Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File: rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier: 6pMwXpNSXDbE66wdpiXZfaBmo/SUdetLwpJP6syB7Js=
Subject key identifier: CE:A3:EC:86:31:1E:96:AA:FC:C9:CD:66:E4:B5:17:F0:D2:A9:50:4E
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer: /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial: 0197575A58B13FC1816022BC8AC6FC7E9E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number: 0F7E
Signing time: Tue 10 Jun 2025 01:00:28 +0000
Manifest this update: Tue 10 Jun 2025 01:00:28 +0000
Manifest next update: Wed 11 Jun 2025 01:00:28 +0000
Files and hashes: 1: QVia0R-C1R2OtBKefX55cNuuXdw.roa (hash: 5hYta4LOp/wluPpRpLQ0dqF8+c0Z+WJxjmlf/9qWqq0=)
2: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: UaKooPYUt8WvpZT1g4ru6F4VdDA1U2uZH4cGPohywrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:58:b1:3f:c1:81:60:22:bc:8a:c6:fc:7e:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Validity
Not Before: Jun 10 01:00:28 2025 GMT
Not After : Jun 11 01:00:28 2025 GMT
Subject: CN=cea3ec86311e96aafcc9cd66e4b517f0d2a9504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:cd:19:9f:93:0f:c9:aa:99:4a:f1:a0:12:
84:ea:73:6d:25:9b:79:f1:31:f1:a3:0f:a3:8e:37:
7e:cb:a4:2d:9c:ae:53:e3:9c:38:dc:c4:6a:26:fb:
ff:d5:67:4e:87:44:3f:71:f7:88:10:38:70:62:b1:
b3:0a:63:65:c0:15:3d:3f:be:c8:f0:96:a1:0e:68:
f7:3e:a9:c5:38:f7:4d:d4:58:a4:f6:b7:d4:21:e9:
ec:ad:83:c8:2a:1f:ed:86:d5:f6:86:1c:40:ce:f1:
19:78:33:98:df:86:1e:2a:db:eb:d9:35:93:5d:85:
83:e4:60:9a:a3:eb:7e:cf:e7:98:d1:05:33:d6:d9:
e3:5b:c9:8a:78:16:5a:70:f2:a5:ca:91:7f:e6:48:
11:a7:a8:4e:32:62:4d:a9:9b:5c:08:b9:b5:0e:f2:
4b:1b:04:18:a0:2f:0b:e3:1e:39:38:38:20:a6:66:
38:55:8f:bb:6c:85:bc:69:35:51:2c:37:c3:82:29:
ad:f1:68:b4:17:27:af:71:2c:0a:e1:5b:e2:5a:73:
0a:9a:9e:44:89:8a:f6:26:b6:eb:04:72:7a:29:01:
d2:d7:d6:0c:f5:62:47:47:73:91:ed:11:07:3f:f6:
39:aa:ea:d0:30:37:d3:7f:1c:8c:8a:7a:00:68:c7:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:EC:86:31:1E:96:AA:FC:C9:CD:66:E4:B5:17:F0:D2:A9:50:4E
X509v3 Authority Key Identifier:
keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:36:27:85:c3:ad:49:81:49:94:91:8e:14:00:4e:ab:29:
6e:2f:cc:a6:2a:9c:16:e4:12:8c:bb:e3:c4:e8:77:ea:33:f1:
20:32:18:ce:f1:3d:d0:f9:78:b9:cc:a5:c5:f3:bd:93:e8:54:
b1:11:ca:b1:6d:7c:33:21:02:cd:d2:da:3f:32:a9:d2:21:ec:
0f:56:81:d7:05:3c:a4:db:b1:ee:2f:67:8c:3a:21:26:0f:c5:
40:77:51:0d:c8:aa:c0:6c:08:93:35:5d:28:75:ec:51:1a:f2:
4d:e1:eb:21:9d:a1:84:58:dc:f7:6f:92:2b:30:dd:a1:b1:9b:
5a:90:ce:54:53:8e:34:11:fc:b1:10:2f:1f:67:e2:4b:69:3b:
56:22:80:44:ec:7b:fe:97:d2:47:96:34:89:d8:61:eb:9c:b4:
20:6b:96:8d:9b:b4:11:d8:0c:59:ce:98:d6:e4:0a:c7:d3:a7:
52:c9:86:b3:f9:39:c0:90:d4:bb:ff:d4:d0:c6:b5:83:78:06:
9d:6d:e9:b3:88:84:26:28:cb:87:a7:ae:e7:19:d1:2d:67:3e:
43:2a:87:cc:bc:89:80:3b:ee:09:9b:88:cd:86:91:c6:9b:e9:
be:45:8e:78:bf:e6:d4:c0:c2:f7:4b:e3:77:7d:76:0e:e0:26:
f5:13:f0:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXWlixP8GBYCK8isb8fp4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMTdiMWJiZTc4Y2U0MGFhMWVjNmQyNzc4YmMxZTRlYTI5
NTE2N2UwHhcNMjUwNjEwMDEwMDI4WhcNMjUwNjExMDEwMDI4WjAzMTEwLwYDVQQD
EyhjZWEzZWM4NjMxMWU5NmFhZmNjOWNkNjZlNGI1MTdmMGQyYTk1MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I3NGZ+TD8mqmUrxoBKE6nNtJZt5
8THxow+jjjd+y6QtnK5T45w43MRqJvv/1WdOh0Q/cfeIEDhwYrGzCmNlwBU9P77I
8JahDmj3PqnFOPdN1Fik9rfUIensrYPIKh/thtX2hhxAzvEZeDOY34YeKtvr2TWT
XYWD5GCao+t+z+eY0QUz1tnjW8mKeBZacPKlypF/5kgRp6hOMmJNqZtcCLm1DvJL
GwQYoC8L4x45ODggpmY4VY+7bIW8aTVRLDfDgimt8Wi0FyevcSwK4VviWnMKmp5E
iYr2JrbrBHJ6KQHS19YM9WJHR3OR7REHP/Y5qurQMDfTfxyMinoAaMfyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6j7IYxHpaq/MnNZuS1F/DSqVBOMB8GA1UdIwQY
MBaAFK4XsbvnjOQKoextJ3i8Hk6ilRZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmhleHUtZU01QXFoN0cwbmVMd2VUcUtWRm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NDg1YmUtZDc3OS00MWY1LWE1NTgt
ZTZhYzliNmEyMTllLzEvcmhleHUtZU01QXFoN0cwbmVMd2VUcUtWRm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80NDg1YmUtZDc3OS00MWY1LWE1NTgtZTZhYzliNmEyMTll
LzEvcmhleHUtZU01QXFoN0cwbmVMd2VUcUtWRm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDY2J4XD
rUmBSZSRjhQATqspbi/MpiqcFuQSjLvjxOh36jPxIDIYzvE90Pl4ucylxfO9k+hU
sRHKsW18MyECzdLaPzKp0iHsD1aB1wU8pNux7i9njDohJg/FQHdRDciqwGwIkzVd
KHXsURryTeHrIZ2hhFjc92+SKzDdobGbWpDOVFOONBH8sRAvH2fiS2k7ViKAROx7
/pfSR5Y0idhh65y0IGuWjZu0EdgMWc6Y1uQKx9OnUsmGs/k5wJDUu//U0Ma1g3gG
nW3ps4iEJijLh6eu5xnRLWc+QyqHzLyJgDvuCZuIzYaRxpvpvkWOeL/m1MDC90vj
d312DuAm9RPwCQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:15 2025 by rpki-client