Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: z/5WuvqGYz6/kOKev4Ee+wWm2AVArvddFnIe9z/t5Ro=
Subject key identifier: 6B:38:3B:CD:D6:48:4C:1D:78:98:9E:C0:C2:DF:43:8B:A4:FE:B6:4C
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019A5451CEC945AB3C26E9A9249297BFB535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 14:00:38 +0000
Manifest this update: Wed 05 Nov 2025 14:00:38 +0000
Manifest next update: Thu 06 Nov 2025 14:00:38 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: c+gA4oIPkZJO2e4bYscV+GJ4HK4sUGGVRp7BMXP2V+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:ce:c9:45:ab:3c:26:e9:a9:24:92:97:bf:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Nov 6 14:00:38 2025 GMT
Subject: CN=6b383bcdd6484c1d78989ec0c2df438ba4feb64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:89:48:7b:a2:64:4c:1c:68:dd:3e:ce:d8:
71:d3:f3:cb:ab:9e:af:3b:da:a5:0a:36:ed:93:28:
e9:e4:76:89:cd:f3:d2:b5:6c:bf:22:a5:2c:9c:ab:
5f:ab:82:a7:bd:fa:79:e7:4d:30:c1:13:6d:50:31:
94:6f:7f:84:89:96:f2:85:23:9b:ac:cb:e4:4c:3b:
ed:48:8d:d8:8e:e2:56:12:e8:a3:a6:14:93:5a:1a:
b6:69:be:fd:ae:bd:e8:81:a8:b8:ae:f6:9a:06:72:
34:23:af:51:a4:ef:83:55:1c:05:39:2b:16:c3:6d:
ed:7c:38:c8:73:5e:8b:00:fd:2c:b5:81:9d:83:4a:
bd:1d:b6:4b:f3:18:96:26:a8:82:9b:a5:1d:3c:f5:
91:33:65:fd:e8:e8:1b:7a:97:d8:e3:ac:a9:1b:c8:
9e:a0:a5:f6:2c:3d:12:9a:8c:1f:7c:24:62:ce:82:
a2:dc:53:04:d5:57:19:fb:3b:c6:cb:b3:10:8c:82:
43:a1:01:55:30:5b:f2:8b:84:73:87:5b:00:ce:4c:
a0:96:fe:e9:b0:c0:68:bf:af:b0:38:52:d2:db:cf:
c4:a5:2d:45:4f:18:3a:7e:4a:8a:05:9d:48:e0:93:
08:a7:e5:d9:ac:5a:6f:af:f5:5a:32:a0:ee:8d:6d:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:3B:CD:D6:48:4C:1D:78:98:9E:C0:C2:DF:43:8B:A4:FE:B6:4C
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:37:35:8d:20:80:b6:31:08:1f:09:a6:d0:e4:84:d9:80:
96:d7:e8:3f:0c:a2:7c:ed:00:e2:1a:27:58:7f:65:47:80:5c:
51:22:88:dc:c5:46:f3:bf:97:0c:69:e4:ea:da:0c:77:54:09:
25:7e:5d:b0:25:e9:ef:de:23:b5:c5:d3:9f:ca:8b:08:53:ef:
f9:9e:cc:db:ad:69:8e:3d:dd:1e:58:ba:e6:a8:c7:52:0a:c3:
ed:6b:e2:8e:c3:57:17:79:49:e6:e6:e0:4e:36:0e:b7:aa:7d:
3d:a4:a0:11:e7:df:f2:92:8a:57:40:89:4d:d6:ee:6b:8e:e6:
6a:cf:f0:f1:1a:9c:10:27:5f:66:4c:22:56:1d:1b:78:55:59:
68:e9:d0:a0:16:11:15:1a:c0:be:12:e8:22:e8:9a:5e:8e:26:
98:b8:f8:f2:13:e6:bc:8b:84:7f:99:d4:da:6b:36:ca:b7:1a:
2a:a8:04:f2:33:0d:c7:a5:93:14:d9:ee:89:ef:cf:71:60:f0:
41:0d:eb:1d:ea:0c:d5:c1:8a:b3:30:49:c4:b8:25:de:19:8f:
e0:c4:56:fd:d9:e1:0b:48:c7:d1:04:3f:13:c9:17:3f:26:72:
2a:55:80:94:93:5c:dd:b8:46:fa:3f:b3:29:34:a0:66:7a:4d:
da:c5:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:04:35 2025 by rpki-client