Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: eZj4F+quLh/gOMzraZ1VlG1lfRCCfheMUehA+ju9AJ4=
Subject key identifier: BB:22:D0:A8:58:35:57:D9:3C:40:D6:7A:52:59:8E:35:19:40:1C:FA
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 019874F4D724C09878230F3777F59DC76F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0D3D
Signing time: Mon 04 Aug 2025 12:00:59 +0000
Manifest this update: Mon 04 Aug 2025 12:00:59 +0000
Manifest next update: Tue 05 Aug 2025 12:00:59 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: aZznHWAVaM9BaYxgfTeFrzv5GonFTv0rNwyYY5UNv0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:d7:24:c0:98:78:23:0f:37:77:f5:9d:c7:6f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Aug 4 12:00:59 2025 GMT
Not After : Aug 5 12:00:59 2025 GMT
Subject: CN=bb22d0a8583557d93c40d67a52598e3519401cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:fd:dc:b9:b0:f2:a3:6b:ea:f3:88:b9:b2:
e7:d2:e6:11:94:d2:8c:a5:7c:ef:d1:43:cd:07:05:
fe:c1:09:71:58:8f:87:43:4e:81:29:42:a8:78:13:
d0:e7:06:5e:90:0a:d1:65:2c:0e:fe:ad:b8:e2:fc:
36:06:f8:3c:b2:07:2f:06:f0:ce:8e:2a:68:79:ed:
95:c7:4f:7b:91:62:2b:dc:cd:a4:61:3c:ba:ad:5f:
8a:21:e8:d0:e5:dc:e7:42:47:74:5a:8b:de:f1:24:
32:2a:2b:42:03:cb:17:52:39:c2:1a:3d:51:cd:b3:
27:d3:26:80:db:be:7a:cc:49:df:9c:ee:90:96:9b:
fc:ec:8f:01:a8:52:e7:49:25:45:f3:53:3b:04:4a:
04:ca:62:f8:2d:17:8b:af:b7:63:2d:d6:45:35:09:
6b:62:80:84:43:29:ae:36:11:4b:56:58:ad:72:ed:
43:be:ee:1f:44:f1:1c:d3:80:a3:92:fe:be:a9:f3:
c3:77:29:1b:bf:15:d7:c5:59:b2:e7:e2:3c:19:a7:
ff:95:26:68:63:9a:7c:28:58:18:ab:ba:69:9d:cb:
d1:65:e3:a6:21:ed:57:8c:d6:0a:a2:fa:a4:cf:c5:
30:b3:3b:ce:7c:f6:2b:1d:e9:90:6d:92:58:ce:37:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:D0:A8:58:35:57:D9:3C:40:D6:7A:52:59:8E:35:19:40:1C:FA
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:27:ad:92:e8:7d:62:93:66:ed:f0:2a:74:c9:d1:42:94:
e9:60:03:02:a4:fd:37:ab:d9:4f:6a:7f:c8:da:0d:9e:77:bb:
de:3a:7c:8d:1c:0a:e7:7e:e2:c1:a3:f1:80:84:c0:ef:62:6b:
93:6f:90:78:de:ca:56:b3:72:d0:80:48:2f:39:55:07:94:85:
3c:69:9d:ae:5f:45:32:9d:be:5a:d8:56:04:3c:07:2a:d1:d2:
16:5b:a7:18:01:50:ca:43:ec:a1:fa:f7:3a:65:61:01:7a:3b:
55:f9:87:46:61:7e:7f:71:dc:0e:c3:ed:ba:04:e6:44:e7:78:
f0:8a:f1:37:f3:85:cd:fb:c8:f5:7b:e2:b2:3a:c9:10:93:fa:
57:0d:fe:6e:38:c3:fe:2d:f3:44:2c:d2:2a:78:c0:c8:5a:20:
72:34:f8:7e:01:aa:aa:c6:89:ab:d8:49:59:7c:d5:61:a6:4b:
d2:44:a8:74:7f:4b:2e:2a:6c:7d:e7:08:52:4b:72:ef:44:a6:
53:04:d7:44:3a:c9:0b:f7:bd:5c:7e:17:59:32:2f:d6:4c:06:
5e:4a:a5:12:b4:df:79:2a:ef:69:8c:d1:0c:39:b7:f5:99:5d:
ba:b6:b6:fa:2c:04:fd:e9:b1:c0:f1:87:68:7e:fa:37:de:26:
f2:8b:eb:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09NckwJh4Iw83d/Wdx29WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDg1ZTI5ZjExOGMwMWJlODZjMTllNjY4ZmFjZmE0ODVk
ZTcxOGMwHhcNMjUwODA0MTIwMDU5WhcNMjUwODA1MTIwMDU5WjAzMTEwLwYDVQQD
EyhiYjIyZDBhODU4MzU1N2Q5M2M0MGQ2N2E1MjU5OGUzNTE5NDAxY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLX93Lmw8qNr6vOIubLn0uYRlNKM
pXzv0UPNBwX+wQlxWI+HQ06BKUKoeBPQ5wZekArRZSwO/q244vw2Bvg8sgcvBvDO
jipoee2Vx097kWIr3M2kYTy6rV+KIejQ5dznQkd0Wove8SQyKitCA8sXUjnCGj1R
zbMn0yaA2756zEnfnO6Qlpv87I8BqFLnSSVF81M7BEoEymL4LReLr7djLdZFNQlr
YoCEQymuNhFLVlitcu1Dvu4fRPEc04Cjkv6+qfPDdykbvxXXxVmy5+I8Gaf/lSZo
Y5p8KFgYq7ppncvRZeOmIe1XjNYKovqkz8UwszvOfPYrHemQbZJYzjcMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsi0KhYNVfZPEDWelJZjjUZQBz6MB8GA1UdIwQY
MBaAFMdIXinxGMAb6GwZ5mj6z6SF3nGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQt
NTdmOWJjNmE1YzMwLzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQtNTdmOWJjNmE1YzMw
LzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP8nrZLo
fWKTZu3wKnTJ0UKU6WADAqT9N6vZT2p/yNoNnne73jp8jRwK537iwaPxgITA72Jr
k2+QeN7KVrNy0IBILzlVB5SFPGmdrl9FMp2+WthWBDwHKtHSFlunGAFQykPsofr3
OmVhAXo7VfmHRmF+f3HcDsPtugTmROd48IrxN/OFzfvI9XvisjrJEJP6Vw3+bjjD
/i3zRCzSKnjAyFogcjT4fgGqqsaJq9hJWXzVYaZL0kSodH9LLipsfecIUkty70Sm
UwTXRDrJC/e9XH4XWTIv1kwGXkqlErTfeSrvaYzRDDm39Zldura2+iwE/emxwPGH
aH76N94m8ovrvA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:08 2025 by rpki-client