Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: Ta/u7M9cnkhHiP/m07kMswdyyxmYpAP1LNgy3+31t1w=
Subject key identifier: 4B:F8:DA:6E:DD:47:D9:8E:BF:75:E6:C1:F8:A3:86:38:E2:7B:6D:F6
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 0197670475619E234FEEB2A5AE31C7FF6F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 063B
Signing time: Fri 13 Jun 2025 02:00:34 +0000
Manifest this update: Fri 13 Jun 2025 02:00:34 +0000
Manifest next update: Sat 14 Jun 2025 02:00:34 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: +3rPLUxgDty5lvAq9x/Dx4j+GeYrGC91BnMSyUtQ0cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:04:75:61:9e:23:4f:ee:b2:a5:ae:31:c7:ff:6f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 13 02:00:34 2025 GMT
Not After : Jun 14 02:00:34 2025 GMT
Subject: CN=4bf8da6edd47d98ebf75e6c1f8a38638e27b6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:92:ec:57:4e:11:0e:f7:5f:bc:c2:97:13:
70:0a:e1:fc:ad:6e:2a:d1:cc:24:8d:e7:04:99:e3:
86:35:a5:7a:45:a1:1a:51:83:7e:2f:41:63:20:34:
dd:d5:c7:c1:a6:cd:bb:09:c4:e1:dc:80:2e:93:94:
46:27:5d:49:a4:ed:1c:93:f5:3b:d5:41:e4:3d:21:
5a:ef:93:f0:3c:54:af:bc:fe:e0:ea:cd:e6:c7:64:
0b:64:8b:30:d8:28:43:87:21:29:22:7f:c2:18:71:
dd:d1:27:28:63:0c:67:34:cb:9a:62:e8:7d:d4:bd:
19:d5:5d:77:bb:83:6c:f5:8f:33:39:23:a3:41:2c:
2c:5a:27:e1:0f:c0:3b:98:e7:f2:9d:8a:3b:9c:83:
d1:91:38:59:7e:48:54:e1:f7:4f:3e:d1:dd:4c:04:
d2:c2:9d:4e:91:29:15:e3:70:2f:1e:b2:1f:a7:28:
ef:12:0e:15:be:ba:2f:fb:c0:b3:1a:7e:33:f8:41:
c3:54:55:84:20:f1:a7:64:14:2c:98:c1:2c:42:b7:
e6:23:5c:b7:d7:64:00:28:db:47:45:04:80:61:23:
20:c3:78:fd:80:6b:3f:ba:ff:ec:ff:49:43:81:7a:
82:38:5c:20:35:84:b3:1e:38:85:62:1a:ff:8a:00:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:DA:6E:DD:47:D9:8E:BF:75:E6:C1:F8:A3:86:38:E2:7B:6D:F6
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5d:25:e8:21:03:56:57:5a:09:65:71:19:0c:cb:ed:b3:d6:
6c:46:ae:2f:d2:8b:15:2b:a9:78:39:44:25:2e:96:d2:13:11:
bc:ad:37:17:a6:76:6f:34:a4:09:8f:de:24:d5:cf:f2:ef:4f:
7d:12:78:63:24:89:d0:93:47:d6:25:7b:35:c8:f2:1b:97:35:
7e:72:07:75:87:5b:35:1b:a3:67:14:cc:95:72:ed:29:cb:2b:
c2:02:32:3c:93:61:59:9b:a5:0d:22:30:27:bb:6b:12:4c:2f:
d8:e5:ad:5f:50:ea:d5:77:9c:2e:91:b8:2d:7e:5f:f7:6d:95:
e8:df:7b:24:31:4a:e5:50:38:88:ad:82:ee:06:a4:26:dc:3b:
95:2b:ef:b3:11:42:ff:ec:18:b3:93:d2:b7:1f:af:43:50:f5:
95:29:57:47:4a:25:e8:ce:87:01:7a:96:5c:96:aa:e0:b4:51:
f0:bb:14:79:80:29:dc:06:d7:42:f7:76:18:ae:17:6a:10:2c:
cc:e5:83:2f:e6:a7:ae:69:38:1c:68:1a:04:0a:50:5a:97:a0:
eb:dc:5f:a3:3a:a4:86:57:38:8a:8a:9d:73:13:c1:1d:6a:23:
44:ab:e1:1c:3d:cb:82:4a:01:03:39:27:61:cc:0b:34:6c:5b:
0d:b4:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:49:01 2025 by rpki-client