Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: jX40WMxbJo4UIDqAecUZy9qMAdtDirl+mC6x+cw0S88=
Subject key identifier: FE:1F:E3:EC:D8:A6:F3:78:6A:D7:16:2A:31:63:AD:3E:70:34:0F:34
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 0198925A976E7D59BFE1AEB5E6B5295E23A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 05:01:07 +0000
Manifest this update: Sun 10 Aug 2025 05:01:07 +0000
Manifest next update: Mon 11 Aug 2025 05:01:07 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: hkVp+AjR8WdyYOGSAgtS4sPyhZYHABxk8c6I9OXQY7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:97:6e:7d:59:bf:e1:ae:b5:e6:b5:29:5e:23:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Aug 10 05:01:07 2025 GMT
Not After : Aug 11 05:01:07 2025 GMT
Subject: CN=fe1fe3ecd8a6f3786ad7162a3163ad3e70340f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:99:4f:a8:1d:ef:92:1e:1b:34:af:c3:f9:
97:cf:39:3f:f9:cb:4d:7a:8f:c8:85:95:6a:4f:b0:
02:14:4e:a8:f5:06:cf:9b:22:ce:d3:9d:91:a7:ea:
19:12:0c:42:32:63:a7:3f:d5:47:84:9e:76:3c:09:
ba:05:82:58:3d:10:b9:be:60:5a:e2:90:c7:e5:92:
f1:b1:b9:fe:25:0b:48:30:fb:3a:e8:34:a8:88:b4:
16:ed:e7:a9:0f:34:91:91:7d:25:29:4e:97:56:d0:
0b:40:ac:7d:3a:d3:54:72:f8:53:e5:13:e0:7c:22:
69:4f:44:ed:6f:2a:34:2a:e3:de:97:f9:2a:53:a8:
50:6d:16:f5:6e:bb:fb:24:2c:d1:d5:ac:57:29:65:
b7:f1:4d:8d:f0:3f:7b:e8:73:20:8b:4c:68:68:1a:
57:03:53:80:7e:a1:d8:32:46:c4:11:e3:20:b6:77:
81:c0:59:f4:d8:70:82:ca:c4:41:cc:bc:5e:8c:cf:
ea:eb:86:9e:8f:44:fb:a4:3d:d7:9f:5f:63:aa:b4:
f6:cf:07:eb:20:72:66:c4:27:d5:73:88:16:cd:58:
46:04:7e:f1:41:2a:39:5c:f9:64:20:df:b6:9e:47:
03:5a:40:52:e7:ab:50:ba:f7:3f:48:a5:71:21:47:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:E3:EC:D8:A6:F3:78:6A:D7:16:2A:31:63:AD:3E:70:34:0F:34
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:93:61:4f:54:6e:51:b4:be:b6:ce:27:2e:b0:ee:fb:d5:
c9:10:ef:40:31:59:51:c9:76:a9:0a:04:3c:20:88:0a:8e:7b:
34:1f:c5:f8:54:a3:17:d8:f7:ca:ef:58:77:80:bc:12:a1:06:
77:b0:85:d1:b3:e4:0f:1e:cb:6c:6c:c8:40:7d:94:95:d7:47:
3f:31:20:6d:40:e1:07:47:3c:bc:44:b2:2b:cc:9a:ca:81:6d:
c5:37:a4:d4:db:40:df:44:c6:d9:d5:b4:72:1f:ff:4a:05:c4:
47:7e:ed:6c:ee:ea:9b:be:0d:97:7f:4c:7c:05:0e:c1:5c:82:
94:59:86:34:6f:65:fc:cd:d6:49:42:67:a2:2b:c9:f9:6f:cd:
fc:c1:9e:17:f4:70:fd:d5:57:e9:da:c1:f3:1a:a2:f8:a3:18:
34:67:c9:b5:23:3b:5e:c3:c8:a6:d2:ca:72:15:de:ec:fb:2b:
a5:dc:ab:b7:eb:46:5f:8b:ec:af:ee:f4:39:e7:6d:86:9a:e6:
d8:f9:3a:c3:56:7b:86:c3:93:6d:30:db:d0:ce:de:87:47:e5:
9a:12:55:c7:20:a9:b1:9e:e7:94:35:46:29:e1:61:1d:92:ff:
17:ed:77:f9:4c:dc:a3:32:22:de:b5:13:ad:0b:92:3e:c0:ce:
c3:94:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:44 2025 by rpki-client