Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: s+/fko7RBlcvowW8hrHmx+XX8IdtsyYogrVb+69VHsA=
Subject key identifier: E2:83:44:39:0D:71:5F:82:7B:9A:79:A7:F6:B6:41:C8:EB:57:43:03
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019686FFE8E9F9AF0FF44556639CF034DB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 14:00:40 +0000
Manifest this update: Wed 30 Apr 2025 14:00:40 +0000
Manifest next update: Thu 01 May 2025 14:00:40 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: ad4yy/F4dwgCfGCHTM4skyUwp9EjaG2//6NgMV75Tdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:e8:e9:f9:af:0f:f4:45:56:63:9c:f0:34:db:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Apr 30 14:00:40 2025 GMT
Not After : May 1 14:00:40 2025 GMT
Subject: CN=e28344390d715f827b9a79a7f6b641c8eb574303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:af:7e:91:79:91:d5:24:9a:0c:fd:ec:e4:
1f:c9:5d:b5:ef:f9:05:67:09:2b:55:37:20:6f:d4:
17:4d:b6:f9:57:bf:51:26:ac:dd:a8:13:8a:13:0d:
cd:86:d7:8f:05:29:7c:d3:3f:22:a3:2c:06:3b:ed:
8a:d9:d6:65:b3:45:08:4c:f6:93:42:c2:b1:5c:8a:
e0:63:5f:4b:0c:bf:a4:b2:7c:82:02:33:22:62:eb:
ba:99:cc:ac:58:b1:c9:db:76:31:bd:c6:73:33:27:
4d:85:99:9c:c5:e1:03:73:e3:3f:32:10:d9:bb:5f:
43:72:56:8b:1f:d5:39:ab:a0:7f:8f:48:43:db:65:
ac:6e:a8:87:3e:04:2d:32:cc:95:65:7b:2a:16:64:
57:84:00:34:35:0e:5d:0d:d6:21:01:fe:ae:22:c5:
0b:4d:c8:56:34:34:7a:57:54:09:b6:3b:0b:a2:00:
52:4c:2d:6e:73:d2:28:8e:b5:d9:56:a2:28:0a:07:
d5:4b:4c:13:d5:05:05:b4:11:5d:99:9d:d2:3d:ab:
3b:99:c3:b0:b3:6e:d0:90:d0:bd:18:24:93:2f:6b:
c8:23:d4:25:9a:02:5b:08:32:82:c3:51:41:79:d1:
de:f6:8c:85:7e:08:ee:e6:d9:ab:7b:e4:a8:13:49:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:44:39:0D:71:5F:82:7B:9A:79:A7:F6:B6:41:C8:EB:57:43:03
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:77:c9:49:65:55:05:54:30:8d:60:b8:4e:1d:a6:fc:b6:
a4:eb:3a:78:29:8a:4d:5f:f2:66:2d:8c:8e:f5:8e:f1:ed:3d:
9b:eb:13:b9:6b:80:2d:f5:6b:5f:a8:81:da:26:32:d5:14:b2:
e4:06:77:f2:dc:f9:de:ea:3b:3f:d4:ee:fb:52:16:98:c2:f9:
9f:3b:73:5a:46:f9:eb:38:0a:c6:84:ce:e4:46:16:de:6b:f5:
19:4d:54:f6:27:0a:fc:fb:6f:2b:c9:84:19:bb:b1:9a:02:2a:
e5:d2:57:b1:ac:ad:59:71:55:2f:fa:ac:e2:06:d9:30:5e:62:
b9:2b:39:40:ac:23:25:85:0a:2c:8a:6d:1a:d8:45:43:40:05:
8f:72:8d:60:9b:d0:da:16:97:ad:fb:57:30:cb:86:58:04:f2:
79:4b:0b:86:36:e5:25:bf:55:11:68:b0:4c:b0:56:d4:7f:0f:
7e:81:0b:65:da:88:f9:c1:73:71:e8:8e:6d:54:63:14:b7:8e:
3a:89:94:b8:4f:06:66:21:f3:c9:89:c7:43:69:7c:1e:4d:4d:
49:5c:cc:26:ec:6a:0f:1c:65:e0:82:7d:8a:1d:31:26:40:6c:
94:2f:13:b3:00:85:a2:b6:9e:84:4b:0a:cb:7e:ac:62:99:6d:
8d:ce:5b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/+jp+a8P9EVWY5zwNNtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3
MzMwZjIwHhcNMjUwNDMwMTQwMDQwWhcNMjUwNTAxMTQwMDQwWjAzMTEwLwYDVQQD
EyhlMjgzNDQzOTBkNzE1ZjgyN2I5YTc5YTdmNmI2NDFjOGViNTc0MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa+vfpF5kdUkmgz97OQfyV217/kF
ZwkrVTcgb9QXTbb5V79RJqzdqBOKEw3NhtePBSl80z8ioywGO+2K2dZls0UITPaT
QsKxXIrgY19LDL+ksnyCAjMiYuu6mcysWLHJ23YxvcZzMydNhZmcxeEDc+M/MhDZ
u19DclaLH9U5q6B/j0hD22WsbqiHPgQtMsyVZXsqFmRXhAA0NQ5dDdYhAf6uIsUL
TchWNDR6V1QJtjsLogBSTC1uc9IojrXZVqIoCgfVS0wT1QUFtBFdmZ3SPas7mcOw
s27QkNC9GCSTL2vII9QlmgJbCDKCw1FBedHe9oyFfgju5tmre+SoE0l0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKDRDkNcV+Ce5p5p/a2QcjrV0MDMB8GA1UdIwQY
MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt
NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2
LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSJ3yUll
VQVUMI1guE4dpvy2pOs6eCmKTV/yZi2MjvWO8e09m+sTuWuALfVrX6iB2iYy1RSy
5AZ38tz53uo7P9Tu+1IWmML5nztzWkb56zgKxoTO5EYW3mv1GU1U9icK/PtvK8mE
GbuxmgIq5dJXsaytWXFVL/qs4gbZMF5iuSs5QKwjJYUKLIptGthFQ0AFj3KNYJvQ
2haXrftXMMuGWATyeUsLhjblJb9VEWiwTLBW1H8PfoELZdqI+cFzceiObVRjFLeO
OomUuE8GZiHzyYnHQ2l8Hk1NSVzMJuxqDxxl4IJ9ih0xJkBslC8TswCForaehEsK
y36sYpltjc5bkg==
-----END CERTIFICATE-----
Generated at Thu May 1 00:09:25 2025 by rpki-client