Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier: T1Qaqpc7lUNY+4XZIi6gMeerWcNVj2oAqD/jTvmmIW8=
Subject key identifier: 50:E1:58:CD:C0:25:DB:D2:24:A2:79:7C:F3:29:03:4B:23:0E:79:11
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 0198D404D12EF45A024AB1FE0CB67223871E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:22 +0000
Manifest this update: Fri 22 Aug 2025 23:02:22 +0000
Manifest next update: Sat 23 Aug 2025 23:02:22 +0000
Files and hashes: 1: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: TXPVmIME6iUCczw5uhYM8VtpR5ZpAEs7tOIYMpeergs=)
2: vNgalWxKyCFGqWuDm-_4-hQvAN8.roa (hash: dwnMTxgyRJ4mgwfPlrMhwXTTLitc5c5TREsY1/YmwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d1:2e:f4:5a:02:4a:b1:fe:0c:b6:72:23:87:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Aug 22 23:02:22 2025 GMT
Not After : Aug 23 23:02:22 2025 GMT
Subject: CN=50e158cdc025dbd224a2797cf329034b230e7911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:64:3c:f2:20:b1:de:57:35:b6:66:80:5a:
dd:65:90:97:d2:07:05:cf:51:c4:6f:47:b7:99:2e:
b6:07:14:b5:a0:fb:b8:16:61:63:0c:32:ac:b8:b1:
8d:bb:55:eb:f7:10:de:aa:2a:6f:3f:5b:34:89:07:
07:ed:9e:2d:27:24:bc:74:e0:74:60:92:d8:6a:f3:
fe:22:4e:4a:e6:9f:87:6e:d4:4a:3a:32:db:12:9f:
c4:9c:29:fd:4c:22:2d:79:41:e4:bd:b0:08:89:5e:
a9:a0:88:57:9e:ca:31:f5:b0:62:4b:b9:2b:eb:9d:
be:7c:48:77:11:0f:e9:11:40:7a:0e:39:45:22:dc:
ac:7f:0c:43:a3:60:27:6c:da:4d:d8:d5:3f:f9:d8:
56:54:cb:d0:2c:d1:55:93:a3:ad:d5:8a:92:77:f6:
6d:20:4b:c5:60:13:0f:65:5c:13:da:6a:6f:b4:58:
94:10:69:a9:d0:0b:03:95:58:20:e1:81:2b:57:6c:
44:4a:13:56:10:d8:23:b4:fb:5c:3e:6d:cf:10:3e:
83:f6:69:5e:de:4a:c0:9f:fc:e8:fa:04:2a:4e:98:
cf:a6:20:6b:94:f5:38:53:0f:bf:a0:7f:fe:d1:e3:
a8:35:af:80:c4:49:8c:aa:e9:81:5d:e7:bf:94:a8:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:58:CD:C0:25:DB:D2:24:A2:79:7C:F3:29:03:4B:23:0E:79:11
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:8d:0e:5c:db:b1:b6:3e:5b:1c:94:6b:6c:7a:c6:fb:2d:
40:1b:f3:f3:f6:be:0b:09:db:4a:6d:57:69:5f:04:c7:98:5c:
05:7e:49:d7:23:4e:50:4f:21:06:d9:b0:8c:40:dc:34:7a:95:
33:60:a2:42:77:40:ce:af:09:53:c5:a0:ef:16:5d:97:f3:1e:
8e:fe:ef:a6:18:65:79:cc:73:f7:d7:56:50:4b:fc:17:b8:7a:
7b:af:96:87:33:33:66:cf:d2:04:1c:a1:d5:f6:6a:27:48:73:
77:d4:ec:71:44:2e:c7:29:d0:00:15:d0:b6:30:df:04:ed:6b:
4f:af:f7:99:9e:32:a9:58:33:8e:42:45:28:ad:42:4b:05:15:
24:71:32:da:28:aa:8e:d6:b4:ff:5d:5f:f3:a6:b8:c4:e7:74:
c0:54:c2:4b:e7:c7:fb:ac:0b:0a:99:3f:6b:21:4b:4c:5b:d2:
c4:5d:2e:a1:6c:55:63:58:bf:14:65:19:8f:f5:9d:fc:73:f5:
c5:5b:53:12:a6:12:f1:92:66:71:20:01:ae:fa:9f:ff:de:65:
8a:c7:1d:2d:15:42:62:7a:58:35:d1:c7:6e:ff:b0:fc:5c:32:
22:0e:8a:49:b2:1f:5e:d5:a4:ce:2e:c2:fb:57:cc:6e:eb:52:
c2:0d:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:44 2025 by rpki-client