Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier: LoGdOVYTtXaa5xqse6GQ34uCNY0HPxbwaNCo0Szr37k=
Subject key identifier: 21:7D:3A:25:44:F2:A9:BA:C1:F7:1A:74:26:FF:7F:8A:77:95:95:40
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial: 0197B6D7512B92752EBDFBB2C7EA4BBF386A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number: 053D
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=)
2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: GgwCn7lc7epax6qSExz/jZOhxo06eQ+PNaexCbBPQFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:51:2b:92:75:2e:bd:fb:b2:c7:ea:4b:bf:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=217d3a2544f2a9bac1f71a7426ff7f8a77959540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:d2:43:5e:f7:18:4d:d5:0c:e9:f2:9c:bf:
81:ba:8f:f7:78:d1:4c:34:4f:46:23:70:b4:df:56:
b9:c2:1b:4d:b6:46:33:9e:bb:14:ef:d1:c0:0c:4f:
7a:5d:83:7f:26:47:d0:69:b0:46:d3:88:73:73:c0:
15:08:97:d5:dd:70:f9:61:5c:3d:cf:2a:81:81:71:
e0:b6:97:e6:ce:18:f6:76:a4:1b:09:57:74:ab:02:
0a:01:6b:fa:15:a2:23:2c:74:2e:a7:86:6c:08:fb:
d5:51:ed:ce:31:3c:cc:51:de:76:94:03:56:42:48:
de:d5:e5:80:9f:45:b5:e5:ad:b6:29:c0:19:e7:61:
3a:4a:ec:f0:31:0b:5e:b8:fc:09:80:6a:f7:fb:f3:
d8:b3:ec:f6:9f:4a:bc:01:40:f1:62:01:21:7b:0b:
f4:c3:22:e9:1b:a6:c0:1c:9f:28:bf:63:cc:35:70:
15:b9:21:b5:c9:4d:f3:27:5e:5e:b3:cb:8c:4c:55:
7b:b4:b7:92:92:1a:42:9f:73:6f:b7:67:4b:3b:a4:
d0:0b:6d:0f:25:23:95:ca:94:89:b0:e4:e7:9a:04:
cd:7d:a2:84:00:ee:70:23:97:6e:cb:17:bb:2d:24:
22:96:08:62:de:5c:93:64:3d:66:70:00:66:3e:b3:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:3A:25:44:F2:A9:BA:C1:F7:1A:74:26:FF:7F:8A:77:95:95:40
X509v3 Authority Key Identifier:
keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e1:45:3f:2a:ef:79:4f:65:01:5d:4a:f9:87:ab:6b:54:63:
af:16:4c:e1:18:f7:25:bc:e3:4a:71:9c:8b:3c:63:95:4e:72:
da:2e:28:51:4a:c7:c5:78:d8:7d:d0:df:e0:0d:f8:be:56:58:
8f:63:8c:33:60:e8:05:25:73:e6:3d:57:84:2a:d8:0b:d6:c5:
8b:c3:85:11:ab:a6:10:1d:d6:19:e7:d7:d4:a1:ef:d4:12:23:
66:82:03:89:33:39:d3:ea:af:5e:82:b4:f6:77:8b:1d:af:13:
31:a7:4f:86:eb:fe:f3:92:ee:21:be:f5:09:89:8c:74:58:c1:
25:9e:72:f6:81:f6:7c:59:e8:d3:3e:10:72:2f:48:68:a3:5a:
48:e9:b9:13:2b:cd:06:74:67:04:5e:63:4b:16:15:be:b8:04:
61:5d:58:92:30:10:66:e9:81:b8:d8:3a:06:16:ef:19:10:ac:
de:b0:0e:35:f3:ea:0a:e6:f8:c3:40:c5:20:b6:a6:b4:4f:3d:
24:8d:55:93:da:3e:d3:1c:fb:1e:2b:21:b1:dd:c7:85:8c:2e:
e8:f1:c7:94:f7:b7:7e:ca:7a:0f:a2:00:bd:7f:ef:34:a8:4b:
84:b3:cb:98:23:0b:28:cc:3f:82:b6:1a:a3:a6:94:f3:1a:07:
8b:99:a8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211ErknUuvfuyx+pLvzhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3
YzNlM2QwHhcNMjUwNjI4MTQwMDUzWhcNMjUwNjI5MTQwMDUzWjAzMTEwLwYDVQQD
EygyMTdkM2EyNTQ0ZjJhOWJhYzFmNzFhNzQyNmZmN2Y4YTc3OTU5NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHzSQ173GE3VDOnynL+Buo/3eNFM
NE9GI3C031a5whtNtkYznrsU79HADE96XYN/JkfQabBG04hzc8AVCJfV3XD5YVw9
zyqBgXHgtpfmzhj2dqQbCVd0qwIKAWv6FaIjLHQup4ZsCPvVUe3OMTzMUd52lANW
Qkje1eWAn0W15a22KcAZ52E6SuzwMQteuPwJgGr3+/PYs+z2n0q8AUDxYgEhewv0
wyLpG6bAHJ8ov2PMNXAVuSG1yU3zJ15es8uMTFV7tLeSkhpCn3Nvt2dLO6TQC20P
JSOVypSJsOTnmgTNfaKEAO5wI5duyxe7LSQilghi3lyTZD1mcABmPrPELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF9OiVE8qm6wfcadCb/f4p3lZVAMB8GA1UdIwQY
MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt
MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw
LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuFFPyrv
eU9lAV1K+Yera1RjrxZM4Rj3JbzjSnGcizxjlU5y2i4oUUrHxXjYfdDf4A34vlZY
j2OMM2DoBSVz5j1XhCrYC9bFi8OFEaumEB3WGefX1KHv1BIjZoIDiTM50+qvXoK0
9neLHa8TMadPhuv+85LuIb71CYmMdFjBJZ5y9oH2fFno0z4Qci9IaKNaSOm5EyvN
BnRnBF5jSxYVvrgEYV1YkjAQZumBuNg6BhbvGRCs3rAONfPqCub4w0DFILamtE89
JI1Vk9o+0xz7Hishsd3HhYwu6PHHlPe3fsp6D6IAvX/vNKhLhLPLmCMLKMw/grYa
o6aU8xoHi5moQg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:26 2025 by rpki-client