Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: MfBS/6H9jMuMAzo02DllsFZh7i7i9yhrh354YqAIebk=
Subject key identifier: 2A:D4:AC:A1:70:E8:61:F9:7D:A7:50:56:52:53:96:00:12:F0:1B:44
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 0199FEEBE795D9AD50B39B0FAA88AD4771B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0E09
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: S9vBbG1oDneQdPyDnp9KlOc1JPsGmw0U8l/3AQK7h1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e7:95:d9:ad:50:b3:9b:0f:aa:88:ad:47:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=2ad4aca170e861f97da750565253960012f01b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:05:65:ca:14:82:bf:9b:d0:03:c1:b7:55:
b5:03:0f:d6:31:66:75:b2:fa:9d:d7:65:f6:2e:61:
0c:3d:fb:ef:37:a3:68:90:36:8a:3d:4e:f7:08:5b:
30:1f:db:a5:12:80:f6:72:b4:24:42:22:b5:70:fe:
b6:ab:a9:a2:7c:90:b2:4d:e8:9b:b6:9b:7f:00:ce:
35:c9:13:cc:59:79:8b:73:73:86:19:8d:30:ce:95:
b0:6d:4d:e9:f5:9e:21:78:27:54:83:af:35:8e:77:
e8:6f:93:0b:ca:3a:9f:37:aa:dd:fe:59:e5:60:e1:
02:af:2c:6b:f4:07:3f:94:15:1a:93:cc:a0:66:db:
a9:ed:4d:33:16:30:bd:b3:15:4f:af:64:01:50:fc:
60:ba:79:52:33:46:5a:18:1b:1b:17:68:70:a1:90:
c3:d0:54:3f:9d:24:cc:d6:83:fb:b5:c9:2c:52:e2:
5a:c8:7b:8f:2e:4a:66:1c:73:36:ff:5f:e0:19:5b:
53:0b:18:72:05:f9:54:af:bd:7a:d5:39:cc:58:25:
ba:60:4b:f3:93:81:a7:e0:c7:c8:4f:f1:b9:48:3b:
35:c9:1e:35:50:f2:dc:67:f3:0f:4b:e9:d2:d5:59:
92:55:f4:cf:55:4f:e6:b0:cb:d5:66:95:10:94:c6:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:AC:A1:70:E8:61:F9:7D:A7:50:56:52:53:96:00:12:F0:1B:44
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c8:d0:0d:de:8a:25:3e:b3:46:4f:00:ef:67:96:55:91:61:
fa:a8:7a:aa:31:b6:d0:c9:a9:b6:e1:b0:a0:5b:6b:85:70:f5:
49:73:a7:e2:7d:f0:89:e9:f4:4a:00:b5:44:58:4d:c2:4f:c9:
f4:6a:f2:12:be:6e:75:42:f1:6a:7b:c8:bd:2c:af:ad:0a:56:
a1:89:15:a4:e2:0a:8e:0f:39:7d:3b:35:fc:0f:60:e1:f7:8e:
42:2f:db:d1:b3:e1:ef:cc:8b:d8:45:4f:0e:65:90:ee:09:1a:
f9:32:db:17:a2:87:cf:e5:79:f5:3a:fe:40:8a:0b:4c:16:8a:
2f:8d:c9:10:cf:18:a6:77:06:01:c7:0f:fa:4e:2e:c9:4f:e7:
30:3a:7a:15:11:f1:89:2b:c2:97:fb:93:b1:20:48:9e:45:4b:
0a:78:fa:d5:b3:bd:58:c9:35:89:e1:b5:a2:24:5e:a0:da:e0:
e5:85:71:58:b9:f5:ce:94:f4:dd:51:6e:5f:19:93:33:94:81:
84:8c:cd:71:60:5e:9a:6e:bc:26:c6:65:74:4a:5b:d0:94:70:
b6:88:8b:ed:6c:40:86:37:85:16:55:fb:10:e8:a9:1b:81:67:
4e:1b:80:2b:d1:d9:8d:1f:8d:da:01:44:e5:ae:39:ad:b4:b8:
3f:dd:66:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6+eV2a1Qs5sPqoitR3GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDg1ZTI5ZjExOGMwMWJlODZjMTllNjY4ZmFjZmE0ODVk
ZTcxOGMwHhcNMjUxMDIwMDAwMTM3WhcNMjUxMDIxMDAwMTM3WjAzMTEwLwYDVQQD
EygyYWQ0YWNhMTcwZTg2MWY5N2RhNzUwNTY1MjUzOTYwMDEyZjAxYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+MFZcoUgr+b0APBt1W1Aw/WMWZ1
svqd12X2LmEMPfvvN6NokDaKPU73CFswH9ulEoD2crQkQiK1cP62q6mifJCyTeib
tpt/AM41yRPMWXmLc3OGGY0wzpWwbU3p9Z4heCdUg681jnfob5MLyjqfN6rd/lnl
YOECryxr9Ac/lBUak8ygZtup7U0zFjC9sxVPr2QBUPxgunlSM0ZaGBsbF2hwoZDD
0FQ/nSTM1oP7tcksUuJayHuPLkpmHHM2/1/gGVtTCxhyBflUr7161TnMWCW6YEvz
k4Gn4MfIT/G5SDs1yR41UPLcZ/MPS+nS1VmSVfTPVU/msMvVZpUQlMa+bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrUrKFw6GH5fadQVlJTlgAS8BtEMB8GA1UdIwQY
MBaAFMdIXinxGMAb6GwZ5mj6z6SF3nGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQt
NTdmOWJjNmE1YzMwLzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQtNTdmOWJjNmE1YzMw
LzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsjQDd6K
JT6zRk8A72eWVZFh+qh6qjG20MmptuGwoFtrhXD1SXOn4n3wien0SgC1RFhNwk/J
9GryEr5udULxanvIvSyvrQpWoYkVpOIKjg85fTs1/A9g4feOQi/b0bPh78yL2EVP
DmWQ7gka+TLbF6KHz+V59Tr+QIoLTBaKL43JEM8YpncGAccP+k4uyU/nMDp6FRHx
iSvCl/uTsSBInkVLCnj61bO9WMk1ieG1oiReoNrg5YVxWLn1zpT03VFuXxmTM5SB
hIzNcWBemm68JsZldEpb0JRwtoiL7WxAhjeFFlX7EOipG4FnThuAK9HZjR+N2gFE
5a45rbS4P91mbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:10 2025 by rpki-client