Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: N1OOHM/2AFc5v2fPzvm29LuL4dG90jayvJSRysmxUwA=
Subject key identifier: 7A:A9:CD:4B:52:FB:42:D3:06:5B:93:27:DD:33:1B:AB:D0:7F:6A:65
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 01974A0CDB901751DC96C88B482A9F11BF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: J2XPxOh4sD6lDAYDRx3/xDcWruCgIiDWjCItT6tflzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:db:90:17:51:dc:96:c8:8b:48:2a:9f:11:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=7aa9cd4b52fb42d3065b9327dd331babd07f6a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:2f:2b:54:58:f2:1d:cd:ec:61:b7:d7:c9:
6e:02:34:da:8c:03:b3:8b:84:02:a0:d6:b2:be:b3:
d7:20:e4:e5:12:11:86:0b:5b:1e:9f:f4:9a:fa:41:
94:49:14:32:da:8d:7d:76:29:aa:8e:c9:92:4d:c4:
4e:19:9b:61:d4:e7:26:6c:f9:70:3a:46:da:43:13:
5a:58:91:66:03:27:8c:2f:a1:12:8a:5b:a2:a3:5a:
e2:64:7c:7a:ca:33:fd:39:12:fe:1a:4d:19:4c:40:
fb:12:c7:95:b3:65:a6:3e:c1:24:08:89:d4:35:7b:
61:1d:ce:1d:d6:8b:94:a8:eb:4b:c1:0c:54:74:ad:
9d:ff:11:31:a4:df:10:b5:55:c0:a5:67:3a:52:c3:
ed:c4:a0:55:1b:de:ad:69:0d:f4:cd:f5:1b:55:5d:
70:f9:1e:b7:af:ae:a7:d8:55:e3:d4:d7:af:7b:ec:
e2:f8:96:0d:d0:e4:34:7e:94:28:ff:e1:96:18:70:
a8:63:99:3e:d3:6c:a8:40:11:f8:c9:10:25:90:bf:
7a:da:fc:12:81:c4:b0:08:72:3f:12:9b:d1:27:0c:
e5:23:01:8d:9a:65:0c:f0:b4:e3:99:94:06:ad:43:
59:3f:92:7e:12:53:96:68:a0:d8:90:86:8c:2c:84:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A9:CD:4B:52:FB:42:D3:06:5B:93:27:DD:33:1B:AB:D0:7F:6A:65
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:82:cf:60:64:ec:9a:ea:10:90:e8:3b:8e:29:09:32:56:9c:
6f:5d:4e:7d:65:3d:0e:a7:08:30:ec:c4:27:21:79:a5:5e:f0:
6b:05:f8:da:07:1c:50:7b:6f:a5:f2:ec:da:93:29:ea:7f:dd:
e3:2a:eb:17:61:07:89:f7:c7:7b:c3:6b:d2:6d:41:0c:0e:73:
94:33:82:c6:aa:35:73:37:63:ec:81:e0:f0:b4:b5:65:c9:6b:
3e:b9:3c:2a:ab:68:45:9a:e4:88:c6:75:a4:da:21:64:b6:71:
81:9c:32:9b:8e:17:2e:ce:d9:b4:f4:3d:00:11:5a:70:7b:87:
10:91:a0:9e:ed:c5:c1:7e:cc:cf:13:a1:9c:24:3d:3f:e5:21:
e7:88:1c:8a:f2:eb:bf:28:d9:04:f1:90:1d:24:49:3c:36:18:
b4:0f:9e:5b:a4:83:c7:8c:47:99:ac:e5:8d:75:36:99:35:98:
72:68:26:b8:3f:43:57:65:a5:68:9c:1d:2b:e6:15:b2:e0:ae:
d6:e9:a6:05:25:0d:b3:f4:e9:e1:1f:12:93:8c:a4:0f:9f:ca:
98:9d:33:67:62:cb:08:5e:00:26:c5:f9:18:4b:38:8a:0e:59:
84:d4:74:41:97:50:5e:c3:89:c2:b5:cb:60:cb:6b:95:6f:ed:
10:0a:64:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDNuQF1HclsiLSCqfEb8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3
MzMwZjIwHhcNMjUwNjA3MTEwMDQ2WhcNMjUwNjA4MTEwMDQ2WjAzMTEwLwYDVQQD
Eyg3YWE5Y2Q0YjUyZmI0MmQzMDY1YjkzMjdkZDMzMWJhYmQwN2Y2YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydIvK1RY8h3N7GG318luAjTajAOz
i4QCoNayvrPXIOTlEhGGC1sen/Sa+kGUSRQy2o19dimqjsmSTcROGZth1OcmbPlw
OkbaQxNaWJFmAyeML6ESiluio1riZHx6yjP9ORL+Gk0ZTED7EseVs2WmPsEkCInU
NXthHc4d1ouUqOtLwQxUdK2d/xExpN8QtVXApWc6UsPtxKBVG96taQ30zfUbVV1w
+R63r66n2FXj1Neve+zi+JYN0OQ0fpQo/+GWGHCoY5k+02yoQBH4yRAlkL962vwS
gcSwCHI/EpvRJwzlIwGNmmUM8LTjmZQGrUNZP5J+ElOWaKDYkIaMLISaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqpzUtS+0LTBluTJ90zG6vQf2plMB8GA1UdIwQY
MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt
NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2
LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4LPYGTs
muoQkOg7jikJMlacb11OfWU9DqcIMOzEJyF5pV7wawX42gccUHtvpfLs2pMp6n/d
4yrrF2EHiffHe8Nr0m1BDA5zlDOCxqo1czdj7IHg8LS1ZclrPrk8KqtoRZrkiMZ1
pNohZLZxgZwym44XLs7ZtPQ9ABFacHuHEJGgnu3FwX7MzxOhnCQ9P+Uh54gcivLr
vyjZBPGQHSRJPDYYtA+eW6SDx4xHmazljXU2mTWYcmgmuD9DV2WlaJwdK+YVsuCu
1ummBSUNs/Tp4R8Sk4ykD5/KmJ0zZ2LLCF4AJsX5GEs4ig5ZhNR0QZdQXsOJwrXL
YMtrlW/tEApkeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:12 2025 by rpki-client