:00 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: xqd5dj+SVDeIyuKX5fwxSd0DFTL9zY7bMRxy/ZaFpLA=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e7:2d:d0:56:fd:b7:0c:b3:ed:88:bf:66:53:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Jun 6 23:01:00 2025 GMT
Not After : Jun 7 23:01:00 2025 GMT
Subject: CN=c0ab1b87ed0161d16b56e41cde4e9c6fc3fcb8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:0e:fb:69:d4:bb:be:c3:f2:a9:27:4a:bb:
3f:41:5c:24:33:82:fc:97:3e:03:d1:da:3c:4f:71:
ed:a7:22:06:a3:c5:21:0e:ac:ac:d1:7f:76:a3:2c:
82:bd:03:1e:65:e5:d8:88:8b:1f:85:94:18:58:0a:
43:0a:09:27:61:f6:ff:52:e7:b2:21:50:94:b9:68:
de:90:71:cf:9b:d3:c9:bb:83:ba:10:97:44:e1:ea:
d7:0c:ed:f2:17:48:b4:50:92:cc:ff:a8:98:76:2c:
61:e7:0a:eb:c5:96:c5:89:ad:9e:98:62:fc:f5:f2:
03:f7:c7:ef:a7:fb:62:aa:cd:2d:35:54:0f:db:68:
5a:83:54:c0:ae:3e:1f:64:01:b5:d7:95:e3:28:a6:
b7:0f:14:70:ce:01:4a:13:b2:e4:0c:8f:c5:ed:5f:
85:68:f6:be:54:a5:d1:62:b5:54:67:39:a6:48:38:
9e:a9:95:8c:ba:ee:43:ed:f7:90:a8:4a:c5:7b:61:
9b:18:69:62:74:fc:be:a8:d9:bc:98:1b:da:1b:d7:
7f:a1:95:1d:2e:d0:8f:5d:ae:59:f6:53:2a:c9:6e:
b2:65:c8:b6:17:6c:5a:b5:34:95:d5:7f:9a:5d:b9:
00:b5:3b:da:5b:89:61:78:28:ec:bf:fb:3d:6b:7c:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AB:1B:87:ED:01:61:D1:6B:56:E4:1C:DE:4E:9C:6F:C3:FC:B8:F1
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:b3:5d:3e:d0:a8:0e:1a:4c:a2:08:04:e3:0e:b2:67:f4:
e1:03:2f:92:eb:b7:2f:61:6f:e4:ea:6b:bc:22:a4:bd:e1:f5:
77:d3:d4:58:47:4a:0f:0d:50:6b:b8:31:6b:eb:93:a7:22:f5:
47:9e:8a:c1:bf:94:c7:61:7b:7a:98:00:78:f8:ff:ad:7d:31:
5a:f2:75:89:28:98:84:dd:17:5c:79:af:42:72:df:af:6b:2f:
d1:7f:06:47:1b:7d:71:82:1d:47:e4:31:b1:7c:d6:bb:d2:d0:
06:57:27:60:15:1a:05:2f:0c:20:35:25:41:f0:21:4e:ef:9a:
43:15:51:07:30:46:bd:ec:1e:a7:5b:80:d2:63:e4:6a:9d:b6:
f2:82:54:49:51:4c:f4:7d:5e:86:a9:c7:d1:20:d1:ee:17:3f:
e2:2e:66:f8:15:0b:a4:1e:2e:9e:a1:ac:f7:a4:8e:ad:c5:e2:
0b:b7:10:6f:ee:3d:a0:bb:29:7b:c2:4e:e7:d8:0f:f8:df:aa:
6a:75:91:4e:88:1c:69:02:e3:91:9c:3d:ff:88:ee:a7:06:75:
bb:4c:79:26:f9:39:fa:8a:85:b9:f9:fb:54:e7:dd:2a:60:2a:
8b:e0:aa:eb:90:15:45:8d:61:3d:6a:de:41:02:47:0c:2d:17:
04:e9:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:04 2025 by rpki-client