Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: xRMgNYBNFZiaEtTQFsBlPc1dNrrGX0MPTd9V1c8vTB0=
Subject key identifier: 99:8F:E7:21:4F:40:BC:79:DD:F4:FC:92:D8:73:0E:B5:CE:FB:FA:D1
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 01977677F1CBD209E06EEB5481F969819243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 02:01:01 +0000
Manifest this update: Mon 16 Jun 2025 02:01:01 +0000
Manifest next update: Tue 17 Jun 2025 02:01:01 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: TlD9MDOHc7VfbPWvH9+Z4BqrJuKzqm5gRgjZacoPSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:f1:cb:d2:09:e0:6e:eb:54:81:f9:69:81:92:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Jun 16 02:01:01 2025 GMT
Not After : Jun 17 02:01:01 2025 GMT
Subject: CN=998fe7214f40bc79ddf4fc92d8730eb5cefbfad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:d5:b4:f7:b2:73:b4:f6:5d:43:66:a0:a8:
59:eb:0b:d9:08:be:aa:fc:23:24:a2:40:86:ce:01:
c4:a3:b5:bb:87:42:c1:c5:50:ce:f2:d4:8a:3f:1f:
bb:52:a5:75:3b:14:cd:22:dc:1e:3a:ad:c2:ae:d0:
fc:7e:ce:9a:44:5d:d4:bf:e5:5e:bd:88:4e:fd:6f:
0f:29:ad:ab:34:42:f8:b7:36:15:03:3a:38:fe:92:
45:ca:3e:73:ba:57:99:92:e5:c6:f8:2d:11:a4:bc:
8f:b7:86:1c:8d:95:95:82:c6:65:b3:af:d3:3c:01:
1c:86:de:95:7c:83:ad:d6:ea:db:a3:fd:64:90:0f:
a5:cd:46:2d:a7:66:0d:c9:05:83:a8:d0:e2:4a:f3:
fc:1b:d5:37:6f:f7:a3:c3:f4:ea:6e:9c:32:52:85:
f0:ff:ec:84:f2:fe:3a:5e:30:fc:20:9e:6a:f2:43:
3a:49:61:54:d8:77:2c:5e:2a:9e:d8:12:31:90:8b:
c7:07:69:a2:79:77:49:03:34:12:e0:7b:b5:2c:ab:
24:0a:f8:7c:f1:24:cf:60:2f:a1:2f:58:2d:e9:de:
a2:f1:fc:10:15:4b:ab:49:aa:08:17:a1:1b:6a:cf:
7a:c2:e2:3d:1f:48:40:8c:a4:6f:54:b7:b8:70:ec:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8F:E7:21:4F:40:BC:79:DD:F4:FC:92:D8:73:0E:B5:CE:FB:FA:D1
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:81:c3:75:fa:e8:80:6a:2e:c9:b4:53:cb:2b:c1:f0:42:75:
3f:f5:7c:3a:1e:09:8c:eb:7c:e5:4b:5c:fe:2a:9e:98:42:3f:
c2:84:c8:1f:f9:b3:21:ab:b0:4a:54:af:aa:56:48:0c:af:e4:
86:14:1f:53:ed:eb:90:3d:6f:d3:de:c4:1f:40:c0:a8:02:c2:
c3:d0:d4:f9:bd:1c:df:44:39:9e:22:d3:4e:b3:d3:c6:55:81:
86:b7:2b:b4:dc:ce:ea:a9:bd:18:27:5a:ac:0d:04:46:ba:87:
d2:e0:81:d4:1b:cf:d9:c8:f3:c1:20:c6:99:e5:18:30:83:3a:
62:b6:c8:29:17:ec:b6:53:de:1c:79:7f:cb:3b:2f:75:e4:a2:
e4:55:45:33:32:7c:e9:57:4f:b7:10:11:5b:5d:27:a5:bf:e0:
ca:2c:1b:0d:7e:a0:6b:6e:1f:cd:c9:1d:79:21:9e:74:a1:ad:
66:b5:ff:e0:4c:b4:34:da:f3:7d:a3:e7:80:7f:2e:05:52:37:
7d:e3:77:e0:61:af:59:b6:c8:49:4a:23:ae:5f:e7:f9:22:0c:
aa:10:da:08:62:ae:17:59:f5:1b:43:e2:3c:0b:5a:c1:d9:73:
a6:56:38:cf:27:5d:e2:e1:6a:b8:27:e3:bd:93:02:7c:7b:91:
f4:ad:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:19:11 2025 by rpki-client