Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: VyTaKCkumNiPKkjjG3fCaxvpwM6fsLXtnpFK4JPZS0s=
Subject key identifier: 4C:9A:58:70:68:65:B0:D1:95:73:0E:19:75:F0:EE:28:8C:F3:CA:DA
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 01976C61F2A4E60008C754D6A2492A6267F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 02C0
Signing time: Sat 14 Jun 2025 03:00:47 +0000
Manifest this update: Sat 14 Jun 2025 03:00:47 +0000
Manifest next update: Sun 15 Jun 2025 03:00:47 +0000
Files and hashes: 1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: MHS9AKf5CvFlIzcXF9yPHahN5QvdYsidB/SDKTzzq4k=)
2: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (hash: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f2:a4:e6:00:08:c7:54:d6:a2:49:2a:62:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Jun 14 03:00:47 2025 GMT
Not After : Jun 15 03:00:47 2025 GMT
Subject: CN=4c9a58706865b0d195730e1975f0ee288cf3cada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:c8:6a:11:e8:a6:6d:39:11:66:e8:16:d8:
6b:8b:a9:d5:19:c2:e1:2b:d6:6c:2b:b1:39:15:26:
ad:c9:29:0e:7b:8b:db:2e:58:ac:94:d2:39:4a:4e:
4a:94:f5:d3:65:33:72:73:9d:97:33:09:d7:f3:dd:
b5:ac:56:4d:06:69:ff:e7:7c:a6:e9:bc:9a:d9:57:
77:d4:78:6a:4d:7b:27:b7:dd:0d:ff:c2:c3:13:5f:
06:ae:25:f9:dd:2e:14:69:3a:13:d9:7a:ff:c1:01:
9c:f0:65:7e:9a:7c:1b:e3:17:7f:d6:ab:fd:44:89:
9a:e5:86:ec:63:00:c2:b0:66:bd:d6:33:05:17:07:
d4:fa:ca:26:b2:c2:e1:f5:a5:93:97:c6:95:28:2f:
e5:b0:6e:17:6e:18:0c:f3:ee:35:7c:76:3f:d8:e8:
57:28:02:9f:01:8d:74:72:7f:c2:cf:49:34:57:eb:
0f:d1:d9:ba:f0:7b:46:a6:d9:ee:83:c2:bb:72:e0:
97:23:10:4c:41:f5:16:42:a4:6a:31:c6:a8:fa:15:
5a:c8:08:fa:3b:65:f6:d2:03:dc:c1:f9:2d:46:fe:
92:07:70:66:22:c8:08:51:c2:a5:d9:39:08:89:a4:
a3:df:96:55:09:25:6f:1e:6e:f0:ca:54:aa:2e:f4:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:58:70:68:65:B0:D1:95:73:0E:19:75:F0:EE:28:8C:F3:CA:DA
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a4:8d:ca:df:f9:cb:cb:28:48:c2:d1:40:4d:0d:59:5c:aa:
dc:7a:00:8c:c8:bf:c2:85:69:53:60:43:54:6e:e5:af:12:db:
8d:18:3b:1c:d0:05:b6:fe:74:f6:c2:35:44:6c:05:bf:bd:ab:
f5:ec:de:41:bd:25:39:51:4e:26:6e:23:b1:c2:95:e5:ee:e8:
36:77:5b:c2:3f:db:5e:33:95:de:b0:30:87:69:88:48:e2:c9:
9f:87:81:98:b0:67:c3:8f:cf:33:d5:d5:d7:d8:30:ed:6d:d2:
da:96:d6:c8:a1:8e:ed:fb:b4:26:1d:e1:f1:ed:68:37:5d:75:
bf:0b:cb:87:f9:6a:5d:c7:bc:ce:57:4d:82:83:f6:eb:10:44:
73:69:d3:62:35:b8:b8:29:ac:43:34:2f:45:2a:b6:82:ca:59:
34:47:24:ca:5b:16:ee:12:28:fa:6e:dd:07:7b:ee:a5:c4:22:
a0:9b:0b:d8:39:7c:00:af:61:32:19:8b:f9:4d:2f:43:1c:ee:
db:1a:ac:d5:a7:e1:ba:70:34:cf:44:c8:75:2a:45:4b:68:03:
24:0d:90:b7:04:18:a3:8d:bb:98:cb:ce:6e:cb:02:08:e9:cd:
6a:3c:34:08:f3:d7:07:9d:ee:2e:e8:54:83:87:28:9a:f0:51:
d8:fa:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:58 2025 by rpki-client