Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: 62hnP9HH4hgj86d8hpyFTbl6ItdcHkJG8nGCWd/1/Z8=
Subject key identifier: 7E:98:3F:FB:A6:20:68:DA:CF:7F:24:BE:F9:20:7B:E8:1C:58:98:A2
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01975F4ABE7FAD2E6CBE6B38A91D0EB4554C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0637
Signing time: Wed 11 Jun 2025 14:00:23 +0000
Manifest this update: Wed 11 Jun 2025 14:00:23 +0000
Manifest next update: Thu 12 Jun 2025 14:00:23 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: ChzmBfxMqN8aoHt6AU8tNlulUyhXdj+T51ir196gDWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4a:be:7f:ad:2e:6c:be:6b:38:a9:1d:0e:b4:55:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 11 14:00:23 2025 GMT
Not After : Jun 12 14:00:23 2025 GMT
Subject: CN=7e983ffba62068dacf7f24bef9207be81c5898a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:d4:56:b3:88:42:3e:44:c5:fd:1a:40:af:
d3:19:92:6e:55:2e:3f:c8:8c:84:d7:4a:02:ae:72:
27:14:1a:07:b4:48:97:42:d0:fd:39:fa:4a:72:5f:
13:3b:96:6b:11:b4:27:ac:72:bd:9c:91:3f:a4:49:
c8:69:8f:de:97:3b:73:97:e1:da:84:d6:ef:80:7e:
5f:ec:49:dc:73:a2:ab:18:c2:4a:9f:f5:5f:8c:fd:
0d:2b:41:a6:26:69:f1:9a:6e:7e:48:3e:ab:b8:2e:
35:6e:95:25:a8:e7:f2:f3:10:c3:a2:be:03:29:89:
5e:de:af:e9:f7:dc:30:2f:d2:bb:bb:6a:f0:47:f0:
49:2f:4a:c0:f9:1c:40:c2:1d:1d:0e:0d:27:1e:3c:
14:f2:eb:73:a0:74:fa:29:5d:c4:72:02:d6:1a:72:
67:4a:7b:8c:3b:f0:72:2c:57:f1:67:84:2a:28:2e:
ba:6c:73:09:cb:2e:e9:1d:fe:74:6c:6a:58:a7:50:
df:ef:7d:ad:77:89:94:1f:ee:f3:b8:95:9a:f1:10:
31:ed:84:24:f0:0b:54:d1:05:ad:bf:2e:5d:df:ab:
58:41:4d:f9:10:0b:f0:d9:ae:e7:4a:07:71:f0:0f:
63:0c:e7:ae:c4:68:df:12:cc:df:9e:e7:7b:5c:55:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:3F:FB:A6:20:68:DA:CF:7F:24:BE:F9:20:7B:E8:1C:58:98:A2
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:36:4f:8c:46:da:01:d3:0e:c4:6b:ad:f2:ee:61:a0:53:1f:
00:d2:5e:ec:8f:ed:0a:6a:5b:3d:56:fb:d9:c6:65:a7:d1:c7:
a7:d7:7b:ed:72:16:4c:a0:2b:f6:e6:83:16:13:ef:bf:c0:95:
c6:c1:d8:04:f4:0a:56:bd:5e:db:5d:52:2b:e5:86:1c:a5:36:
f5:c2:92:d3:13:3f:fe:ab:81:eb:d4:99:df:3b:b3:0d:98:28:
84:9e:92:b8:10:b2:06:86:e2:d5:4d:79:50:7a:b1:48:29:38:
1b:5b:dc:5e:98:c9:17:5a:08:b6:c2:a8:6b:6d:99:d6:05:c5:
91:6e:ea:64:f0:29:56:01:8e:17:12:bd:0a:4e:48:6e:b9:0f:
f2:13:ba:1f:09:a1:8f:bd:e9:57:5b:cb:24:bf:a6:0a:2e:96:
81:59:6d:d8:7a:85:7e:79:c1:ac:19:86:2d:ab:5c:f3:c4:58:
a5:bd:e0:d8:63:8f:ea:89:78:4d:1e:6e:e5:0d:1c:58:5f:73:
8e:b0:d1:d2:8d:76:10:53:7e:2c:93:6c:0b:f1:23:be:8f:9c:
fd:89:f3:09:6f:bd:62:36:d1:aa:75:e7:42:3f:44:a4:77:a2:
f4:58:f6:8b:f5:40:69:ba:00:c9:e6:08:8b:8f:b0:9b:fa:b4:
eb:f2:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:59:33 2025 by rpki-client