Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: 5/zxUDFHhk/nacqO3lBAVvdWe2udbYoLd5o4SXST4Wg=
Subject key identifier: 30:DD:46:68:40:DB:AC:04:B6:59:24:C1:B7:19:68:8E:F8:0F:DC:A0
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01976327BAFCD5685E568E5ECF478687D06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0639
Signing time: Thu 12 Jun 2025 08:00:37 +0000
Manifest this update: Thu 12 Jun 2025 08:00:37 +0000
Manifest next update: Fri 13 Jun 2025 08:00:37 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: DgrW5eOPJOCoPkq9frGRaSr8cprwsdilfeQ0ifFgct8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:ba:fc:d5:68:5e:56:8e:5e:cf:47:86:87:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 12 08:00:37 2025 GMT
Not After : Jun 13 08:00:37 2025 GMT
Subject: CN=30dd466840dbac04b65924c1b719688ef80fdca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:52:f5:36:55:eb:a7:ee:ff:4f:5d:af:aa:
74:2e:6a:2e:b4:98:d1:ae:4b:eb:4e:09:15:df:8e:
4c:a8:7b:3b:79:94:dd:40:83:e3:40:69:86:27:a9:
f6:ec:40:79:c7:5b:29:ec:c2:4b:ff:a5:53:a6:8a:
c2:15:d9:d0:97:5e:0d:bd:b8:f4:c2:4b:6f:9c:7a:
cd:57:a5:40:53:27:79:d2:c8:7c:43:9e:5c:12:ff:
c4:5a:47:0f:37:fb:e7:a8:45:2d:9f:4d:aa:71:0b:
8d:aa:db:95:8a:eb:64:10:74:f1:4f:e9:c5:d5:ea:
6d:a3:1f:dc:bc:e0:3e:68:a7:aa:72:9c:7a:5f:c8:
b2:81:4f:85:57:2a:6a:c0:cd:dd:17:e9:17:9c:4a:
11:f7:d8:2f:69:34:bf:21:8b:60:b9:72:f8:10:29:
0c:98:19:06:49:a0:69:3e:3a:1e:e7:36:b8:ec:9a:
b5:6a:9e:ce:27:3c:8f:2c:e2:4c:62:ae:ba:e4:e2:
6d:e2:5c:bf:c7:1a:32:b3:4e:66:fa:a3:93:00:2b:
20:e9:c3:08:6f:78:ed:89:0a:f3:4e:e3:cd:10:c2:
f7:57:03:f4:78:48:70:9c:14:44:69:aa:8f:f5:c9:
3f:36:70:75:a3:4c:97:73:06:73:7d:f5:9c:c9:2b:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:46:68:40:DB:AC:04:B6:59:24:C1:B7:19:68:8E:F8:0F:DC:A0
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:fb:f2:66:5d:54:59:25:a6:93:ad:e3:7e:34:a2:14:dc:
0a:ce:71:c2:06:18:6d:7e:f0:48:cd:fe:4e:26:cb:83:75:86:
62:d7:95:db:4c:c2:2f:43:c6:10:7a:2f:1b:d1:69:c5:36:70:
5f:56:93:0a:0a:64:8a:e5:2e:2d:29:62:0a:ac:19:2a:86:3b:
70:28:b4:c6:79:0e:53:cb:63:4d:ef:b5:0b:61:cf:e0:75:34:
a3:85:43:55:e3:c3:d4:d8:86:a0:4c:03:d0:ab:e0:5d:de:e7:
df:f4:66:26:52:44:9a:84:5f:b4:15:c7:3c:04:f9:bd:11:ff:
62:9d:2f:65:fc:b5:5a:85:4a:1a:38:d7:e6:97:07:44:bb:37:
41:c0:16:c1:05:39:c2:34:70:c5:16:77:75:70:50:21:38:90:
4c:82:d5:7d:97:53:be:53:7e:66:4a:6a:96:af:59:20:13:a5:
bd:03:23:b5:ba:bb:b4:5c:f4:06:b2:96:31:0b:12:31:a6:35:
62:d3:cd:67:1b:a5:37:70:7f:5c:12:8d:a4:f5:68:35:5b:c4:
90:8c:f6:d4:67:8e:cd:6f:ce:ae:72:f8:ed:27:8b:94:d4:4b:
a0:01:c8:b8:84:51:a8:63:c9:83:ae:3d:54:e6:c1:8a:e9:43:
22:ba:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:14:31 2025 by rpki-client