Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: znKQmq9cnAliY5eHcbWwmiAOn5fiqKwxRFGDTeWdFrw=
Subject key identifier: CB:C7:F1:43:F3:78:FD:A8:20:9F:6A:20:43:37:DD:F8:13:89:72:02
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 01964CA224129AC0AF66BF22373C7B363474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 022B
Signing time: Sat 19 Apr 2025 06:00:16 +0000
Manifest this update: Sat 19 Apr 2025 06:00:16 +0000
Manifest next update: Sun 20 Apr 2025 06:00:16 +0000
Files and hashes: 1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: Jlfo/Z0aqDXanFbQvUKDDylVmlhhqHJKJDLEpcu2FnE=)
2: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (hash: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:24:12:9a:c0:af:66:bf:22:37:3c:7b:36:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Apr 19 06:00:16 2025 GMT
Not After : Apr 20 06:00:16 2025 GMT
Subject: CN=cbc7f143f378fda8209f6a204337ddf813897202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:07:0a:03:5e:55:4b:66:99:08:bd:a6:21:
26:d8:f6:0e:24:f8:6a:fe:02:dc:62:62:55:6f:0f:
41:c9:34:21:3b:05:76:20:e5:ca:7e:e8:4e:e9:75:
28:22:1b:0f:0b:89:82:30:bd:ec:6e:8c:d7:43:91:
35:61:40:86:ba:0a:17:fd:b0:58:90:60:64:9a:51:
34:ff:48:d2:d5:05:b6:1f:fb:bf:ca:9f:6e:20:56:
81:d9:92:9d:7f:71:c6:76:e2:63:f4:29:fb:b3:aa:
e3:1d:a4:f9:e5:39:ee:5d:11:e5:75:0d:3c:cb:3c:
66:d5:f3:d8:06:85:8f:3f:1b:b1:e3:50:9c:2f:53:
ab:33:11:71:e1:68:5d:0e:85:4d:5f:cd:13:e4:3f:
cf:75:d3:d5:b5:b5:af:d2:f0:ef:3e:bb:74:32:9a:
a0:f4:88:99:b6:1b:1c:7a:5d:30:4c:5b:c3:b2:1f:
9f:3d:0a:25:06:63:d8:cc:63:e1:54:fd:97:35:9d:
30:f2:cf:3c:96:57:30:e8:5c:9c:35:7c:4f:f3:99:
8a:07:8c:1f:04:b6:4e:7d:92:a7:59:77:88:61:8d:
96:d8:ef:4c:bf:ae:81:06:2d:dd:a7:47:19:25:96:
b7:75:4f:16:0d:3f:93:9a:b2:a9:5f:9a:56:9b:ba:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:F1:43:F3:78:FD:A8:20:9F:6A:20:43:37:DD:F8:13:89:72:02
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e2:da:01:0b:28:e8:a2:31:6d:5e:1f:1a:ee:1f:82:45:d7:
08:03:45:57:0b:d6:0c:a6:38:d5:ac:d8:4a:09:a9:5f:a6:38:
4e:90:f1:5c:fb:89:75:ef:ed:b9:7a:63:bb:6b:ee:75:5b:bb:
4b:07:0d:f8:f3:38:63:27:b6:fa:9d:b8:ad:b0:84:43:01:7e:
28:f4:10:34:d2:fc:88:99:d8:be:0a:fc:ac:89:a2:b2:ec:53:
0a:e6:32:03:7e:57:3b:01:b8:6d:a0:d8:56:a5:71:c5:c9:0f:
5c:37:89:1c:81:02:6c:be:39:0a:b2:b6:b4:91:c7:fe:9d:4f:
ca:e1:7f:99:c5:71:6c:2e:df:76:41:3a:ef:df:dd:dd:ce:15:
db:b5:18:34:20:ad:0a:68:c8:66:65:05:2b:ef:f5:03:d7:5c:
c8:de:7f:81:f6:9c:8d:cb:4e:8d:eb:9f:f9:ca:ce:f0:21:e2:
33:40:cf:52:38:e7:af:07:24:f5:7c:df:6a:6a:d2:cd:1f:a1:
f8:ac:9b:a3:f3:9d:fb:e9:c2:45:cc:d5:9f:69:4d:cf:a8:2e:
ef:87:73:3c:26:e3:9d:8e:6e:bf:a8:40:82:2e:cf:fc:f1:3d:
cb:13:b0:fa:82:ba:c2:a0:c4:19:30:6b:f5:f6:8c:83:ee:d9:
4b:4b:53:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoiQSmsCvZr8iNzx7NjR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZTc2Y2U1MzVjZmI4ZTIxNmVjMGQyNGRlYjU3OWQxYTRj
YTBlMDYwHhcNMjUwNDE5MDYwMDE2WhcNMjUwNDIwMDYwMDE2WjAzMTEwLwYDVQQD
EyhjYmM3ZjE0M2YzNzhmZGE4MjA5ZjZhMjA0MzM3ZGRmODEzODk3MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu8HCgNeVUtmmQi9piEm2PYOJPhq
/gLcYmJVbw9ByTQhOwV2IOXKfuhO6XUoIhsPC4mCML3sbozXQ5E1YUCGugoX/bBY
kGBkmlE0/0jS1QW2H/u/yp9uIFaB2ZKdf3HGduJj9Cn7s6rjHaT55TnuXRHldQ08
yzxm1fPYBoWPPxux41CcL1OrMxFx4WhdDoVNX80T5D/PddPVtbWv0vDvPrt0Mpqg
9IiZthscel0wTFvDsh+fPQolBmPYzGPhVP2XNZ0w8s88llcw6FycNXxP85mKB4wf
BLZOfZKnWXeIYY2W2O9Mv66BBi3dp0cZJZa3dU8WDT+TmrKpX5pWm7pVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvH8UPzeP2oIJ9qIEM33fgTiXICMB8GA1UdIwQY
MBaAFB3nbOU1z7jiFuwNJN61edGkyg4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wNzZhZGQtZWRmYS00ZjM3LTk5OTYt
NjZjZTllM2E4YzFlLzEvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wNzZhZGQtZWRmYS00ZjM3LTk5OTYtNjZjZTllM2E4YzFl
LzEvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+LaAQso
6KIxbV4fGu4fgkXXCANFVwvWDKY41azYSgmpX6Y4TpDxXPuJde/tuXpju2vudVu7
SwcN+PM4Yye2+p24rbCEQwF+KPQQNNL8iJnYvgr8rImisuxTCuYyA35XOwG4baDY
VqVxxckPXDeJHIECbL45CrK2tJHH/p1PyuF/mcVxbC7fdkE679/d3c4V27UYNCCt
CmjIZmUFK+/1A9dcyN5/gfacjctOjeuf+crO8CHiM0DPUjjnrwck9XzfamrSzR+h
+Kybo/Od++nCRczVn2lNz6gu74dzPCbjnY5uv6hAgi7P/PE9yxOw+oK6wqDEGTBr
9faMg+7ZS0tT0g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:28 2025 by rpki-client