Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: gVQ+ptbNUSbG+MKIJQVYC30FnjsGvKY0h/ViIwppJ3w=
Subject key identifier: CD:37:D8:14:3A:2B:4B:90:40:61:22:BD:94:6F:CB:72:1A:B6:EA:B1
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019848F79245AEAE12CFC601C8B171FC4F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:40 +0000
Manifest this update: Sat 26 Jul 2025 23:00:40 +0000
Manifest next update: Sun 27 Jul 2025 23:00:40 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: 4yrwvhtbTNEeFBU7ZWjyjvNeDUw37VWULzCfxi2KB6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:92:45:ae:ae:12:cf:c6:01:c8:b1:71:fc:4f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Jul 26 23:00:40 2025 GMT
Not After : Jul 27 23:00:40 2025 GMT
Subject: CN=cd37d8143a2b4b90406122bd946fcb721ab6eab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:82:d8:cb:8b:13:6f:b0:34:62:c5:f7:2e:
d4:2b:a3:f4:0d:48:1e:17:6c:8f:71:ad:a8:81:bb:
52:1b:93:fa:c5:f3:32:42:a8:8b:47:ee:18:51:74:
5b:21:59:de:b6:6c:ba:ea:1c:a4:28:57:ca:55:ea:
5c:c1:ee:29:38:00:87:a5:86:e1:e9:84:0f:ab:f8:
7a:0c:80:08:2a:44:8e:42:27:73:9f:33:70:83:c6:
dc:94:2a:75:14:1d:86:61:0e:7e:17:01:65:d6:ef:
2b:89:61:54:e0:fd:6d:84:43:cf:62:bd:32:7a:74:
a7:3e:3c:1a:d7:b7:a0:7b:68:d9:44:e9:c9:3e:fc:
04:c3:ca:db:a5:d0:50:2f:17:3d:8f:23:bf:36:8c:
26:8d:a8:b9:ee:e8:0d:e7:21:47:ba:0b:00:a8:1d:
b7:07:83:60:aa:a2:06:83:d7:9c:1b:aa:04:cd:e6:
4e:2d:35:d6:36:0a:6e:35:e1:21:31:19:3b:0e:47:
35:a9:42:46:08:fe:b0:57:c8:ee:7e:75:4b:6b:85:
8e:5a:5e:40:22:2f:80:e9:88:89:28:d6:8f:c4:ae:
0a:7f:02:37:5f:88:1b:2d:17:2e:9a:8a:89:e3:72:
d6:a5:47:01:11:9c:40:20:d6:0f:36:81:ba:6e:34:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:D8:14:3A:2B:4B:90:40:61:22:BD:94:6F:CB:72:1A:B6:EA:B1
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:36:8c:be:7b:f1:3c:1c:a2:a0:00:0c:99:26:2c:6e:ac:87:
2f:0d:10:79:5d:5a:55:23:b2:66:5e:42:07:f2:e2:22:99:63:
2d:be:0e:35:9c:4b:1d:bb:40:33:ca:11:46:a1:eb:8f:1c:bc:
28:d7:20:2a:f4:97:c3:a4:33:72:e1:e6:bf:8e:9a:a1:27:73:
f2:57:a6:c9:3b:1f:00:fb:e1:88:10:76:09:35:71:82:61:5d:
58:0b:6d:0c:a4:86:7f:c2:0b:9c:df:9c:71:16:55:b9:f0:a0:
54:69:a6:9a:93:d6:06:c5:94:97:93:e6:71:f8:28:c4:e0:70:
cc:62:09:5e:ac:a6:4f:b3:b0:a6:70:27:81:77:31:2e:29:97:
9b:dc:a2:ee:77:96:4c:9d:6c:a1:57:cb:f4:65:0c:62:9c:1b:
66:87:6f:d3:09:04:fc:5d:0a:ed:69:6e:95:1a:07:29:44:7e:
77:7a:72:00:6a:29:9f:ec:a9:c5:b1:c3:ca:c6:c9:57:d7:13:
ab:c9:06:e9:71:dd:61:00:3c:aa:5d:e0:5d:4d:81:0f:cb:75:
51:40:f4:07:04:65:e4:bd:c2:e4:1b:4a:8e:27:91:06:dd:da:
8f:8b:7a:98:44:c3:85:9d:92:b7:1d:e2:1a:fc:e9:ed:2e:35:
86:f8:1b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI95JFrq4Sz8YByLFx/E8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3
MzMwZjIwHhcNMjUwNzI2MjMwMDQwWhcNMjUwNzI3MjMwMDQwWjAzMTEwLwYDVQQD
EyhjZDM3ZDgxNDNhMmI0YjkwNDA2MTIyYmQ5NDZmY2I3MjFhYjZlYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU6C2MuLE2+wNGLF9y7UK6P0DUge
F2yPca2ogbtSG5P6xfMyQqiLR+4YUXRbIVnetmy66hykKFfKVepcwe4pOACHpYbh
6YQPq/h6DIAIKkSOQidznzNwg8bclCp1FB2GYQ5+FwFl1u8riWFU4P1thEPPYr0y
enSnPjwa17ege2jZROnJPvwEw8rbpdBQLxc9jyO/Nowmjai57ugN5yFHugsAqB23
B4NgqqIGg9ecG6oEzeZOLTXWNgpuNeEhMRk7Dkc1qUJGCP6wV8jufnVLa4WOWl5A
Ii+A6YiJKNaPxK4KfwI3X4gbLRcumoqJ43LWpUcBEZxAINYPNoG6bjTrUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM032BQ6K0uQQGEivZRvy3IatuqxMB8GA1UdIwQY
MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt
NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2
LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjaMvnvx
PByioAAMmSYsbqyHLw0QeV1aVSOyZl5CB/LiIpljLb4ONZxLHbtAM8oRRqHrjxy8
KNcgKvSXw6QzcuHmv46aoSdz8lemyTsfAPvhiBB2CTVxgmFdWAttDKSGf8ILnN+c
cRZVufCgVGmmmpPWBsWUl5PmcfgoxOBwzGIJXqymT7OwpnAngXcxLimXm9yi7neW
TJ1soVfL9GUMYpwbZodv0wkE/F0K7WlulRoHKUR+d3pyAGopn+ypxbHDysbJV9cT
q8kG6XHdYQA8ql3gXU2BD8t1UUD0BwRl5L3C5BtKjieRBt3aj4t6mETDhZ2Stx3i
Gvzp7S41hvgbnw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:15 2025 by rpki-client