Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: wg8kwqRRfeCWF8R0dl5tcjX1CHmN5uvoGYqwtYLvyZM=
Subject key identifier: 79:74:33:2F:62:FE:70:D7:B9:C6:0F:40:F8:3F:A1:DC:B2:F8:37:C5
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 0197B7B2E2BFB30CAA867A1DB3142A6934A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0CDB
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: Qgx/VkxW4EHom4R4+YhJU0Pcr4y2qgNZFPPRjEQeQ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e2:bf:b3:0c:aa:86:7a:1d:b3:14:2a:69:34:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=7974332f62fe70d7b9c60f40f83fa1dcb2f837c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:3e:ed:23:2a:fb:9d:de:6d:39:67:de:8d:
9a:72:d4:de:1f:5c:ca:73:b3:5b:de:45:ec:f6:2b:
6f:31:5c:ec:a4:a7:21:8a:76:a8:65:97:44:06:3d:
db:46:d5:40:f2:69:62:91:71:d6:f9:47:f0:b5:61:
cb:9a:36:6c:ab:2a:78:38:d6:4e:d0:4e:61:8f:c6:
2f:41:db:16:56:b2:f9:fa:33:9f:40:4b:a5:2f:fa:
91:a1:28:3a:c6:b4:d6:aa:0f:55:31:7d:9c:5c:b7:
d9:ad:f9:c8:45:5a:35:ff:0d:7e:42:61:db:c7:c9:
11:d8:e2:b7:61:32:f6:71:00:c0:1f:be:44:9f:f3:
2d:2b:0c:c5:9d:27:cb:9c:87:44:91:70:e5:1c:d5:
f3:6a:29:c8:be:fa:12:e2:12:89:a7:68:27:a6:4b:
65:9a:96:7c:a3:3a:7a:43:9f:bd:fd:bc:b6:62:36:
53:f7:01:84:b5:d9:a6:2c:48:35:e7:2a:fa:e3:70:
e1:83:21:cb:17:b9:cb:21:4b:45:e2:a2:35:86:3d:
4c:66:88:e0:b2:20:45:67:8c:b3:04:01:a2:51:0d:
1d:68:e1:da:f3:7c:3a:98:6d:cd:0b:c2:c7:4c:36:
d9:aa:0c:01:7f:e9:e8:ff:0a:1a:48:16:72:d7:57:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:33:2F:62:FE:70:D7:B9:C6:0F:40:F8:3F:A1:DC:B2:F8:37:C5
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:10:d3:51:69:a3:79:e7:b2:09:8b:51:ef:e4:0c:e0:46:12:
d9:6b:80:99:4f:51:e0:bd:fb:bf:19:67:dc:e6:e0:09:6b:84:
e7:bb:89:47:86:c4:01:cd:a9:90:aa:aa:ff:4e:66:51:52:ed:
7b:16:7f:4c:62:08:ec:0e:9b:1f:3b:a9:44:39:79:a2:16:a3:
26:25:f2:70:61:37:fc:5e:5e:3d:19:1f:8f:24:17:0f:20:73:
14:cb:55:37:b3:c0:6d:8f:12:ee:db:7b:1c:d3:18:34:a3:36:
33:83:24:0e:72:fa:3f:d7:15:6a:4f:2d:7f:65:7e:4d:61:ca:
c3:6a:2f:d0:22:a5:f4:7a:0f:47:72:e6:d0:7f:07:f3:7f:e0:
50:45:89:6d:fa:d2:74:84:62:40:67:c2:f9:81:64:89:69:a0:
22:88:3a:24:dd:ea:82:54:cb:5c:4d:50:62:c2:20:9e:c8:1f:
68:34:e1:e9:fd:06:8a:38:d2:e4:d3:9e:85:f2:6f:8a:2c:0b:
36:08:84:05:fb:04:c6:09:6c:65:88:bd:01:06:d0:e6:0d:7c:
e2:bc:dc:98:b7:08:e3:0b:19:4e:54:71:08:30:40:eb:bf:d3:
6e:38:fe:77:05:4a:2d:9e:36:03:1b:f4:d9:fd:73:4c:a7:68:
64:4a:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:53 2025 by rpki-client