Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: 8tD6A9AveM5S43gJl+gLfurQoHWWDhIfI1XXYHgJzMg=
Subject key identifier: EB:79:12:79:C0:53:81:D5:59:78:33:C0:7D:69:B5:A0:22:E9:32:70
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01975B6E1B3E0D7DB17059918E45CAA04C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0635
Signing time: Tue 10 Jun 2025 20:00:31 +0000
Manifest this update: Tue 10 Jun 2025 20:00:31 +0000
Manifest next update: Wed 11 Jun 2025 20:00:31 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: mA/4Kem9EeE7wA21piNyKHJ+IiBsUCla/vQzW2jjYyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:6e:1b:3e:0d:7d:b1:70:59:91:8e:45:ca:a0:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 10 20:00:31 2025 GMT
Not After : Jun 11 20:00:31 2025 GMT
Subject: CN=eb791279c05381d5597833c07d69b5a022e93270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:cf:85:4f:1e:cb:eb:a1:d7:cf:94:e1:9e:
35:41:93:1b:01:fb:4b:8b:a6:e8:18:68:4d:c7:da:
69:0c:c0:ec:a6:ae:b6:ee:d0:71:88:fa:48:2b:39:
d3:d5:c8:d4:56:a0:e1:75:e1:5e:63:57:01:f0:32:
5e:83:77:9b:83:77:90:1c:6b:2f:1a:61:61:3f:5c:
1e:ff:97:c6:de:4a:3c:b2:df:0b:36:33:dd:c5:e8:
10:a5:72:fa:58:ff:f5:a4:28:61:d3:5a:c3:61:ce:
ae:7d:8d:a1:9b:52:c3:1b:2a:d0:36:9d:f9:61:af:
38:e7:56:18:f5:31:fd:56:71:a7:43:72:ff:99:80:
e9:8c:5c:af:aa:30:e7:4f:dc:bd:4e:1e:ce:cf:29:
f2:82:4f:b3:8a:b3:e8:6a:0a:98:06:38:7e:98:1b:
b1:c0:5f:df:7d:2f:d0:a1:ea:01:85:97:4d:73:4b:
ef:f4:73:21:7d:14:d5:48:ec:86:b5:51:1a:4a:a6:
a2:dc:ca:e0:3f:de:c4:4f:b6:13:16:9f:0f:92:05:
92:bf:f2:8c:b3:c1:ed:88:e9:db:3b:4e:60:08:f2:
e3:33:1d:03:fa:52:72:64:9d:26:a9:bc:a3:8c:a8:
ee:88:e3:9b:56:ec:65:75:29:bc:80:b5:46:5b:61:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:12:79:C0:53:81:D5:59:78:33:C0:7D:69:B5:A0:22:E9:32:70
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2b:ed:bd:25:4e:60:18:09:ad:57:62:0a:75:3f:37:22:0b:
4d:dd:5f:53:99:3f:21:5f:2d:f0:37:e4:60:9b:3c:2c:86:c1:
ee:60:91:1c:a9:aa:be:a2:07:50:a3:dc:24:e4:76:4b:37:45:
40:1c:a0:8d:fa:08:eb:7c:2e:40:ec:a4:4c:78:4d:a1:4f:23:
2a:98:2c:12:f5:4e:2b:a1:4b:21:14:ca:39:cc:83:c5:5a:ae:
b3:a1:0b:93:4d:5f:ff:57:e2:ce:43:e8:1e:30:07:10:36:f8:
65:3e:ec:bd:01:1c:f0:55:cb:af:65:0a:86:51:73:97:d4:45:
bb:e2:ee:f2:f8:7b:b3:32:0f:48:91:af:15:6d:48:ad:d8:dc:
30:eb:ec:0f:08:9c:0e:9e:93:dc:ab:be:77:a6:43:ac:e0:29:
0e:f6:f3:66:12:4a:43:19:c6:9c:77:1b:32:e6:50:70:a6:c6:
e7:8e:37:84:23:6d:aa:b3:a8:27:17:39:ef:97:12:67:2f:e1:
c9:09:3f:cd:48:98:d0:8c:cd:0a:df:e0:6c:de:96:60:53:b7:
82:70:7e:de:02:eb:a5:89:75:85:15:33:d1:ee:23:8b:26:52:
02:03:14:92:cf:dc:f5:32:0c:32:16:17:fe:01:8b:c6:ef:87:
bf:d2:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:52:46 2025 by rpki-client