Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: p0cilDjZqrkGPFPnKTu8VBARZlBO9Gnq+3NWP9s+yjg=
Subject key identifier: 91:41:48:D4:C0:D5:A1:C1:81:8A:FD:15:99:D0:74:AF:77:D2:4B:31
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 019922C35431F57F85948EBF9BCEC2CC20BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 03A3
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: AAoNzpLmfhj7YNxivtsD5LGyESJX7mAfu/m1uO+k63s=)
2: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (hash: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:54:31:f5:7f:85:94:8e:bf:9b:ce:c2:cc:20:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=914148d4c0d5a1c1818afd1599d074af77d24b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:c8:95:4c:db:df:88:a1:bf:c8:c3:cb:88:
b8:79:ac:8a:ea:f2:d8:b7:8e:59:bb:a3:f8:68:ac:
2f:e2:64:c2:12:52:a2:33:90:22:2f:1f:fd:eb:a0:
b9:9c:cf:06:2a:17:22:69:d9:45:ba:52:8b:67:cc:
05:81:5b:be:22:a7:c2:44:8c:76:ce:f1:2f:13:3f:
43:f2:c9:3c:67:33:86:28:99:08:81:73:75:5b:5d:
55:a5:68:0a:7f:2e:c6:16:7f:fd:c3:77:b7:af:37:
b1:02:79:89:a9:81:76:9f:3f:44:ee:f0:44:6c:dc:
6a:b2:60:b6:a2:39:93:b8:0e:e4:fb:25:d0:19:d0:
93:63:c4:a2:6f:19:22:03:22:c1:26:a8:d7:40:df:
32:c5:89:2e:3d:ba:bc:80:32:99:96:6e:46:2a:89:
fd:45:66:86:af:e8:68:b7:d6:84:c3:e6:98:31:67:
1c:ed:38:2b:67:67:98:a0:54:3f:10:53:c1:72:86:
95:b2:d2:6d:ef:6b:59:fb:3a:3b:19:94:5c:12:99:
35:f7:e3:d8:a0:57:24:d1:82:77:9b:44:91:a5:2d:
c3:7f:bb:20:8e:dc:ad:97:7b:be:3c:40:b3:d0:89:
dd:4c:85:eb:df:eb:33:e7:52:37:d8:d5:9b:49:2d:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:41:48:D4:C0:D5:A1:C1:81:8A:FD:15:99:D0:74:AF:77:D2:4B:31
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:74:42:22:18:63:c2:4a:16:ca:94:2e:64:64:be:2d:5c:40:
4f:26:8b:c5:e4:3f:11:30:56:15:37:0a:23:ed:5b:5b:47:33:
db:7e:f1:b4:63:52:c3:d4:cc:a0:17:78:ad:fe:b7:5f:83:8b:
4e:6f:49:d8:a2:0c:fa:90:c7:c9:ad:14:3c:6e:99:2d:39:3a:
e9:17:b5:7a:0e:b4:0b:71:d8:1f:9d:7b:97:0f:6c:96:ab:ad:
b0:7f:30:1b:bc:3a:14:04:18:e9:53:75:7f:f6:34:26:38:88:
ee:0d:aa:45:e8:23:69:d7:81:59:58:41:6b:18:4f:e1:0e:0f:
20:23:93:66:15:cc:90:67:e6:7e:98:36:e2:0c:6d:d3:f5:e8:
69:8f:4f:54:9c:31:2e:ef:7f:4d:e4:b3:0e:b2:45:2c:00:b2:
f5:8a:f8:e5:79:aa:d1:07:13:61:c5:96:b9:eb:0d:a2:41:4e:
5f:f8:da:d6:8c:fb:3f:f3:23:9b:48:8d:70:10:35:3f:4c:90:
2d:0c:b6:e1:ec:18:6a:10:fd:8b:30:fd:e6:55:ef:a2:9b:f1:
70:18:80:23:eb:76:41:4b:a8:ea:42:fd:7b:63:4a:0c:d6:25:
0e:80:74:df:15:03:8b:d1:e5:ec:2e:6d:8d:62:0a:c9:70:6f:
fc:4b:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client