Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: +FKcX4l+76FxUFVLRqFiCfyjWwoOcvo1tnJLjRz3ACo=
Subject key identifier: 0E:00:05:5D:3A:42:88:D4:9D:65:E6:5D:C0:01:38:87:E6:7B:36:34
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019A0CA66BEC63891AA9CA906CA3AD2BBE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 079F
Signing time: Wed 22 Oct 2025 16:00:24 +0000
Manifest this update: Wed 22 Oct 2025 16:00:24 +0000
Manifest next update: Thu 23 Oct 2025 16:00:24 +0000
Files and hashes: 1: HDVuIW9XiSGyuuDPbsTsfpK9Hjg.roa (hash: fjWKt3Cr3fyL7h6gCEroZ6zh75H5knry8QHJWUEc9+A=)
2: SfNDVxDssqhMgryNzm12YQX_5D4.roa (hash: JNj63Cat+McVVvzwc6C6pT5U3+pDTZGt0yQbmqaAU+I=)
3: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: fX3i/MQRquEfXzNvdacAJzJXDT5e+UAMKK9See3Z7P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:6b:ec:63:89:1a:a9:ca:90:6c:a3:ad:2b:be:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Oct 22 16:00:24 2025 GMT
Not After : Oct 23 16:00:24 2025 GMT
Subject: CN=0e00055d3a4288d49d65e65dc0013887e67b3634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:08:68:bb:2d:82:b8:13:2e:40:f3:d2:13:
f3:6d:33:e3:5c:55:fa:a7:e5:90:7f:95:51:8e:42:
af:24:79:90:5b:98:6b:bf:c1:4c:46:3d:76:a8:5e:
ec:da:1c:68:df:94:12:ff:6d:ef:71:fb:73:ef:50:
a7:fc:29:74:6e:99:19:65:62:88:ea:1a:75:52:69:
3a:be:3d:a4:78:f1:c1:3e:1c:01:11:72:87:3f:be:
6a:27:40:c5:b1:61:e5:8d:21:25:5b:d5:5f:4b:ed:
83:89:52:01:b6:1f:65:e8:1c:a1:d1:87:89:c0:5d:
48:a0:af:63:1c:a2:02:0e:e8:e6:e9:a6:6c:97:3c:
62:f7:e5:9d:3e:ee:ca:f9:5d:3e:83:01:73:22:cc:
64:46:61:1c:83:e9:99:8a:39:d1:20:6e:d4:74:1e:
7a:00:96:a0:7e:01:95:27:26:b0:90:e2:79:3a:e1:
7d:6e:53:2c:c9:5f:4a:17:62:52:aa:c8:ce:8a:f8:
5c:2e:c7:ec:ab:ce:c0:ba:9d:30:29:35:32:c5:5d:
fa:8f:14:35:43:f7:d0:b7:72:c1:a9:ac:9e:b5:49:
fa:71:ff:9c:f4:4c:a0:f1:da:9e:8e:db:a6:0c:3f:
9e:0e:3b:25:06:e3:e3:3d:33:c7:12:d2:17:01:0c:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:05:5D:3A:42:88:D4:9D:65:E6:5D:C0:01:38:87:E6:7B:36:34
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:23:99:24:8b:47:b6:ba:3e:61:14:fa:0a:fb:34:2e:49:f0:
0f:45:99:6c:58:91:68:59:c9:00:58:a2:4a:81:07:fa:41:fa:
29:d4:c3:a4:df:8d:40:a2:e4:9d:f7:ed:ec:9d:c6:ff:e8:60:
4d:43:86:14:fb:f1:48:cd:95:64:e1:56:c8:20:f1:87:28:51:
34:9f:a7:36:99:ac:dd:a2:94:2a:ee:3d:96:00:06:11:c8:dd:
57:34:66:7d:73:17:d1:a0:f4:91:fd:84:07:3c:2f:0f:04:79:
c5:05:93:cd:cd:63:79:0c:04:62:c1:f1:b3:88:9b:67:ed:ed:
87:55:a5:44:40:11:09:02:58:8f:25:8a:87:70:ac:66:1c:ba:
f0:90:d5:68:d8:07:40:c8:41:f2:70:e7:24:fa:29:5f:93:9c:
4a:1f:a7:b1:bd:fe:ca:56:ed:97:c7:a6:32:60:6a:5a:58:27:
c2:c2:60:52:07:54:ad:d8:db:eb:d1:4c:91:19:7f:41:e1:d4:
62:b6:3f:78:20:fd:df:04:42:1f:9a:4c:67:b5:d8:fd:9e:51:
80:b7:eb:b8:79:99:f4:43:85:90:48:8e:68:ff:80:1c:97:53:
4f:6e:fa:74:b8:8e:66:75:30:90:e1:ca:63:c6:a1:21:08:18:
01:2f:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:00:56 2025 by rpki-client