Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: LOkoPVorLr45HfnMBvDJCIywICa1gocy5sp3g7ehBWI=
Subject key identifier: 40:32:57:D4:52:30:A9:F5:C9:94:92:7E:C4:05:8E:31:F8:8F:F7:AE
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 019A4DE2054135DC6317E4964496C8B9EFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 03EC
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: VDRfbKpD+F3zkaDL56HIsUJO/a4bfArSvEKvMKzbJIY=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:05:41:35:dc:63:17:e4:96:44:96:c8:b9:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=403257d45230a9f5c994927ec4058e31f88ff7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:5f:89:d0:df:60:3e:dd:b0:a5:5e:c7:ac:
19:8b:4c:d5:93:83:7c:52:3e:9d:5b:d8:d0:3c:18:
ba:ef:29:a9:13:9b:e6:5a:81:ca:42:c9:64:e2:c5:
c3:65:95:ea:92:7b:6b:de:89:49:0b:d9:c8:00:c6:
03:85:41:e1:94:62:45:03:f0:49:b0:32:21:84:77:
bf:2f:28:b6:3a:42:d1:4f:58:c6:c9:38:84:35:5e:
5d:cd:c6:80:92:41:8f:10:df:b1:c3:69:ff:2e:d0:
19:64:d5:cc:b3:97:4e:4f:63:f9:48:18:e4:84:e4:
28:58:1e:ad:7b:d5:5e:d5:87:88:95:ad:38:2d:db:
d8:0b:56:1a:06:fa:0f:d2:0c:b5:62:e7:dd:11:f5:
ed:00:df:55:99:0e:b0:01:28:6b:98:fd:11:df:f3:
9f:93:7c:1a:9d:ad:cf:31:65:0d:c9:a4:9d:63:2d:
d5:68:ed:41:79:ae:16:62:8e:f4:05:46:3e:f0:f8:
a8:8d:a5:20:17:e0:bb:7a:90:30:83:80:c2:6a:b4:
93:63:fc:a7:59:39:8a:65:9b:d1:b8:cf:6b:85:93:
a4:43:df:15:7a:db:6a:5b:7a:70:04:d7:1c:fb:dd:
de:72:da:63:ae:41:22:7f:09:fe:f3:ed:12:ec:b8:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:32:57:D4:52:30:A9:F5:C9:94:92:7E:C4:05:8E:31:F8:8F:F7:AE
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8e:f2:b5:15:4c:a8:fa:11:0c:2e:44:4a:10:48:7d:ba:1c:
53:71:d7:dc:ea:03:5c:76:51:e5:dd:7c:1b:41:e2:4a:00:3e:
14:0f:75:d5:b7:e5:2d:29:f8:73:cc:61:20:25:22:84:56:fc:
2b:ad:fc:6e:b6:f3:fc:0a:23:b7:6c:ac:d8:94:25:76:ae:de:
c9:dc:ce:87:b3:ce:b1:d4:1b:26:33:3c:53:1c:8c:d7:b5:d4:
62:90:9e:f2:28:78:3b:64:a8:51:be:0a:f7:82:14:96:5e:e1:
39:d2:a9:74:ed:e2:05:b7:ba:37:95:37:c8:6c:3b:4a:34:6d:
99:dd:eb:24:c4:46:80:c8:ea:fa:ba:99:6a:f3:79:2c:71:f6:
55:2d:27:75:23:54:bd:a9:a8:a1:62:bb:a4:90:b0:8c:47:e8:
dd:a4:12:9d:48:84:23:37:a5:d2:01:65:9a:a4:68:54:7f:f0:
f8:2b:a7:65:da:f8:42:1f:4c:e1:66:6b:fc:5f:b2:c9:86:fb:
36:6e:ec:b5:4a:2d:5d:b9:7e:d0:61:5a:d6:de:51:39:5f:8c:
55:6f:3d:e9:25:15:bf:56:64:76:58:54:a5:ff:2a:35:06:f6:
28:95:29:08:19:70:61:c7:07:91:6a:4f:e5:3b:15:42:19:6a:
18:e2:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:21 2025 by rpki-client