Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: ncr4n2eBFsavDLep62jmkmtAVc27/ujwP8ou8Ipzyuw=
Subject key identifier: A6:98:12:77:3E:FB:91:D0:07:7C:19:74:0B:FD:68:E5:F2:9B:C4:77
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 01989F713A553F59752300950A83555A9357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 035F
Signing time: Tue 12 Aug 2025 18:00:54 +0000
Manifest this update: Tue 12 Aug 2025 18:00:54 +0000
Manifest next update: Wed 13 Aug 2025 18:00:54 +0000
Files and hashes: 1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: Hrfy5zYkjOHfl7BBcwa6sCwk7RgdbpEelYx/MvqWWY4=)
2: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (hash: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:3a:55:3f:59:75:23:00:95:0a:83:55:5a:93:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Aug 12 18:00:54 2025 GMT
Not After : Aug 13 18:00:54 2025 GMT
Subject: CN=a69812773efb91d0077c19740bfd68e5f29bc477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:02:71:e6:b8:22:88:bd:18:db:23:8a:d5:
6a:46:70:4b:01:82:1f:4d:a7:82:d1:85:6f:46:f1:
50:87:10:d6:0f:df:45:46:c3:98:30:fc:e5:23:20:
d8:6e:6c:a8:3d:1d:43:4b:8a:21:4a:af:ca:c7:2e:
2a:97:bb:9b:50:a9:48:8d:1e:d6:39:19:92:62:d8:
b8:03:06:92:f3:87:d3:1e:0f:1a:24:5d:e9:77:fa:
9b:31:f6:2e:48:8c:e9:c3:f2:65:32:f3:c6:ea:27:
6f:04:6b:e5:87:ee:13:8e:c1:32:64:86:e3:c7:1c:
e4:26:57:f9:88:c7:f6:38:cf:b5:ad:19:a3:5b:8b:
f2:ba:63:82:9e:da:88:48:66:dc:33:99:5e:65:69:
20:44:f8:c4:94:a6:53:15:9f:9f:14:37:ee:e0:9a:
f2:1f:32:b6:70:d6:d6:64:e5:d0:0a:7e:a6:6c:30:
96:d0:df:fc:b5:c5:ea:7b:d6:02:63:d6:63:70:42:
aa:62:78:b6:8a:48:7b:42:dc:62:25:c4:23:e6:29:
3b:3c:c8:d8:3b:26:88:96:7b:4c:82:97:4b:c4:38:
2a:52:c3:2e:29:2a:af:76:0b:6c:25:9c:b8:7a:a5:
46:e3:34:13:72:e0:8b:73:57:8e:c5:d4:59:22:82:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:12:77:3E:FB:91:D0:07:7C:19:74:0B:FD:68:E5:F2:9B:C4:77
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b7:d8:ab:47:ae:5d:fe:88:b6:06:39:61:d4:2a:15:b9:0d:
6b:0f:70:04:1b:13:1b:0c:09:de:87:45:06:5c:ba:21:59:dd:
d7:8d:b0:37:a6:61:7a:09:1f:0d:06:7d:bd:65:7a:32:7d:3a:
63:c0:52:83:c8:31:68:70:bd:a4:1a:bc:fc:bd:cc:00:18:fe:
34:30:66:c9:85:5f:65:4f:fb:00:d4:40:a6:47:9d:5d:93:c3:
a0:b4:99:69:c0:75:f6:9e:65:88:fe:f0:f4:c9:06:72:21:e9:
cc:37:97:7e:cd:3f:aa:25:8f:08:72:67:1c:e9:c7:16:55:63:
b5:37:06:d5:f6:6d:c0:7f:42:ae:9c:32:57:88:d6:b5:81:e6:
60:3f:8b:7d:86:0a:00:34:4a:df:e7:b9:11:56:5d:4d:2f:84:
6e:51:fe:e7:30:5e:c0:58:db:39:89:bb:ae:71:4f:9a:13:a2:
51:80:f4:bc:02:ff:af:8e:5e:76:e5:0f:35:da:9b:07:fd:89:
d1:d9:37:aa:bb:02:67:56:30:a5:ec:97:c9:68:15:21:f4:79:
73:92:ca:8b:7f:ad:0b:9d:5a:0e:57:35:c2:6b:46:d2:f6:75:
5a:bd:f6:2e:9f:ed:29:5a:91:0a:5b:5e:25:d2:ba:cd:0f:74:
af:da:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:43 2025 by rpki-client