Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: W+4uPguckCIZJ1h5B72071k2NfUkcMRMWTfMPn9Ux8k=
Subject key identifier: 65:97:2F:62:0E:8F:29:D1:C1:34:8E:C1:01:D4:97:98:5C:58:36:58
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019A0147B882C8F1B367F1EC07D4A41A61AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 11:01:08 +0000
Manifest this update: Mon 20 Oct 2025 11:01:08 +0000
Manifest next update: Tue 21 Oct 2025 11:01:08 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: u/O1QnBP9iLYzGOm5BJHjpdVSAmgPqOC/cLqv071JF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:b8:82:c8:f1:b3:67:f1:ec:07:d4:a4:1a:61:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Oct 20 11:01:08 2025 GMT
Not After : Oct 21 11:01:08 2025 GMT
Subject: CN=65972f620e8f29d1c1348ec101d497985c583658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:ea:73:dd:81:cf:3a:45:dd:77:ec:6d:31:
71:ee:04:80:4b:b7:ae:7a:d7:56:8b:85:32:67:1b:
25:f7:87:86:7d:29:2a:35:4f:35:ec:9c:5e:fe:61:
6c:68:dd:92:cb:c8:92:26:c0:30:2a:5d:86:60:87:
18:5c:29:bd:f6:fd:5c:f2:71:a6:e2:a6:d3:fd:2b:
54:5f:fe:13:98:9f:c5:8f:93:14:ad:99:92:43:84:
34:7f:5c:bf:08:92:3d:fe:6c:8f:76:f5:09:ca:5c:
63:1f:e2:e0:c9:25:e5:7c:e0:8e:b5:65:7f:a6:93:
8b:67:92:e4:de:bb:a8:99:8b:24:26:bb:ab:b5:f7:
e9:ae:72:e6:a4:b8:48:67:6f:ed:a2:59:da:40:08:
97:94:85:14:ce:81:23:09:52:ec:be:38:8b:24:6c:
92:a5:52:bd:83:8c:ae:1d:1e:32:d1:6d:bb:ed:41:
ef:26:92:2f:8e:56:50:19:ca:30:ee:2f:fb:99:b5:
5b:35:72:3a:4b:9e:f4:c1:7c:01:bf:e1:d8:29:df:
41:c8:5c:51:d5:85:79:99:93:0a:ef:b0:9b:1d:ea:
59:a1:85:2e:1c:a5:67:75:27:7c:1b:6f:93:45:8a:
d5:38:20:79:76:18:ba:6d:a9:23:27:d4:0c:4a:36:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:2F:62:0E:8F:29:D1:C1:34:8E:C1:01:D4:97:98:5C:58:36:58
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:10:25:ac:88:99:22:42:9c:2e:ad:2c:9d:2e:48:51:2d:
a2:8e:0e:df:00:22:33:ea:4a:a2:5d:de:90:41:4f:16:8b:38:
8c:42:a6:82:6e:89:78:87:07:15:ac:ae:2e:ba:7b:bc:65:c2:
27:6a:74:d1:14:a4:ef:a6:1c:03:98:e7:e3:48:5f:48:3d:c8:
e8:8f:57:11:4a:5b:53:e8:2d:6b:93:14:81:4a:e4:1f:8b:df:
39:11:b9:dd:72:42:7f:47:48:c1:8d:4e:fb:29:ed:68:da:b8:
c3:c4:7e:f2:e6:c6:7f:f5:33:72:8b:ca:da:27:f9:f4:04:f6:
64:a9:a1:45:bd:de:be:7e:76:4e:4d:b7:95:2d:3d:bd:cc:f7:
69:14:94:b9:3c:19:a1:8b:a9:ca:b7:fc:24:ff:9a:cd:6c:34:
29:5a:52:dd:da:4f:fe:82:28:b0:4e:99:97:ed:60:ea:cc:1c:
b7:58:c9:6c:49:d3:95:6e:a8:03:05:52:c6:b5:c5:31:55:8e:
8b:83:f1:dc:13:7e:f8:61:93:c6:3e:fb:a6:6a:86:75:b5:4d:
19:0e:dd:86:07:4a:df:0d:c8:ec:dd:4d:b3:8e:24:64:dc:cc:
1c:90:f9:ca:de:dd:58:14:c8:49:94:4b:b9:e5:4c:5f:dd:75:
a2:46:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:56:28 2025 by rpki-client