Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: S0/XjmDCryqmqMQqXfK2wrrJbCcmsFeJZ2ogSMQdnmA=
Subject key identifier: FB:4D:3A:73:3A:9D:DA:43:6E:5A:6D:83:C7:AF:C0:49:57:7D:C4:EA
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01989780773E58B0A0C3EDD387CEDF01161D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 06DB
Signing time: Mon 11 Aug 2025 05:00:35 +0000
Manifest this update: Mon 11 Aug 2025 05:00:35 +0000
Manifest next update: Tue 12 Aug 2025 05:00:35 +0000
Files and hashes: 1: NbdZ6ugORBZjoDTrAWUrXkjwUuI.roa (hash: iQOa1RcfmoA/B6cMljXl71s2hXvSqumuFlMfJVKYx4s=)
2: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: 5veeRcOLnFqlRWc8huHtYEj1ibcNqOnQULCLX2UdGu8=)
4: j8oNt9hANamkwiamin0TpTWazBY.roa (hash: subsEJxSVKPKyiPGritcz7aS2vI4yQ6MWbUH2Gn9VAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:77:3e:58:b0:a0:c3:ed:d3:87:ce:df:01:16:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Aug 11 05:00:35 2025 GMT
Not After : Aug 12 05:00:35 2025 GMT
Subject: CN=fb4d3a733a9dda436e5a6d83c7afc049577dc4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:86:92:b4:82:42:2b:79:f4:ed:bb:c1:af:
94:78:63:01:e7:77:f8:db:10:e3:f9:0f:4c:19:ef:
db:f9:34:0a:b7:3c:a7:86:87:37:31:8d:e3:17:41:
85:2b:ea:58:40:3e:fb:c2:44:53:3a:fc:49:34:6b:
8d:2a:59:40:6d:6d:0e:77:56:e5:e5:24:c4:72:5e:
16:8a:d2:c6:04:5d:33:07:c2:e6:2d:4e:0d:9c:e1:
30:e0:02:d7:e6:83:bd:1a:a8:c0:83:fb:6d:27:7a:
25:61:16:2d:53:78:3f:34:57:50:f6:b5:5a:46:67:
d1:52:94:4e:0b:7a:a4:3c:dd:7f:18:cc:92:ba:9d:
b5:0b:df:df:7b:33:45:a4:c0:ff:29:44:ab:e2:e4:
7b:14:3e:a5:5b:53:1d:37:33:c9:b3:31:43:a4:2b:
a7:0f:c8:ef:a1:18:98:63:01:7a:61:2b:99:2e:37:
bf:6a:65:8f:c6:f1:e0:4b:5a:b4:cf:e3:7b:bf:9c:
8b:d9:68:92:bf:52:16:ee:23:9e:3b:1e:dd:0b:3a:
f3:06:fb:2c:77:33:fc:92:fa:0e:43:3d:cb:b9:c4:
e5:96:df:81:e0:2c:12:13:5f:31:92:75:19:3b:ef:
b7:cb:5c:4c:7d:87:48:0b:6d:ac:fb:a6:20:fb:7e:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:3A:73:3A:9D:DA:43:6E:5A:6D:83:C7:AF:C0:49:57:7D:C4:EA
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:f2:63:91:25:87:c4:d9:ad:a2:f8:ee:d0:00:f1:07:41:
9e:f7:71:62:e7:4e:ce:a6:70:34:90:f7:c8:d5:e4:df:2d:04:
0d:d2:80:c1:97:27:8e:b2:5b:fa:19:64:c1:52:02:0c:32:d3:
9b:9b:66:07:e7:1e:92:ab:ca:65:67:37:1e:83:0a:9f:86:e1:
de:fb:1d:dc:12:2c:91:19:64:50:d1:f1:9f:55:74:ad:d6:c7:
01:f9:5a:49:8b:b1:83:3b:a0:31:cd:ff:02:07:1c:78:82:bc:
7b:e8:8f:18:db:fa:41:97:33:ee:5b:5b:e9:6b:17:e7:8f:8d:
a3:c0:40:98:67:02:72:9c:92:04:7f:5b:b7:cc:54:e8:5b:64:
f7:cc:51:e0:e2:b0:80:54:ac:3a:da:ec:ab:13:56:13:7e:54:
25:39:5a:f6:03:5f:12:22:92:c6:b5:cd:fc:38:5d:38:4c:d6:
56:47:f8:2d:4e:c5:97:29:46:cd:a9:0f:18:ea:a7:64:9b:91:
d1:67:f7:b7:ea:da:c3:fc:e3:2c:8d:a3:42:ce:fd:a9:4d:0f:
3f:f8:41:a8:61:a4:b5:f2:3a:d1:e7:55:46:69:68:a5:ff:d5:
67:88:b7:3b:ed:2f:75:4d:3a:26:eb:84:99:18:2d:51:a6:f0:
89:c8:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:10:15 2025 by rpki-client