Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: n7NPMebFXFZcevTXTp5gb8rN1QJobCBWfpzehwplVjQ=
Subject key identifier: 32:5C:14:4D:34:D4:45:02:19:20:EB:A4:10:C2:55:35:A0:3B:22:E4
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 0199FB45B35A61CCF23FD3E86426B17AF74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0796
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: HDVuIW9XiSGyuuDPbsTsfpK9Hjg.roa (hash: fjWKt3Cr3fyL7h6gCEroZ6zh75H5knry8QHJWUEc9+A=)
2: SfNDVxDssqhMgryNzm12YQX_5D4.roa (hash: JNj63Cat+McVVvzwc6C6pT5U3+pDTZGt0yQbmqaAU+I=)
3: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: hcX+CQUKsFeZ9fUyf8pJX5Ykojyb+yBUCK6alS07BbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b3:5a:61:cc:f2:3f:d3:e8:64:26:b1:7a:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=325c144d34d445021920eba410c25535a03b22e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:bd:52:82:09:df:88:40:18:0c:b1:9d:56:
2a:25:82:29:f8:a5:28:62:b6:24:0d:00:82:74:eb:
c0:1f:f2:f5:af:30:a4:2f:15:59:62:51:9d:e0:a7:
db:13:d2:74:ae:b7:0f:ab:b1:0b:3f:7b:62:ca:1d:
fb:5b:81:3f:17:bd:6c:df:96:58:13:8c:43:41:59:
f8:d2:76:c0:cd:6f:3d:94:f1:ae:f5:85:bc:d4:68:
24:d0:de:26:d4:03:9f:b7:4e:60:27:fb:8b:b0:fd:
5a:f1:22:73:38:c8:95:57:6a:7e:78:f0:8a:b3:c8:
ec:e6:91:c0:29:59:08:cc:00:1c:25:d5:e1:18:bc:
a8:f9:e2:2d:9d:34:15:25:77:34:fc:fc:fa:07:5f:
62:3c:37:b7:9f:87:2b:77:d3:8a:0a:6e:25:b8:95:
7f:be:94:fe:cd:78:09:47:cf:81:0e:6f:1d:09:31:
f5:51:3e:76:e3:aa:e2:83:d8:1f:a1:a0:49:83:02:
b6:05:7e:44:36:58:7b:cf:3c:c6:20:4c:4e:94:2e:
01:f7:f3:e0:e0:c1:1a:0c:ee:b6:9b:10:c8:87:c3:
52:c7:a7:b4:ad:94:83:9a:df:29:06:2f:95:90:75:
71:26:2e:17:77:6e:af:d6:02:a1:9a:a7:1e:aa:25:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:14:4D:34:D4:45:02:19:20:EB:A4:10:C2:55:35:A0:3B:22:E4
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fc:ac:e5:c2:2d:41:ab:a2:58:9d:d9:2e:4a:23:22:ae:6b:
c5:2a:ed:2a:91:b7:ce:7b:a6:fb:c4:7d:92:27:a4:4d:40:3a:
73:ce:45:1c:f9:c8:8f:59:65:c9:f1:a6:9e:12:25:89:86:5f:
04:75:2e:a0:39:d9:04:65:ec:76:66:7a:26:e3:20:a6:ab:50:
e2:ab:3e:41:ab:c7:f0:ba:aa:91:6a:ff:c0:5a:e3:d2:fc:70:
42:bc:96:d7:57:12:44:93:69:31:36:00:86:3c:2f:c7:a2:ab:
dd:5c:8f:01:0b:87:08:42:83:04:0f:de:7a:c1:3e:02:d4:1a:
ac:2f:f3:47:a9:12:2b:42:ad:db:d3:e0:0a:d4:9e:3c:69:2f:
24:62:20:3e:7b:03:eb:6c:be:42:ca:93:50:dd:7c:cf:b5:fd:
8b:bf:cf:38:1a:e0:c0:f4:30:a7:aa:2b:cc:96:65:33:b2:65:
61:3f:a5:c2:f9:62:3c:34:4a:b5:e8:14:33:5a:b4:1a:8c:fb:
0a:9c:5d:5d:4d:3a:87:ac:81:31:6a:8b:d9:31:51:24:2e:4a:
c8:55:7c:3c:a4:03:6e:7f:9b:c7:44:17:cb:0a:6d:00:31:ab:
04:65:38:e4:8a:f1:4b:8c:2c:8a:db:21:f3:a3:c1:c4:a8:85:
99:99:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:45 2025 by rpki-client