Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: BtBIDaaS4QtxYInhWnI/v9FhfhMWyE7yMInshRTAONU=
Subject key identifier: CC:10:DA:AB:55:1F:69:F9:47:FF:F4:1D:4E:98:62:CA:88:7D:4C:2B
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 01969F7671D8E67C3BECE63E26FDD3882C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 0204
Signing time: Mon 05 May 2025 08:01:01 +0000
Manifest this update: Mon 05 May 2025 08:01:01 +0000
Manifest next update: Tue 06 May 2025 08:01:01 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: AtHNHD7VlsfMgp5OG7AY7nhTUpaHf5fkJR4NXQWUptg=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:71:d8:e6:7c:3b:ec:e6:3e:26:fd:d3:88:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: May 5 08:01:01 2025 GMT
Not After : May 6 08:01:01 2025 GMT
Subject: CN=cc10daab551f69f947fff41d4e9862ca887d4c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:d6:e6:f2:a4:f9:a5:d1:b9:87:d9:24:ff:
29:f5:00:8c:8c:35:ae:03:52:65:19:50:ad:52:3f:
a2:13:03:30:55:0a:1f:e6:bc:30:07:9c:de:17:45:
81:2a:82:a7:c8:4a:48:30:e2:c4:dd:6f:e1:ef:c1:
37:68:0e:fa:16:22:5f:10:62:76:d1:01:7f:47:55:
10:a1:a5:6d:f5:82:6c:c6:1a:e0:de:e6:cd:3d:4a:
5b:d6:67:37:19:3e:86:3d:98:41:30:98:1c:ec:16:
bb:0f:a0:d6:b5:1a:1e:1f:a6:d3:67:dd:48:5c:a0:
e6:5c:bd:6c:66:73:2e:17:2d:3a:14:59:a9:4f:e0:
b9:2d:81:a3:84:f6:00:17:da:30:86:c3:a1:d1:11:
3e:62:de:19:01:34:fc:09:c1:38:01:b4:48:9f:df:
fe:4f:94:5e:f3:1d:f8:6d:84:4a:57:fb:64:ce:34:
bc:0e:1f:2e:79:d4:8f:47:41:69:61:5c:16:90:df:
07:97:72:de:cd:d9:bf:32:bc:b9:3c:0a:a1:dc:aa:
e4:ed:7a:bf:e8:fb:5d:f5:59:c9:5c:9a:c1:22:cc:
54:4a:8b:ce:7c:fb:fd:05:9a:74:73:9c:fa:f1:5c:
c2:35:d9:e0:90:5c:7c:3c:5b:67:05:da:ff:64:b7:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:DA:AB:55:1F:69:F9:47:FF:F4:1D:4E:98:62:CA:88:7D:4C:2B
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:03:cc:3e:fa:59:a1:75:ca:4e:51:fb:c1:3d:c3:b5:f0:
31:1f:35:f1:92:c4:20:f2:e4:be:00:3f:13:3b:a3:52:09:74:
eb:e9:a9:18:a4:fe:5f:2d:92:e0:2c:43:28:6f:1a:54:b8:96:
57:2d:91:f1:5a:39:ea:ad:b8:54:04:2f:bd:8b:0e:cf:ec:1c:
42:6c:6b:fb:1a:b8:db:3c:c5:b3:f1:83:39:85:e2:b0:0a:fd:
cc:18:14:36:c2:1d:79:f4:cd:9c:e6:0c:d2:93:4f:00:0a:88:
08:65:f8:6f:44:68:b0:94:83:2b:26:36:e8:b8:e1:5e:e5:cf:
e2:95:1f:40:9c:cf:12:2a:45:a4:2c:91:11:ae:1c:e3:87:b0:
e1:e4:39:4b:12:d8:03:3c:3a:a2:01:b8:d2:45:43:34:75:4c:
bf:37:8b:a6:40:7a:b0:a0:45:51:4c:4e:14:cc:0b:5b:35:4d:
a9:96:10:b0:44:74:92:e0:af:d3:d0:33:ba:68:81:7b:5d:ae:
b1:6a:25:fc:44:ca:43:d5:fa:60:03:5e:74:73:bd:6c:c4:6a:
47:58:14:bb:3b:99:3b:67:a0:e9:46:37:21:e9:5a:d7:1a:29:
2c:74:ec:65:f9:04:ac:7c:8b:ff:1b:6a:69:05:b6:09:9e:e4:
85:67:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:34 2025 by rpki-client