Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier: KbMaFTOsWNiMeha41OFXe58avsTA6Z5vYMAISrpuZF8=
Subject key identifier: A5:B6:18:F5:1E:75:47:70:AE:EA:DE:6C:DA:A5:44:6A:35:C1:0D:50
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 0197C5A5D06D3AB18A45EEA899A7488E33EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 11:01:07 +0000
Manifest this update: Tue 01 Jul 2025 11:01:07 +0000
Manifest next update: Wed 02 Jul 2025 11:01:07 +0000
Files and hashes: 1: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: RDzzb1fH0bs/3HipqlpP4QxoObgL2VJKgMUvRh8MJI4=)
2: vNgalWxKyCFGqWuDm-_4-hQvAN8.roa (hash: dwnMTxgyRJ4mgwfPlrMhwXTTLitc5c5TREsY1/YmwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:d0:6d:3a:b1:8a:45:ee:a8:99:a7:48:8e:33:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Jul 1 11:01:07 2025 GMT
Not After : Jul 2 11:01:07 2025 GMT
Subject: CN=a5b618f51e754770aeeade6cdaa5446a35c10d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:c5:52:13:ee:59:f0:d1:92:b0:d6:8f:7b:
e9:3f:0b:c7:4c:61:91:a0:b9:59:b3:4b:8f:04:d1:
ce:26:ac:40:a9:c4:b6:ba:0e:35:d8:73:5f:b2:6d:
77:33:04:b8:28:35:d8:8c:7c:f9:10:45:40:e6:d3:
c0:d9:31:f7:67:e3:90:75:cf:14:b3:14:b2:36:9e:
54:9c:07:56:f1:40:94:b6:3c:56:ee:d7:1e:7c:f1:
fd:a7:fd:5f:a7:58:21:16:49:e1:74:58:19:8d:72:
ba:8f:19:f0:34:76:ba:0e:94:50:f9:93:bc:ae:3b:
60:69:0c:3c:bf:be:d4:a2:0b:c0:86:1c:ed:19:74:
7d:b6:c5:f7:2f:93:eb:56:b8:ca:6d:f1:75:52:72:
ae:62:9f:87:a3:50:dc:b5:67:79:ff:0a:50:f0:4e:
8e:fe:a6:1a:d3:86:90:f4:d1:49:17:cf:fb:5b:b0:
90:2e:01:a0:ee:43:02:fe:9e:4a:63:4d:fd:44:c4:
39:6e:50:66:b1:3a:1c:90:bd:86:4f:32:25:5d:17:
15:bf:7e:d4:d5:35:8f:cf:74:3b:4d:3b:45:1f:a5:
af:42:0a:c9:c2:e2:da:12:7c:3a:50:7f:0e:66:e2:
67:e4:a5:ad:85:ce:e3:0c:08:2b:7b:44:e7:64:23:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:18:F5:1E:75:47:70:AE:EA:DE:6C:DA:A5:44:6A:35:C1:0D:50
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dc:42:39:a4:c9:75:3a:68:a9:bd:20:fc:6e:0a:66:54:d2:
91:0f:d5:ba:a5:fd:85:45:f3:95:e5:11:99:2e:8d:9f:23:ca:
8e:53:b0:20:80:2e:93:d0:d1:b1:cd:a5:2b:04:1b:ca:14:f4:
8a:33:24:7e:8d:7c:70:18:91:1c:92:15:18:3e:a6:94:b5:57:
d3:e1:8f:80:26:4d:5f:c8:40:58:d5:a1:bc:2f:05:64:b3:ca:
31:17:59:ed:48:13:07:fc:a8:65:9d:1e:6a:eb:c8:8c:d1:c7:
67:6b:05:c6:8c:25:8d:85:10:1f:cd:e4:44:36:42:4c:01:b2:
93:c3:c3:3b:40:71:f4:4e:f8:5d:4b:55:d9:53:51:23:ad:33:
0a:53:8b:89:94:76:ba:f3:d6:6d:f9:16:36:cd:75:79:6b:cb:
90:15:ef:c5:65:54:66:20:5e:ee:df:94:6a:dc:5e:76:55:1d:
1a:c8:c7:dd:a4:49:5f:57:5c:33:ef:dd:61:98:57:6a:c5:10:
00:29:00:d8:bd:30:24:cf:b5:f9:cb:76:87:42:32:ac:64:b6:
91:ff:ce:e4:15:0a:dc:d3:8e:71:d7:4f:7c:96:a7:86:10:98:
81:4e:26:cd:1c:4e:5a:1f:00:a7:82:18:7b:0c:5e:99:98:69:
ee:2d:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:40:58 2025 by rpki-client