Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: bW7fH2uFtuKl9GdAFTExiE8HTcLJX0IEQwTe/heAtlY=
Subject key identifier: 67:2B:6A:AC:B8:B4:DC:87:A4:AB:28:40:78:B2:C9:59:CC:1C:57:19
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 0197B77C1285107191DB0C1D84E78CAE7AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 0295
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: WwE58JZlV/ZcAvxhsjQJqlFZZ3miiMriYBd9DKChAyo=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:12:85:10:71:91:db:0c:1d:84:e7:8c:ae:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=672b6aacb8b4dc87a4ab284078b2c959cc1c5719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:ea:e8:01:63:e4:a4:43:96:f2:c5:eb:8e:
05:59:f9:f9:e9:12:60:b9:fc:a8:dd:fb:19:ea:6f:
29:db:54:ee:56:56:c8:af:c3:ff:be:e7:b0:60:ab:
a6:38:85:88:f3:2f:ca:ff:06:81:d1:6c:fa:b0:fc:
6a:14:a2:56:f6:42:cb:f8:10:fd:8a:31:3b:d3:b4:
33:3c:d5:13:1f:ac:17:f8:ea:08:65:15:8d:9b:65:
c1:31:61:55:eb:0d:cd:d3:1f:14:8e:56:68:94:fd:
0d:e9:d9:75:74:a4:a5:f8:c3:c8:98:2e:a0:4d:f4:
26:ae:ed:fe:8f:5a:eb:32:e0:d3:d0:2a:8d:a4:6f:
59:20:f6:cd:7b:39:dc:f3:5e:a4:e3:e7:b2:24:70:
95:fb:1a:36:ee:ed:cb:74:c4:91:1b:aa:8a:2f:7f:
82:99:9f:2b:e7:f9:a5:bb:1c:1e:e6:41:83:8b:89:
62:b1:a2:68:69:7c:e2:19:26:71:b0:c5:3c:b0:e4:
23:d7:cc:19:a3:28:01:07:82:7d:f8:4e:fe:0b:3d:
35:b4:07:26:2d:02:2d:29:6f:67:33:f6:a2:56:01:
ff:3f:a5:27:82:63:c4:f8:a2:7f:9b:53:ff:66:6c:
ec:b3:d3:b3:2a:d7:0f:57:33:69:a0:cd:d1:ed:16:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:6A:AC:B8:B4:DC:87:A4:AB:28:40:78:B2:C9:59:CC:1C:57:19
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:40:7d:f5:e6:a8:5e:21:12:f8:52:20:2e:b9:a6:12:fb:b2:
ad:5c:fe:02:00:95:86:4d:02:0f:b0:ed:0f:c0:60:48:1f:41:
e8:75:a0:c6:45:d3:f2:68:f3:52:30:dd:7d:3c:ff:01:0f:1b:
58:45:9f:84:18:72:65:8d:cd:3d:b2:38:fe:7a:b6:b4:90:cf:
97:af:9d:8c:09:61:cc:bf:6b:1c:21:2a:5e:a8:ff:f2:3e:17:
89:dd:1b:cc:de:44:b9:3f:43:b8:09:b2:c3:01:46:75:37:65:
bf:f6:f0:93:d3:03:2d:47:f9:48:6d:55:fe:ba:78:7f:f2:a6:
5a:c2:d1:94:da:56:a1:39:83:fa:d9:bf:5e:47:e3:bd:1b:08:
5c:a1:8e:97:de:d6:a2:4c:fc:8c:15:66:7c:1a:15:30:10:41:
ce:9f:5c:38:8f:d1:28:3c:9e:86:f4:58:db:d1:34:0f:b7:88:
94:48:b0:fd:5a:27:46:98:b9:c7:e1:80:55:29:68:c2:a3:a7:
28:1b:5c:58:61:de:54:a0:f3:e8:24:07:af:00:77:63:cc:31:
9e:f7:ec:ea:eb:a8:dd:f4:6f:d2:9f:2c:b2:81:2c:1c:ec:40:
36:2e:04:99:d9:a0:c8:b2:1f:e6:c5:f2:96:b8:fe:82:91:55:
3a:24:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:42 2025 by rpki-client