Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: X19nHyzsxjZT/7Ei6HIUgizo7oSWROPlabPJAeZ6egY=
Subject key identifier: 77:A8:FC:62:4F:F9:58:F4:61:21:17:CD:37:3E:DF:59:1A:B7:7D:41
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01975D5CB2F3F7F3A18B85D4BC85338A85C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0636
Signing time: Wed 11 Jun 2025 05:00:45 +0000
Manifest this update: Wed 11 Jun 2025 05:00:45 +0000
Manifest next update: Thu 12 Jun 2025 05:00:45 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: nWT2sIpv6zVAo4fM2kYnluC9hsN2dhhgbscSh+IdFuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:b2:f3:f7:f3:a1:8b:85:d4:bc:85:33:8a:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 11 05:00:45 2025 GMT
Not After : Jun 12 05:00:45 2025 GMT
Subject: CN=77a8fc624ff958f4612117cd373edf591ab77d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:c6:9b:20:42:6f:16:80:23:69:9e:01:f2:
f6:ed:d7:9c:93:10:7b:75:ac:20:96:01:36:1d:f7:
66:8d:43:17:bb:98:ec:a4:7f:aa:bc:93:51:5b:ca:
7c:cd:d3:73:62:45:d5:c6:96:fa:34:1c:2e:c1:aa:
5d:1e:b7:46:0c:43:b4:4a:b8:2d:a8:0c:cb:93:e6:
44:29:02:00:ae:53:25:ed:d5:de:56:10:6e:8b:2b:
02:6e:f0:e9:d5:7d:a2:7a:f1:d1:20:de:83:c4:0e:
a2:a1:f3:69:53:78:34:ed:3f:b0:09:c7:e8:30:e6:
6d:d9:e0:81:fd:78:35:31:ab:94:4d:f6:a7:b0:83:
d4:e6:22:f3:5b:97:54:a3:ed:fb:1f:6c:a0:6d:f5:
9f:31:ef:95:0e:a9:b7:3f:b5:84:b6:c9:8e:49:ac:
e8:df:74:c5:5b:b4:52:3b:dc:4c:5c:9b:3a:79:61:
12:f8:b3:b0:72:fe:d4:96:88:d1:c4:d1:dc:66:a3:
6a:dc:a0:dd:50:af:60:9d:db:92:13:7f:58:4b:97:
4c:c0:35:8e:a1:dd:b5:5b:63:37:67:b2:53:88:d6:
f5:76:00:3f:0a:a2:a3:de:b4:cc:91:63:86:92:55:
e2:0a:f4:4a:c2:c7:69:85:40:75:06:11:51:01:62:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:FC:62:4F:F9:58:F4:61:21:17:CD:37:3E:DF:59:1A:B7:7D:41
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:66:05:5c:03:16:38:de:5e:7a:b5:c8:4a:41:61:61:1e:4d:
d7:03:3c:3e:15:c3:48:80:bf:ba:3e:a9:9d:a1:4f:46:e0:c2:
81:d3:2c:07:61:3e:45:43:87:25:39:61:fe:3c:2b:c0:c4:84:
9d:07:d1:28:fd:0d:c2:70:73:f8:f2:92:30:ba:3d:7b:8d:44:
2a:32:a0:34:f6:2e:60:15:31:76:8c:ee:10:ef:e2:63:9f:00:
4d:32:92:23:c2:bc:f7:ca:a7:18:87:3c:a9:47:54:26:3e:d1:
51:c4:c7:9c:6a:25:46:9e:0a:5f:68:b7:75:76:e9:ec:1a:0d:
5b:f6:88:76:4d:73:94:76:f9:83:af:09:ce:6f:f3:b8:a6:fe:
9a:96:62:51:ec:9b:72:92:7c:d4:9a:bc:69:c8:ca:01:9c:9d:
c7:a2:a7:d0:8c:7a:5c:db:b8:de:82:57:08:67:b6:c7:dd:48:
56:15:0e:1f:bf:e7:0a:ea:cc:c8:49:72:2c:7f:6a:14:c8:1b:
5a:6b:bb:4d:9a:5c:1b:28:e9:75:38:16:2a:5d:c0:4e:4b:a6:
7c:2d:ad:f6:5e:7f:69:31:02:64:ec:7c:08:1a:d3:22:1f:62:
6a:30:39:e5:8b:b8:ae:aa:e9:bf:c2:f1:9e:ef:00:df:5a:85:
a0:ac:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:50:35 2025 by rpki-client