Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: ubZyafZV965rLGWZj44mjeGP1/AnWoKaYp5fB3BAZI0=
Subject key identifier: 3E:7D:24:8D:60:67:1A:12:2E:1F:CD:C0:89:8C:97:AC:2A:6F:5D:51
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 01984B54AA36E2A12CD6C968787164BCDDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 0F10
Signing time: Sun 27 Jul 2025 10:01:36 +0000
Manifest this update: Sun 27 Jul 2025 10:01:36 +0000
Manifest next update: Mon 28 Jul 2025 10:01:36 +0000
Files and hashes: 1: g2pmYdtMoiuQPm1G35LS-gM4tuY.roa (hash: CWDorRb0FA7mvx2YHncFLS9iEAAHLTBxgOQlA6dQKII=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: JIvcppt6w/g6oRerK6ejVM+2OZz1ShnNk80QwcmoIIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:aa:36:e2:a1:2c:d6:c9:68:78:71:64:bc:dd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Jul 27 10:01:36 2025 GMT
Not After : Jul 28 10:01:36 2025 GMT
Subject: CN=3e7d248d60671a122e1fcdc0898c97ac2a6f5d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:5a:27:3f:01:d9:81:c4:7a:79:29:2b:9d:
37:82:8c:1b:0f:2d:fe:c6:7f:63:b1:4b:67:90:f5:
16:34:a2:24:83:f7:12:1a:b0:7e:ab:76:6d:5f:f1:
7d:8b:82:9e:4f:b2:0f:23:b2:80:57:57:c6:30:88:
2c:5c:9f:27:a4:43:30:4d:32:9f:c9:27:0d:db:f1:
7e:ea:60:ff:76:cc:f1:35:81:00:5f:5c:c8:ac:15:
af:34:9e:1f:a7:65:79:1c:dc:67:5f:d1:94:60:11:
bd:77:00:b9:7a:4e:f9:6b:82:12:a7:7d:49:e7:c2:
17:20:0e:ac:55:4e:47:0f:e5:bf:83:35:2f:83:e1:
e2:e0:93:5c:5f:dd:c9:fc:38:a1:70:9c:0b:52:19:
2e:4d:e3:12:a6:47:53:c0:91:5a:20:ce:ab:34:e9:
a9:5b:5c:e7:77:f1:4b:70:67:56:e5:06:1a:39:23:
a8:f9:1e:e4:b7:f2:e4:d0:55:e5:f6:37:ce:57:16:
8b:8b:de:56:f3:7c:25:f0:46:6b:22:c9:5a:cb:e6:
c1:a3:61:58:1f:fb:84:3a:07:5f:f0:b4:4d:b2:18:
35:13:1c:c8:3e:e3:06:1a:70:c9:59:99:61:a8:ab:
ba:42:2b:9e:1d:52:08:14:87:2f:60:8b:17:ac:2f:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:24:8D:60:67:1A:12:2E:1F:CD:C0:89:8C:97:AC:2A:6F:5D:51
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7c:60:f9:4c:35:69:45:b9:a6:ab:c4:5d:5e:54:7c:e7:fe:
39:d5:1b:ea:80:cc:97:18:c1:7c:e2:e7:29:21:6d:0b:cb:63:
34:fa:46:ea:9d:8e:fb:38:cc:4a:70:3f:c0:cf:bc:c1:7f:7d:
c4:1b:73:fe:cf:bf:4c:07:9f:8b:69:fe:ce:4e:d6:7c:82:4f:
b2:97:f2:51:4e:32:e4:12:20:a2:65:cb:9f:5c:4d:8d:1a:1b:
d1:7a:b8:bf:d8:4c:6b:ef:e5:54:4f:c8:37:aa:96:65:12:dc:
b6:5d:76:c2:98:70:b6:a3:69:e8:db:ef:07:9a:bb:7f:c4:a1:
b9:ef:2e:9e:81:5c:0d:62:87:8d:1f:3d:29:93:10:b7:79:7b:
f6:cb:75:a2:db:73:b5:15:22:e0:f3:fd:2f:d6:82:44:a4:29:
50:3a:5a:92:2f:31:16:c1:49:d8:4a:0c:37:ec:2a:74:92:44:
9f:ab:7a:64:4d:d5:3c:ae:90:32:b6:c8:95:ef:41:ac:3d:a1:
ff:65:6f:b8:f6:b7:e8:00:41:dd:21:12:e6:ed:5e:8b:41:18:
41:b2:83:cd:df:a1:0e:c8:2c:a5:0c:c1:84:57:f2:57:1f:96:
18:58:41:0e:38:02:35:38:ab:86:20:0a:34:91:7a:d8:4d:36:
64:58:7c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVKo24qEs1sloeHFkvN3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTE1NjdiMTY4MTgzM2M5NDRhNWYyNjQwYTllMDNiZThl
ZjBiZjQwHhcNMjUwNzI3MTAwMTM2WhcNMjUwNzI4MTAwMTM2WjAzMTEwLwYDVQQD
EygzZTdkMjQ4ZDYwNjcxYTEyMmUxZmNkYzA4OThjOTdhYzJhNmY1ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtulaJz8B2YHEenkpK503gowbDy3+
xn9jsUtnkPUWNKIkg/cSGrB+q3ZtX/F9i4KeT7IPI7KAV1fGMIgsXJ8npEMwTTKf
yScN2/F+6mD/dszxNYEAX1zIrBWvNJ4fp2V5HNxnX9GUYBG9dwC5ek75a4ISp31J
58IXIA6sVU5HD+W/gzUvg+Hi4JNcX93J/DihcJwLUhkuTeMSpkdTwJFaIM6rNOmp
W1znd/FLcGdW5QYaOSOo+R7kt/Lk0FXl9jfOVxaLi95W83wl8EZrIslay+bBo2FY
H/uEOgdf8LRNshg1ExzIPuMGGnDJWZlhqKu6QiueHVIIFIcvYIsXrC8oFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD59JI1gZxoSLh/NwImMl6wqb11RMB8GA1UdIwQY
MBaAFIXhVnsWgYM8lEpfJkCp4Dvo7wv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kZjQ5NDUtZjUzMi00YTAxLWE3ZmEt
NTNhOTk4ZGU2M2UzLzEvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kZjQ5NDUtZjUzMi00YTAxLWE3ZmEtNTNhOTk4ZGU2M2Uz
LzEvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3xg+Uw1
aUW5pqvEXV5UfOf+OdUb6oDMlxjBfOLnKSFtC8tjNPpG6p2O+zjMSnA/wM+8wX99
xBtz/s+/TAefi2n+zk7WfIJPspfyUU4y5BIgomXLn1xNjRob0Xq4v9hMa+/lVE/I
N6qWZRLctl12wphwtqNp6NvvB5q7f8Shue8unoFcDWKHjR89KZMQt3l79st1ottz
tRUi4PP9L9aCRKQpUDpaki8xFsFJ2EoMN+wqdJJEn6t6ZE3VPK6QMrbIle9BrD2h
/2VvuPa36ABB3SES5u1ei0EYQbKDzd+hDsgspQzBhFfyVx+WGFhBDjgCNTirhiAK
NJF62E02ZFh8uw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:42:30 2025 by rpki-client