Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: ZI0+vvmcBeQxmq+bf2L3C00Wx9J4flW3LXtcz0UYcaU=
Subject key identifier: 5A:9F:7A:18:A9:35:7C:44:E0:6F:22:5C:23:DF:D4:CA:92:1C:BE:B2
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 0198D54DED0D230384AF0E1E1FC918746267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 0329
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: UgxZH2l/NxRuk3lgGXptv6sxaxSZWelP5KwNDVpS54M=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ed:0d:23:03:84:af:0e:1e:1f:c9:18:74:62:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=5a9f7a18a9357c44e06f225c23dfd4ca921cbeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:ec:51:3b:39:d2:b6:72:ed:25:56:87:79:
d3:5f:5c:0e:5a:85:69:ed:7f:68:b2:62:9b:44:a7:
64:47:07:67:1c:b4:0e:3e:7b:a4:f4:e5:d3:59:90:
60:f4:1b:92:3e:a6:9e:c6:0a:9a:7e:ef:a7:35:73:
e9:a0:2c:39:dd:cb:0c:fe:03:b3:eb:3f:0e:d8:b0:
c9:e4:53:1f:92:a7:1b:ad:11:34:3a:0d:5a:7d:41:
25:44:4a:b1:fc:4e:c1:f5:dc:f9:35:60:e3:81:03:
25:26:d4:fb:ff:09:e2:02:cc:1b:8e:37:26:83:a5:
c9:6d:44:1e:45:c7:c0:77:b0:c4:37:20:e0:81:a6:
82:cf:1d:98:6f:39:4c:5f:b9:87:f8:2e:da:7c:41:
8e:5f:b0:69:44:bc:51:7e:62:7b:b3:d4:63:aa:bd:
00:b5:d9:de:23:db:65:ac:be:32:af:e9:55:48:93:
5c:50:69:8f:d6:54:17:6a:04:b3:2a:04:49:87:bf:
35:c7:31:91:65:59:ae:ed:1b:b7:d1:f5:48:38:87:
1d:b9:8b:64:21:86:69:ce:15:8c:30:50:18:a2:53:
96:e6:db:93:7b:79:43:57:be:89:41:ec:18:25:79:
23:4e:bd:82:e9:6a:9f:f6:85:97:4c:19:bc:44:82:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:7A:18:A9:35:7C:44:E0:6F:22:5C:23:DF:D4:CA:92:1C:BE:B2
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:f7:5e:70:d1:0e:8e:a8:04:68:0b:78:87:9e:89:3e:9e:
42:a1:e7:c3:7f:0d:4e:88:44:08:f3:81:a0:00:ef:37:64:27:
47:00:0e:fe:0f:0e:b2:b5:af:dc:f9:f6:78:95:85:39:e3:c7:
32:2b:ca:ff:40:bc:82:4d:95:90:9b:91:22:d8:4b:34:60:f0:
25:73:be:e5:e7:76:ab:50:79:7c:e3:c1:76:16:63:cf:28:6d:
fa:62:06:31:cc:b7:0e:3b:3d:08:8f:d5:95:f2:74:52:86:00:
81:5d:ae:cb:b8:82:5f:cd:e2:8a:5a:1d:3d:ba:58:36:89:d8:
ae:69:d8:ee:65:60:22:be:7b:05:d1:a7:6e:ce:9b:30:17:b6:
c1:7d:5d:9e:57:57:1e:cf:d8:c1:e1:a2:6d:2c:87:4e:8a:e8:
c0:77:4d:b4:21:12:36:6b:84:76:99:fc:0a:82:93:84:18:3b:
af:9a:4b:dc:6d:c8:83:77:89:77:17:29:27:0d:1e:be:ae:b2:
4e:49:1c:4e:e5:50:08:24:7d:ea:6c:5e:18:4a:e7:02:c7:c2:
75:f0:ad:66:77:f1:5a:b6:9f:0b:18:95:be:25:5b:ab:cd:80:
1d:35:81:08:f2:9c:9e:72:94:99:98:6d:2a:7e:1f:66:e3:83:
3a:2e:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:46 2025 by rpki-client