Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: qQbtUcdpnZjsMPLadptEI1DAMjmSWFBIfFLZAUd7ydc=
Subject key identifier: A2:D2:60:0D:F9:45:3F:E6:8A:1D:98:AC:27:43:30:5C:F7:AF:75:C8
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 0199FEB4D99C59E7D57F640FC4809E366742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 03C3
Signing time: Sun 19 Oct 2025 23:01:28 +0000
Manifest this update: Sun 19 Oct 2025 23:01:28 +0000
Manifest next update: Mon 20 Oct 2025 23:01:28 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: ruDg7cDNSzWhx2TEzHCnUofjqCfdEDuL4/Eu9/AuG8Q=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d9:9c:59:e7:d5:7f:64:0f:c4:80:9e:36:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Oct 19 23:01:28 2025 GMT
Not After : Oct 20 23:01:28 2025 GMT
Subject: CN=a2d2600df9453fe68a1d98ac2743305cf7af75c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:1c:1a:38:92:3a:a7:12:8e:50:34:76:74:
dc:88:a0:0b:34:e0:a6:c7:a1:1f:4a:18:a3:d4:c5:
d8:0e:70:b1:90:da:d8:d5:47:22:a1:09:5f:f7:17:
10:1c:03:8d:ec:e9:fb:8b:aa:b7:1d:0b:ce:99:48:
17:ae:e3:c6:51:9a:89:50:f3:f2:1b:04:eb:91:a9:
8d:3e:54:23:cf:06:d9:75:ee:5b:eb:82:ae:b8:b2:
0c:0b:09:2d:7f:0d:73:d1:fa:07:4e:f3:95:dc:41:
c5:79:e7:74:ac:67:24:f5:59:14:42:80:f9:8b:f4:
9e:9c:b3:b1:68:b2:35:33:9e:f2:52:a3:c3:c4:52:
0b:85:42:14:b3:e1:b9:f8:14:bb:3b:4d:ef:46:05:
64:3c:86:7c:7f:f5:3c:a1:20:5a:17:8e:6c:34:71:
cc:f2:a3:c2:59:80:79:f8:d7:2e:a6:06:a0:06:40:
d1:0f:6e:d9:27:3a:99:da:83:ad:4a:01:e0:90:50:
34:62:b9:6a:bc:2e:81:7d:d0:fe:4e:ba:02:b7:eb:
a0:33:0e:29:1e:99:f4:8c:e3:f8:99:b3:52:39:68:
36:fd:21:be:d0:96:a6:c3:d7:bf:c7:b2:6a:23:c2:
1b:a3:27:00:03:77:d5:e0:13:c1:75:e2:cf:59:a3:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D2:60:0D:F9:45:3F:E6:8A:1D:98:AC:27:43:30:5C:F7:AF:75:C8
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:a6:da:49:74:5b:e7:1b:92:d6:29:0c:7f:83:ad:73:b5:
34:f6:15:32:13:57:ae:ff:e1:44:9d:d2:5d:4b:a0:bd:34:61:
8a:9b:80:78:d5:35:7c:16:77:9b:65:9c:b4:39:d0:1c:16:28:
2c:3c:6b:22:0a:9f:0b:a5:9d:f9:3a:85:e8:b8:76:10:5e:df:
f1:17:2d:ab:88:ff:4c:49:bf:01:9e:d7:6e:a5:1b:2e:0e:ab:
d1:e8:eb:c2:c5:5d:e6:dd:3d:69:4a:7b:6c:a7:85:55:6a:64:
44:1b:f8:12:9f:4e:16:14:83:11:75:66:76:b4:33:70:a4:0a:
c3:ce:f2:06:f5:ba:3b:b2:cf:ab:cf:1d:04:2b:38:7c:30:b0:
4d:7f:c2:71:9c:b3:df:cb:8f:da:35:42:5e:d9:e1:ab:16:39:
78:ca:7f:83:6a:9f:62:90:a2:07:7d:ed:eb:8d:ea:1d:a9:cc:
06:1a:68:41:f7:be:f3:a8:2c:95:19:ac:e9:55:48:83:dc:33:
71:1b:19:f0:a5:20:0c:fa:d1:c5:cb:76:89:70:de:7f:0e:f0:
81:f8:52:21:5b:75:3b:05:f8:bc:90:6f:13:ca:4c:fb:fe:13:
b3:e4:fa:10:12:b7:62:e9:ba:b3:54:3f:90:27:30:6e:e1:9e:
4d:2e:fe:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tNmcWefVf2QPxICeNmdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGQxNzQ3ZjM1YzBjZDZiMjVmMGIwYTBlNjhkMDQ0MmM5
MzkxNGMwHhcNMjUxMDE5MjMwMTI4WhcNMjUxMDIwMjMwMTI4WjAzMTEwLwYDVQQD
EyhhMmQyNjAwZGY5NDUzZmU2OGExZDk4YWMyNzQzMzA1Y2Y3YWY3NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg8cGjiSOqcSjlA0dnTciKALNOCm
x6EfShij1MXYDnCxkNrY1UcioQlf9xcQHAON7On7i6q3HQvOmUgXruPGUZqJUPPy
GwTrkamNPlQjzwbZde5b64KuuLIMCwktfw1z0foHTvOV3EHFeed0rGck9VkUQoD5
i/SenLOxaLI1M57yUqPDxFILhUIUs+G5+BS7O03vRgVkPIZ8f/U8oSBaF45sNHHM
8qPCWYB5+NcupgagBkDRD27ZJzqZ2oOtSgHgkFA0YrlqvC6BfdD+TroCt+ugMw4p
Hpn0jOP4mbNSOWg2/SG+0Jamw9e/x7JqI8IboycAA3fV4BPBdeLPWaOkzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLSYA35RT/mih2YrCdDMFz3r3XIMB8GA1UdIwQY
MBaAFL9NF0fzXAzWsl8LCg5o0EQsk5FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2Ut
N2YxOWU4YzhiODNkLzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2UtN2YxOWU4YzhiODNk
LzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXim2kl0
W+cbktYpDH+DrXO1NPYVMhNXrv/hRJ3SXUugvTRhipuAeNU1fBZ3m2WctDnQHBYo
LDxrIgqfC6Wd+TqF6Lh2EF7f8Rctq4j/TEm/AZ7XbqUbLg6r0ejrwsVd5t09aUp7
bKeFVWpkRBv4Ep9OFhSDEXVmdrQzcKQKw87yBvW6O7LPq88dBCs4fDCwTX/CcZyz
38uP2jVCXtnhqxY5eMp/g2qfYpCiB33t643qHanMBhpoQfe+86gslRms6VVIg9wz
cRsZ8KUgDPrRxct2iXDefw7wgfhSIVt1OwX4vJBvE8pM+/4Ts+T6EBK3Yum6s1Q/
kCcwbuGeTS7+Xw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:25 2025 by rpki-client