Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: qxEX8QnNrbZX6FbHmWniA6uzYZP2AEJGQg8Khm8oW84=
Subject key identifier: 5A:BF:15:57:D1:41:2D:84:CB:4D:20:DB:A7:7E:7C:EC:51:68:1C:ED
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 01984A7816B45394B91864ECCF5AD4138E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0D27
Signing time: Sun 27 Jul 2025 06:00:40 +0000
Manifest this update: Sun 27 Jul 2025 06:00:40 +0000
Manifest next update: Mon 28 Jul 2025 06:00:40 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: cN8/fGDVqJiQMpSEDdLrs4jF1lri0VPj6WkPpawDZHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:16:b4:53:94:b9:18:64:ec:cf:5a:d4:13:8e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Jul 27 06:00:40 2025 GMT
Not After : Jul 28 06:00:40 2025 GMT
Subject: CN=5abf1557d1412d84cb4d20dba77e7cec51681ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:75:59:d2:d6:75:ae:c0:4c:74:a5:44:41:
73:88:21:b3:c9:24:ed:74:c8:13:74:80:7b:50:13:
e8:4c:59:ff:02:43:d6:fa:df:11:7a:84:e2:bf:d0:
84:28:90:a2:da:7b:e6:02:d1:45:e7:bd:d3:33:3f:
cc:2c:76:23:b5:a8:b5:99:ed:30:58:60:0a:5a:e1:
8d:78:77:c1:50:8d:16:31:0a:b5:e9:f5:bd:ba:fb:
95:e7:8b:14:ab:bc:cd:44:cf:a0:ed:66:ce:32:41:
d9:3b:94:1f:76:95:ea:f6:b9:5d:b7:be:e3:c4:db:
44:32:e7:ef:2a:f8:32:d1:09:ec:18:4f:63:16:61:
04:9b:63:9e:ba:d5:b4:9a:21:83:8b:e0:6c:d9:71:
4f:5e:e0:af:d0:f3:87:1e:d8:3f:0f:48:f5:ef:18:
f9:7b:cb:9b:ab:a3:88:2f:64:b9:0c:37:cb:c8:be:
f8:40:9f:49:91:7e:66:99:62:d9:51:34:5c:fa:1a:
c7:5b:00:7d:ad:b9:7f:88:7f:e3:c9:8f:cf:7c:96:
da:70:da:37:d7:f3:97:28:b3:dc:09:3e:5c:31:56:
8c:88:fc:50:e8:f4:1a:ce:15:77:6f:b5:98:62:e0:
4b:37:b2:a1:49:06:b5:6f:c7:34:e1:1e:1e:5d:6b:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:15:57:D1:41:2D:84:CB:4D:20:DB:A7:7E:7C:EC:51:68:1C:ED
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:be:9d:99:59:7f:e9:22:c8:3b:4e:03:17:d9:3c:26:17:b7:
da:ea:f4:e9:49:44:e9:02:90:9e:87:6f:b4:d9:b8:59:d1:3a:
36:8c:a4:6b:fd:fd:4e:3b:9a:a7:80:e3:0c:1c:c3:5e:c0:7b:
fa:c7:41:00:82:fb:bb:c7:65:89:d3:dc:67:18:5a:a8:c6:b8:
17:ea:51:33:cd:d0:ce:c1:1e:f8:11:ea:c4:9a:e4:b8:41:8a:
c9:4a:42:b6:85:ec:52:90:dd:ce:26:33:8d:fd:1f:59:8a:31:
df:66:a3:7a:4e:11:a6:ac:47:0a:81:d6:52:06:fb:25:b5:fd:
6d:07:d7:8f:9e:9f:c1:88:9d:78:24:8b:71:a7:a0:99:54:31:
19:83:e2:35:a6:0e:eb:56:f7:22:32:5f:9e:6a:a0:57:fe:ee:
71:cb:ea:54:33:86:8d:66:3c:b4:a5:5b:f5:dc:41:7c:91:8f:
e9:17:47:91:31:f6:95:da:25:a3:1e:61:12:61:df:b0:81:12:
06:9d:dc:d1:13:8e:0b:55:cf:3d:53:4e:e0:60:d6:1f:e5:62:
db:3e:a7:f9:10:14:e5:f7:bb:34:fd:3c:0a:ac:f7:20:74:f6:
83:cd:a0:c0:50:fb:bb:a6:91:f4:43:55:88:8e:8b:67:51:a9:
94:e4:18:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeBa0U5S5GGTsz1rUE45eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDg1ZTI5ZjExOGMwMWJlODZjMTllNjY4ZmFjZmE0ODVk
ZTcxOGMwHhcNMjUwNzI3MDYwMDQwWhcNMjUwNzI4MDYwMDQwWjAzMTEwLwYDVQQD
Eyg1YWJmMTU1N2QxNDEyZDg0Y2I0ZDIwZGJhNzdlN2NlYzUxNjgxY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAB1WdLWda7ATHSlREFziCGzySTt
dMgTdIB7UBPoTFn/AkPW+t8ReoTiv9CEKJCi2nvmAtFF573TMz/MLHYjtai1me0w
WGAKWuGNeHfBUI0WMQq16fW9uvuV54sUq7zNRM+g7WbOMkHZO5QfdpXq9rldt77j
xNtEMufvKvgy0QnsGE9jFmEEm2OeutW0miGDi+Bs2XFPXuCv0POHHtg/D0j17xj5
e8ubq6OIL2S5DDfLyL74QJ9JkX5mmWLZUTRc+hrHWwB9rbl/iH/jyY/PfJbacNo3
1/OXKLPcCT5cMVaMiPxQ6PQazhV3b7WYYuBLN7KhSQa1b8c04R4eXWu5TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFq/FVfRQS2Ey00g26d+fOxRaBztMB8GA1UdIwQY
MBaAFMdIXinxGMAb6GwZ5mj6z6SF3nGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQt
NTdmOWJjNmE1YzMwLzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQtNTdmOWJjNmE1YzMw
LzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr6dmVl/
6SLIO04DF9k8Jhe32ur06UlE6QKQnodvtNm4WdE6Noyka/39Tjuap4DjDBzDXsB7
+sdBAIL7u8dlidPcZxhaqMa4F+pRM83QzsEe+BHqxJrkuEGKyUpCtoXsUpDdziYz
jf0fWYox32ajek4RpqxHCoHWUgb7JbX9bQfXj56fwYideCSLcaegmVQxGYPiNaYO
61b3IjJfnmqgV/7uccvqVDOGjWY8tKVb9dxBfJGP6RdHkTH2ldolox5hEmHfsIES
Bp3c0ROOC1XPPVNO4GDWH+Vi2z6n+RAU5fe7NP08Cqz3IHT2g82gwFD7u6aR9ENV
iI6LZ1GplOQYNg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:11:18 2025 by rpki-client