Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: szAU2G65q5hoPtij4c6hCDQrQ4scSE4tLzD4WDdXTtE=
Subject key identifier: 51:44:6B:EC:47:C0:14:BB:66:E4:45:78:DE:FD:01:F1:F0:9D:2E:9A
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01976139527AF24D959342A8EDD90FCF0743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0638
Signing time: Wed 11 Jun 2025 23:00:35 +0000
Manifest this update: Wed 11 Jun 2025 23:00:35 +0000
Manifest next update: Thu 12 Jun 2025 23:00:35 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: BwQOPSeF8MIf6awt8Kt84JevuxMaF3t/hj0gWU/HIgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:52:7a:f2:4d:95:93:42:a8:ed:d9:0f:cf:07:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 11 23:00:35 2025 GMT
Not After : Jun 12 23:00:35 2025 GMT
Subject: CN=51446bec47c014bb66e44578defd01f1f09d2e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:bd:c9:9c:de:cc:a8:e4:f4:a4:6c:2a:18:
66:2c:4d:51:66:ff:49:fa:b8:a0:62:a2:65:cf:12:
14:b7:2e:57:c5:eb:e4:c6:d2:3e:37:0c:7b:42:1f:
25:ce:16:02:1a:2f:6b:71:7e:82:b5:f3:c4:49:26:
c0:87:1a:5b:fa:df:5f:cf:e8:c8:d4:61:21:74:23:
b5:9d:8f:ee:50:1c:bb:d0:c8:5b:27:83:f0:a0:9e:
58:f3:62:16:ab:c4:5c:25:9d:f1:4a:8e:b0:4d:69:
97:8f:e6:ec:45:3d:34:7c:e6:11:0c:79:72:5d:bf:
1b:56:a0:c6:e7:e4:1d:82:5a:4f:cc:55:48:b5:40:
5a:7e:b2:cc:fb:e2:b3:34:79:6a:ed:97:31:bc:74:
99:8f:ec:81:8e:64:6b:b6:fc:d9:e5:3e:77:c1:7b:
31:a4:e2:1d:60:98:f7:52:25:27:47:89:bc:2f:9f:
7e:a9:5e:4c:13:28:21:6c:62:ec:cc:9b:b0:20:e1:
96:b4:b2:36:72:9c:f2:37:0b:06:39:56:78:f6:51:
a4:91:1f:e0:1e:7c:e2:b6:1b:f0:dc:3e:c5:8f:0e:
bd:33:91:61:57:95:a9:e0:26:9c:06:08:d6:25:77:
32:8c:b7:00:1d:9d:7f:2a:f8:e9:99:8e:07:7e:4d:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:6B:EC:47:C0:14:BB:66:E4:45:78:DE:FD:01:F1:F0:9D:2E:9A
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:16:be:44:0c:ed:f0:f1:e1:22:0f:70:e7:1b:0f:2f:69:
31:4f:7c:bc:4e:fb:4a:04:11:b6:12:83:19:f6:34:6e:8f:78:
33:f4:f6:a7:c2:0d:fe:f3:aa:9a:bf:49:71:bb:7d:27:3a:02:
24:72:e5:16:37:ae:97:e3:62:08:6b:4a:5a:92:c5:89:cf:4c:
aa:3e:92:ea:e8:6e:cb:5d:23:81:f0:db:40:a5:f7:76:fb:fb:
89:dd:f1:f3:82:ad:d2:5b:b7:9d:5e:d3:9e:3a:53:6b:42:0a:
3c:bf:3f:a7:59:5e:61:30:07:b7:69:f4:f2:1d:6c:7a:83:7e:
90:cc:50:d8:c5:55:b8:97:f4:f6:14:19:59:14:78:2d:fd:55:
71:55:8e:d3:97:ad:c0:44:1b:4a:02:34:ab:87:d3:01:7f:d7:
e2:73:ce:4d:98:d0:d9:d0:9f:f8:93:91:23:53:27:7e:d3:84:
d5:c3:8e:e5:3a:de:49:d4:e5:15:47:71:62:91:fa:b9:75:db:
6d:ec:54:04:2a:23:47:fa:0c:20:d7:25:fc:fa:41:2c:b8:cb:
21:f0:08:94:c4:5d:98:6b:45:a3:3a:9b:d7:61:b9:68:58:d0:
4d:31:e9:7e:eb:4f:af:67:22:46:9d:04:21:23:03:f8:cc:10:
81:64:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:20:35 2025 by rpki-client