Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: N2PtmmpmkQVKzXz5viTT78rKbUxhpysDYAF38zpxdbs=
Subject key identifier: 1F:44:6A:A5:B7:BF:67:48:B5:17:C2:18:28:6E:B3:C7:E5:D7:D7:1E
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 0198D5F1D6E7CDB2A1100DB87986DD219A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: ITzwMIo1aym/9Ia50+MDpR31KxJgxjBsFCedK6El5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d6:e7:cd:b2:a1:10:0d:b8:79:86:dd:21:9a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=1f446aa5b7bf6748b517c218286eb3c7e5d7d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:60:92:b1:24:7f:9a:78:f5:56:32:3b:61:
6f:8e:6d:2a:49:5e:c1:1b:e7:a5:e8:79:54:45:54:
ac:80:12:e0:df:89:c9:1a:4e:64:ab:76:1c:e8:8f:
07:08:07:27:e5:41:46:33:83:29:46:68:10:c9:9c:
a2:a8:7f:a6:2e:8e:c3:0f:7b:a7:48:98:38:44:a1:
ca:44:5f:f1:a5:5f:65:24:e1:d8:ef:0b:45:59:d1:
09:1f:32:6f:01:f1:63:8a:bf:58:fc:16:c4:3d:4e:
90:8a:98:2f:b4:3f:67:f8:eb:9f:f4:d7:bc:0f:bd:
ea:45:4c:92:28:c9:72:81:23:8a:43:8e:cc:ac:7e:
4d:84:ac:8c:84:ae:5c:eb:a6:88:e1:6e:0f:50:2b:
c5:60:ea:a5:4c:dc:99:86:fd:7c:32:92:e9:f4:21:
f8:f2:b2:2e:b8:68:49:b0:7d:a0:a3:4a:b8:82:c3:
a3:31:1e:56:c7:55:ab:f9:42:f9:c4:b9:f8:9c:e3:
5b:9d:ff:ac:f1:3a:20:cc:f8:e5:ca:b7:b4:19:16:
a3:d2:f5:12:f6:2d:a6:3e:bb:6a:f2:bb:a5:64:b2:
8a:e9:cd:5c:d4:79:9e:51:dd:6d:91:3f:e5:ca:cc:
8a:7f:6b:12:e8:b6:95:59:fe:bf:63:a1:1b:89:a7:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:6A:A5:B7:BF:67:48:B5:17:C2:18:28:6E:B3:C7:E5:D7:D7:1E
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:fc:57:0d:36:2b:3d:e0:7c:38:43:ea:cc:a4:32:32:8b:
aa:89:2e:d0:82:c8:6e:55:01:1c:4a:53:70:f6:4c:1a:40:f9:
ae:9a:90:c8:97:f5:e9:87:00:ea:7d:f8:51:68:93:41:26:2f:
f9:91:32:53:9e:63:0b:49:fe:d4:cd:4c:e8:fd:db:0d:97:9b:
49:aa:8d:d4:f9:0c:f8:06:44:f0:1a:d3:f2:df:31:52:7c:93:
b8:56:09:cc:d2:f3:d5:54:3f:eb:da:4e:89:70:16:30:31:d1:
63:78:65:cc:9a:2d:b9:44:c3:b7:6f:78:dc:6e:4a:b1:b8:80:
16:be:91:b4:d5:8f:25:80:63:0f:9e:9f:6b:92:72:26:b9:82:
6f:d5:cc:e8:41:da:b2:c1:e2:bc:06:b3:a7:63:70:86:46:2c:
28:00:62:92:88:a0:3f:44:ca:eb:96:37:f0:5c:12:70:9c:90:
b3:13:d9:82:87:e1:cf:cf:59:8c:df:ba:fb:82:ae:a4:7f:cb:
c6:f3:98:2b:be:14:98:18:f8:cd:19:db:45:c6:a6:18:e9:f0:
3c:b8:8b:bb:2a:5f:16:0e:f5:bd:0e:30:d2:68:8a:42:1d:ec:
72:d9:78:3b:13:ae:87:be:17:09:03:a1:53:ea:b9:4b:44:72:
5e:8f:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:05 2025 by rpki-client