Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: nb7G8JMHaYgWNJB2YYbfzwcpE3rk6CC5UcHGRkcW7ak=
Subject key identifier: A6:AE:6D:6C:DC:D1:C0:BC:B5:BA:FC:3A:C1:6A:58:25:3E:1D:A0:C2
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 0197CC4CC300DBCB5868CA5F11BE4BF98D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0670
Signing time: Wed 02 Jul 2025 18:01:12 +0000
Manifest this update: Wed 02 Jul 2025 18:01:12 +0000
Manifest next update: Thu 03 Jul 2025 18:01:12 +0000
Files and hashes: 1: EqC_6U8Vu2HfOSZe-aA4-HjYFqM.roa (hash: pKv0SZrmZC4/ndco71VpUxRBg8Xk6dp1C+rCl+d4M5U=)
2: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
3: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: M4/IkW2xi+4UFWegtfM1F3cdhiXEVMIc7Fgg0CSAm+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:c3:00:db:cb:58:68:ca:5f:11:be:4b:f9:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jul 2 18:01:12 2025 GMT
Not After : Jul 3 18:01:12 2025 GMT
Subject: CN=a6ae6d6cdcd1c0bcb5bafc3ac16a58253e1da0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:37:a0:86:fc:a2:f4:54:f6:cd:64:46:11:
3c:64:1f:68:a0:c7:b9:7e:70:ee:be:e8:78:e4:21:
35:f4:28:5e:1a:9d:e9:fb:8c:1b:b4:80:9f:5f:ff:
e1:be:31:20:f2:c7:da:16:02:2c:1d:45:d0:8a:da:
49:4e:e8:9d:42:13:77:09:ea:14:e9:f1:2b:b7:32:
2b:75:bd:ee:73:d0:07:ab:3e:69:b7:25:96:90:70:
d2:26:fe:73:ba:82:f7:1e:5f:21:f8:5a:f9:a2:42:
ca:7a:0b:97:d9:72:47:c5:3f:58:7f:f2:46:b0:1a:
c4:dd:e6:9c:9e:67:a6:82:20:2f:b0:e5:e7:8e:3b:
7a:f2:5e:7f:ba:62:52:b3:2e:11:89:9d:e6:91:1d:
10:e2:2f:6e:9f:80:71:79:94:b0:28:16:62:89:8d:
08:56:40:91:bb:82:a1:08:98:29:a7:66:f9:80:4f:
75:e3:31:c1:7d:5c:0b:99:5b:27:26:21:61:47:f5:
6d:a1:eb:0b:71:dc:4b:25:e8:00:42:67:f2:3d:e1:
4f:c9:b6:7d:92:36:d9:41:a7:ef:39:50:52:a6:d8:
9d:89:a9:b7:6b:45:b6:6e:aa:f1:92:a8:38:bb:0f:
f4:7f:d5:93:2f:bb:5c:96:db:89:01:6b:5a:78:19:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:6D:6C:DC:D1:C0:BC:B5:BA:FC:3A:C1:6A:58:25:3E:1D:A0:C2
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:f8:8f:0a:98:b8:c2:d9:58:41:d9:9a:17:90:e1:e9:22:
72:ca:21:e6:c7:fa:51:47:ad:7b:51:dc:62:7f:8b:cf:6f:af:
05:0c:d0:5e:f2:f3:4b:0a:f1:7d:1c:51:05:29:4b:d9:21:80:
b6:5e:82:1e:d0:7a:b4:a2:09:32:1b:c6:96:f7:90:9b:11:84:
76:3c:f6:8e:5a:40:9d:37:78:6e:70:f2:70:bc:ab:0b:2a:29:
f5:47:4b:12:ab:22:1b:a5:07:58:79:42:98:d3:53:7e:0d:b5:
46:d7:10:d4:f4:eb:c2:74:1e:5f:7c:98:80:ad:2a:53:95:8d:
0f:83:b4:cd:db:79:9b:aa:ff:b0:bf:50:23:7e:aa:16:82:ca:
61:40:56:18:06:ec:de:51:54:91:81:bb:a8:48:13:7c:07:ef:
b8:db:8b:3e:fb:9f:ce:8b:9e:ed:01:01:87:8b:fa:bf:7a:0e:
ef:a1:d1:3c:dd:e1:c8:0b:27:67:39:8d:9c:3e:a1:5c:f7:be:
1f:95:95:bc:22:3f:a1:60:4f:f2:f2:74:20:50:73:30:14:fd:
a8:e9:19:bc:f3:4d:53:ef:62:08:d1:15:4e:24:d1:4b:2b:a0:
78:fb:ca:d4:00:fa:eb:31:87:c9:73:e2:29:5d:53:1a:7f:9c:
6c:4b:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:47:42 2025 by rpki-client