Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: 9DVozgJ8f+GO9K/drJ6fzzlLkXeuMhcM1t/xEOP/TvY=
Subject key identifier: BC:CB:D5:E9:18:0F:B3:DE:0A:9F:F8:D3:0D:9D:8E:76:2B:C8:7F:FC
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 0199228C64F73F5ADED8A116C210A789A64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 0351
Signing time: Sun 07 Sep 2025 05:00:50 +0000
Manifest this update: Sun 07 Sep 2025 05:00:50 +0000
Manifest next update: Mon 08 Sep 2025 05:00:50 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: qEhvURTNZf8JP5tCHc+5tecuwpOVM1nxXgGpqtjhWio=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:64:f7:3f:5a:de:d8:a1:16:c2:10:a7:89:a6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Sep 7 05:00:50 2025 GMT
Not After : Sep 8 05:00:50 2025 GMT
Subject: CN=bccbd5e9180fb3de0a9ff8d30d9d8e762bc87ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:13:b1:ae:de:8e:18:4d:4a:49:81:33:42:
65:32:23:74:5e:ce:c7:ce:76:b6:24:e4:37:58:4e:
e4:ef:63:02:f1:7b:d8:bd:2f:70:32:9b:5d:5e:b0:
c8:fe:30:4a:88:a0:08:36:87:db:bc:63:c9:3f:2f:
f7:2d:15:80:91:87:00:22:bf:d1:60:0f:6b:d1:0a:
94:fe:fc:31:57:f3:a8:71:5a:e0:bb:b0:cd:b1:1b:
e1:54:04:cb:eb:f9:69:8e:49:3c:aa:a7:c4:d6:bc:
73:f8:c6:57:e7:7d:01:3d:f0:25:ab:c9:54:9e:ae:
e1:69:8e:7c:01:f2:81:e9:72:5a:60:c1:7c:3a:82:
32:5b:e8:01:49:1d:60:5e:55:28:fa:61:06:55:64:
43:39:f8:d4:58:8f:93:d8:4b:e8:5a:d1:9b:15:1a:
64:b6:6d:69:cf:dc:23:d3:56:e6:a6:aa:a8:ee:3c:
96:12:80:61:01:b3:45:d1:19:57:55:f2:3c:26:4e:
33:b5:78:d3:af:76:da:8b:9e:70:2f:4b:5b:9f:35:
19:83:58:74:23:d0:f0:fb:82:35:f3:f9:16:7a:f6:
d0:e9:46:e6:cb:49:9f:25:df:c4:e0:aa:52:f6:f4:
88:90:bd:f1:2d:c6:22:85:3a:86:c7:be:a4:5e:19:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CB:D5:E9:18:0F:B3:DE:0A:9F:F8:D3:0D:9D:8E:76:2B:C8:7F:FC
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:2b:4f:97:ee:5f:a1:13:fc:7e:b7:8a:b5:7d:35:92:cf:
82:c2:13:40:75:3b:7b:4e:55:3b:55:6c:87:2a:3b:bd:00:31:
88:e3:e3:2e:c5:ef:84:b5:26:12:3c:6d:f1:f5:b4:74:d3:af:
42:75:12:79:87:ed:d6:6c:02:4d:d5:42:5b:89:7c:c7:3b:c9:
23:ba:3e:a8:cd:02:dc:3a:c3:9d:9d:77:51:7f:5e:87:44:97:
83:8d:ec:dd:ff:2f:f2:99:0b:92:a5:a8:58:dc:f2:37:8e:76:
3c:46:d6:5c:08:88:5c:3e:5a:ee:56:ee:e5:ce:dc:11:df:35:
27:47:da:ae:91:13:44:65:cb:9b:7d:34:9c:2d:1a:5e:27:07:
c3:56:33:3e:ab:1e:4b:dd:cf:e0:ff:ea:a1:7a:4a:cf:11:b8:
b0:76:00:13:44:34:f3:66:d7:48:72:51:5a:dd:44:4c:ba:d8:
a3:31:00:25:10:de:c8:26:30:84:0f:9d:c0:4e:33:20:9e:ac:
e3:80:d3:e9:38:66:ba:13:72:42:bd:9b:cd:05:da:ad:ca:29:
a5:f0:bf:ee:6e:20:f1:7a:41:3f:e8:41:3d:60:7b:9e:47:eb:
b4:fc:42:e5:b7:c7:48:2d:0e:b5:40:95:87:f0:1b:7f:9b:04:
7d:3b:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:17 2025 by rpki-client