Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: cOltUYt7B0hbn+Q0Z6wGEUy62ZjDxMUm2Ae/h4r6+nw=
Subject key identifier: F5:39:65:E3:54:E1:33:35:FE:30:4A:21:D8:EB:FF:1B:49:4B:B7:3F
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019688EE4082CB00E05B8127858431DE7B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 05C8
Signing time: Wed 30 Apr 2025 23:00:37 +0000
Manifest this update: Wed 30 Apr 2025 23:00:37 +0000
Manifest next update: Thu 01 May 2025 23:00:37 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: fyHcynO2mrQ4dEFp+tz0LHPIJ5pseiRJLsdQ6Et/0iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:40:82:cb:00:e0:5b:81:27:85:84:31:de:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Apr 30 23:00:37 2025 GMT
Not After : May 1 23:00:37 2025 GMT
Subject: CN=f53965e354e13335fe304a21d8ebff1b494bb73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:ab:a8:84:b1:fd:58:e5:94:82:26:b7:b5:
f8:7d:19:e2:4a:49:80:77:26:d9:bd:6f:ec:3c:26:
a2:d7:76:42:b8:7d:b7:44:7a:1e:d7:a1:82:8b:d2:
8d:a2:92:85:48:e6:b9:f0:60:ff:4d:4f:15:9e:b1:
fb:18:a7:62:b9:0d:95:ca:c2:4b:fe:dd:4e:c7:74:
5c:a2:7d:69:cf:48:d5:8b:cf:d8:34:41:b8:18:de:
fc:5e:2f:60:19:50:7a:00:ad:54:e2:ff:c6:4c:c6:
77:dd:2c:0f:8f:c1:31:dc:42:92:a1:e6:4a:14:82:
52:b4:2e:ea:b8:8c:8f:8c:69:e0:9b:61:d6:2a:aa:
cb:1f:9d:1c:3c:0b:af:ed:4b:37:e6:0b:c8:5f:bb:
c9:81:a3:21:7b:8f:db:21:14:7a:8a:fd:9b:39:0d:
76:5d:24:11:92:d9:22:b3:3d:f3:ed:9e:81:75:24:
40:c1:fe:7d:6f:29:7f:01:93:f5:df:76:b8:ce:f0:
03:44:35:d5:42:93:e9:ed:12:39:e0:18:35:10:7b:
c0:33:71:04:76:e6:64:9e:82:b7:0d:10:ed:d0:99:
a8:03:87:6e:f4:b6:b9:4a:61:c5:a3:ea:c4:90:38:
01:f5:b9:3a:b9:3a:27:e5:82:5a:06:0b:11:46:8d:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:65:E3:54:E1:33:35:FE:30:4A:21:D8:EB:FF:1B:49:4B:B7:3F
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1c:a9:ef:be:82:28:81:4e:ac:f1:98:87:47:0e:6d:94:38:
b2:61:23:15:56:04:4a:31:7f:1d:90:05:5a:82:23:2e:e5:9d:
a3:40:77:e6:45:72:ce:2a:93:1d:08:3b:85:28:ef:b3:fd:42:
1d:3f:92:6b:1b:1c:ba:e1:4f:8f:a9:34:18:16:ab:ba:26:e7:
63:ab:85:71:c1:9f:f9:3d:87:ff:41:80:d2:dd:be:07:2e:b9:
36:e4:ff:74:56:73:a6:3a:9a:66:de:c2:23:48:c9:db:24:2b:
59:93:47:8c:94:0e:03:7d:e4:27:b8:40:aa:31:08:6b:07:63:
af:c5:d7:19:ae:4f:4d:74:57:49:e5:15:e6:4c:2b:a0:e9:7e:
44:39:c4:25:68:ef:fa:90:0c:6b:54:03:55:87:4f:ef:f5:03:
d4:f8:d3:9b:a6:05:a2:17:1b:de:f4:c4:ec:5c:51:ed:bb:12:
51:db:ac:28:3f:c4:e8:75:8e:f8:e1:b7:11:ee:83:b1:d8:96:
be:52:d8:d2:92:76:e2:92:19:cf:2e:6e:a7:e6:55:41:61:1f:
c0:2f:6e:f3:0c:4c:36:bb:1b:77:78:6d:55:0e:78:1d:8b:62:
47:38:6e:d5:06:59:05:49:7e:a1:a9:83:aa:27:22:5a:a9:35:
41:d5:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:56:46 2025 by rpki-client