Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: kAOsGt8cHplVtceK2l+K+I1vcQFC9Md/pkOK2T7l564=
Subject key identifier: 2C:F6:D5:6B:22:C1:A9:1C:F2:F5:91:92:08:EB:FA:9A:ED:6C:1C:63
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019A51877C8C5BA06837E01099B161FF7612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 07C4
Signing time: Wed 05 Nov 2025 01:00:25 +0000
Manifest this update: Wed 05 Nov 2025 01:00:25 +0000
Manifest next update: Thu 06 Nov 2025 01:00:25 +0000
Files and hashes: 1: HlWQb2FJPJevQzdN-672g7_czRw.roa (hash: RXUVTX63EDXGPDEfUV3NoAdiOJHw8+fXf2xrTwsVvM0=)
2: Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa (hash: MFZ45SF5Rc4M+oQuJ6ydMNsNfmBIGzpqiYFUJ97A20U=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: L8t5O0104JvsS7VXwkfgQZgVfcnxl9yM82jQo4U9lnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:7c:8c:5b:a0:68:37:e0:10:99:b1:61:ff:76:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Nov 5 01:00:25 2025 GMT
Not After : Nov 6 01:00:25 2025 GMT
Subject: CN=2cf6d56b22c1a91cf2f5919208ebfa9aed6c1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:d8:f4:e2:a4:f3:65:02:b4:77:b2:12:cc:
ba:3c:b8:5c:56:cc:de:f8:65:11:37:96:62:3e:67:
30:bd:e4:87:3a:05:34:a1:4f:54:d7:20:5b:64:eb:
8a:02:b1:67:1f:92:68:14:22:b9:c5:4b:53:ac:1c:
9c:e4:74:51:4d:3d:25:4f:7d:81:15:d9:11:b9:ed:
86:ac:7d:e7:5d:5c:e0:1d:84:d4:1f:13:ed:b6:04:
97:68:5b:c8:7d:b6:5a:58:6b:09:f3:4b:d4:00:28:
24:73:90:f1:8e:25:2e:b3:bd:06:89:1f:a4:17:74:
1a:03:1c:6a:71:20:29:0d:3f:57:b9:4a:15:bd:80:
f8:1c:fe:c3:a5:4d:09:66:d8:ec:bf:e7:d8:0b:db:
18:98:06:aa:ec:66:27:f5:49:2e:b9:7a:45:7d:51:
c2:20:21:6c:ee:30:38:9e:c3:bc:d5:36:44:89:6a:
49:a9:fb:97:b0:03:c3:e0:ec:07:a9:f7:8a:a1:6a:
5b:89:fb:73:95:52:87:b2:92:93:6e:b1:5a:c9:a3:
20:72:22:34:76:34:30:02:1f:04:5c:ac:45:64:66:
4b:a9:7a:09:d3:75:be:a6:24:f5:a2:b7:f0:73:83:
87:b2:d4:92:b2:73:ff:c5:39:77:44:ba:d1:b8:4d:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:D5:6B:22:C1:A9:1C:F2:F5:91:92:08:EB:FA:9A:ED:6C:1C:63
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:46:22:7c:0f:3a:48:c8:d9:01:93:7b:06:6a:0f:8c:18:e2:
b1:08:df:16:28:70:bd:6d:1a:15:70:9f:33:c6:a6:d4:64:b6:
b6:6d:fc:f4:0d:0b:b2:b3:9c:28:fd:6c:f9:07:86:65:e6:b2:
64:fa:fb:11:1b:df:58:3a:c7:c3:63:40:fa:af:15:07:ec:4c:
6e:df:ad:89:ec:b4:3a:7c:33:79:f9:83:8f:83:14:09:dd:9f:
4c:90:ab:3e:7a:b6:cf:7c:c2:11:6e:31:a4:3e:6e:ca:87:7f:
56:c2:79:0a:26:6c:04:90:6b:e6:eb:d6:08:7c:b2:16:9a:64:
01:d9:fd:41:6f:d3:58:4d:d4:98:58:ff:0c:41:c3:0a:fa:e9:
69:be:4b:cb:83:9b:aa:db:f7:af:04:d7:d9:09:00:60:5b:74:
02:b1:94:d3:a9:ba:a0:f0:3b:4b:32:75:5c:2a:73:4e:94:bd:
d7:e5:6a:e7:5f:b8:29:88:dd:0f:b5:c0:1e:f2:8a:98:29:51:
87:8d:9d:7c:21:5a:5a:00:60:ea:51:ec:72:1c:3f:db:9f:c3:
de:a1:2a:b0:65:2e:12:89:c3:46:b7:7b:32:ba:c8:91:e2:a1:
55:3a:4d:8d:d1:c9:2d:94:13:24:43:95:4e:d4:3a:38:75:0c:
f0:2b:2e:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh3yMW6BoN+AQmbFh/3YSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw
YTdkZGIwHhcNMjUxMTA1MDEwMDI1WhcNMjUxMTA2MDEwMDI1WjAzMTEwLwYDVQQD
EygyY2Y2ZDU2YjIyYzFhOTFjZjJmNTkxOTIwOGViZmE5YWVkNmMxYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj7Y9OKk82UCtHeyEsy6PLhcVsze
+GURN5ZiPmcwveSHOgU0oU9U1yBbZOuKArFnH5JoFCK5xUtTrByc5HRRTT0lT32B
FdkRue2GrH3nXVzgHYTUHxPttgSXaFvIfbZaWGsJ80vUACgkc5DxjiUus70GiR+k
F3QaAxxqcSApDT9XuUoVvYD4HP7DpU0JZtjsv+fYC9sYmAaq7GYn9UkuuXpFfVHC
ICFs7jA4nsO81TZEiWpJqfuXsAPD4OwHqfeKoWpbiftzlVKHspKTbrFayaMgciI0
djQwAh8EXKxFZGZLqXoJ03W+piT1orfwc4OHstSSsnP/xTl3RLrRuE2OawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz21Wsiwakc8vWRkgjr+prtbBxjMB8GA1UdIwQY
MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt
MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5
LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0YifA86
SMjZAZN7BmoPjBjisQjfFihwvW0aFXCfM8am1GS2tm389A0LsrOcKP1s+QeGZeay
ZPr7ERvfWDrHw2NA+q8VB+xMbt+tiey0OnwzefmDj4MUCd2fTJCrPnq2z3zCEW4x
pD5uyod/VsJ5CiZsBJBr5uvWCHyyFppkAdn9QW/TWE3UmFj/DEHDCvrpab5Ly4Ob
qtv3rwTX2QkAYFt0ArGU06m6oPA7SzJ1XCpzTpS91+Vq51+4KYjdD7XAHvKKmClR
h42dfCFaWgBg6lHschw/25/D3qEqsGUuEonDRrd7MrrIkeKhVTpNjdHJLZQTJEOV
TtQ6OHUM8Csu3g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:37 2025 by rpki-client