Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: zzhu+BgZNCzxPIIMmPfl61V2b76nnhN6QsYJFMy8mCw=
Subject key identifier: 81:7D:28:3C:8C:69:68:AF:5B:35:E6:4E:C0:43:AC:06:33:1A:61:77
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 0197D58742F45CFA446DE35368688C82B19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0513
Signing time: Fri 04 Jul 2025 13:01:40 +0000
Manifest this update: Fri 04 Jul 2025 13:01:40 +0000
Manifest next update: Sat 05 Jul 2025 13:01:40 +0000
Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=)
2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: gydrkJ5pabYqrcFKYDbjUaX28PC3C2+G4v3qLoj3d1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:87:42:f4:5c:fa:44:6d:e3:53:68:68:8c:82:b1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Jul 4 13:01:40 2025 GMT
Not After : Jul 5 13:01:40 2025 GMT
Subject: CN=817d283c8c6968af5b35e64ec043ac06331a6177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:7c:57:33:7a:f4:c3:69:3f:62:b2:67:da:
9d:e6:62:46:f1:37:1f:af:ba:25:cc:9c:25:9a:28:
b4:1b:8f:f9:86:2e:bc:bd:d2:a3:ca:cf:74:01:79:
10:1e:21:6a:a2:2f:83:53:ed:d6:a3:ed:55:d5:3d:
c2:ed:97:e9:8d:a7:2a:fa:d6:e0:9d:68:05:7a:1c:
8c:73:0f:32:c1:6e:0a:98:ee:d5:14:50:97:fc:3e:
0c:40:78:3f:f7:7f:6b:f5:4b:03:96:cd:1b:02:cf:
3b:ef:87:b1:46:fa:25:ab:3a:dd:a7:7f:41:e9:bf:
70:ae:4f:c7:49:11:71:0b:ad:f2:92:6e:46:ee:2c:
d1:6f:ce:65:a0:89:51:5e:b2:e3:28:79:1b:1c:32:
16:13:bf:45:44:00:69:0a:98:07:f4:cd:03:48:12:
4b:85:11:31:06:37:62:fe:b4:81:20:32:d3:fe:7a:
9a:26:f3:a2:98:0b:9e:a3:5f:b7:23:f3:b2:4a:f5:
1b:12:18:77:6e:83:bf:14:62:76:7d:f3:74:af:ca:
cf:d5:e5:01:f8:b0:a2:be:91:2b:96:b4:fd:1f:8b:
3a:57:78:5a:f7:3c:0b:2f:c9:f7:5e:df:2d:0e:6e:
a0:e9:82:f2:db:0b:ea:6a:f7:5b:fb:fa:33:b0:c6:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7D:28:3C:8C:69:68:AF:5B:35:E6:4E:C0:43:AC:06:33:1A:61:77
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2d:56:71:d6:b0:b4:88:38:5b:b9:cd:35:56:72:c8:21:45:
e9:fa:9a:18:97:b0:c1:25:9a:eb:67:32:ea:8e:92:2a:57:f9:
c6:3e:4d:0a:32:bd:21:b3:9d:b6:c8:55:ac:e8:ff:d3:6d:e7:
1f:27:ee:d9:28:ef:fd:dd:f0:8e:eb:20:8a:0f:35:73:3b:52:
48:2d:75:d2:6b:e9:71:1e:83:74:81:0e:dd:b5:2c:d8:39:4d:
35:db:8d:36:25:df:65:06:44:e0:b8:f4:6d:65:34:b0:21:18:
75:78:6d:27:d6:2c:fa:9b:67:a4:ec:0d:96:17:42:93:24:62:
d3:6d:89:f0:73:02:77:89:27:d5:1b:c8:90:3c:ee:9f:ef:f4:
9b:6a:59:fc:46:3c:71:2f:9a:92:34:e6:53:df:8a:d6:31:6a:
38:9a:df:89:7d:f2:f0:94:b2:df:07:50:eb:9e:5c:78:b2:ca:
78:35:99:0e:32:76:e7:d1:44:c3:ca:76:33:46:fa:5f:44:69:
95:a1:92:d3:70:cd:fe:0d:b4:8a:16:c4:59:d1:6f:2c:e9:f7:
82:f0:00:29:a6:e8:85:fc:20:0e:a6:a4:38:1f:26:58:75:46:
6e:f5:ee:04:3c:9e:01:30:1b:13:74:f3:7f:b6:79:6e:67:3a:
d2:a0:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:17:50 2025 by rpki-client