Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: GJzosXfaRifqe0VLCUEubUSlU2YPqmyIP2kB/VLvxxc=
Subject key identifier: F2:2E:41:16:87:F0:22:D2:C5:8C:75:74:97:15:5E:D9:F9:8E:E5:8C
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01965A951B3127DF1554BC271758A7A00639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 05B0
Signing time: Mon 21 Apr 2025 23:00:43 +0000
Manifest this update: Mon 21 Apr 2025 23:00:43 +0000
Manifest next update: Tue 22 Apr 2025 23:00:43 +0000
Files and hashes: 1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: hG1kYAEgzcBRPWlZz2hYc6BGv1re2Ks1uki/xz3Bm1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:1b:31:27:df:15:54:bc:27:17:58:a7:a0:06:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Apr 21 23:00:43 2025 GMT
Not After : Apr 22 23:00:43 2025 GMT
Subject: CN=f22e411687f022d2c58c757497155ed9f98ee58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:ba:cf:64:a9:4c:73:da:a3:38:fd:9e:a0:
59:be:81:37:7c:2f:d6:a6:f3:e5:91:85:5a:a4:b2:
43:54:56:ce:f0:04:9f:d6:5f:94:9f:81:4a:97:7f:
35:d0:3d:33:e0:f3:94:69:84:7a:70:65:10:9c:bb:
85:b3:8f:e5:af:ca:42:f3:4b:ab:c0:47:14:31:c2:
f8:a5:ed:48:2f:b5:45:3f:55:ce:f8:e5:f0:1d:6e:
57:e1:5e:24:89:9b:3f:a3:92:bd:c0:5d:6b:dc:fe:
ce:28:8e:43:58:44:79:fd:8a:2d:b4:19:d2:aa:5a:
86:bd:46:55:41:51:7c:24:ef:81:96:0e:85:99:e9:
93:9d:36:1b:1a:60:be:c9:01:da:10:cc:ec:4b:56:
4d:0c:c9:c3:0c:43:35:f4:b0:3e:52:72:45:08:e3:
01:07:27:ad:af:bb:2e:5a:90:64:d7:19:3b:b5:34:
1e:b1:d3:85:c3:ea:b8:de:9b:94:64:fd:8c:ac:53:
19:ed:a4:28:b5:21:2d:0b:b7:51:90:ab:e9:ba:6e:
fc:2a:ea:e9:7c:15:57:3a:5d:41:64:51:17:de:a0:
db:31:64:cb:fe:ad:2e:3c:40:55:42:fb:d8:e2:3e:
61:4b:49:ef:7f:7e:1f:34:bd:77:d2:78:ce:df:01:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:41:16:87:F0:22:D2:C5:8C:75:74:97:15:5E:D9:F9:8E:E5:8C
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ee:cc:fe:21:d3:e6:7f:7b:84:31:d5:ad:74:77:b8:4a:eb:
1b:f9:40:86:37:f8:a3:34:79:e6:f2:40:b9:ec:bf:25:d8:83:
53:07:7c:4d:be:06:3d:04:0b:b9:ea:f3:9c:8c:a0:b9:61:61:
2b:fb:f2:01:80:dc:f9:a7:4d:d6:5e:da:58:71:52:15:0c:e5:
f9:1a:52:86:f9:b3:a5:a5:89:a9:40:b8:08:1a:f5:87:b8:59:
56:f4:da:75:78:d7:d0:3b:99:39:f8:b6:e8:27:f7:c3:5e:86:
a1:2d:c6:e4:44:96:66:83:b0:f2:11:8f:d5:c5:64:3d:5b:b6:
16:67:9e:17:52:38:19:ee:86:3b:e3:ac:48:d6:ac:d1:c5:46:
31:bd:4a:ca:e8:b4:7c:04:57:df:e0:75:19:d9:ff:0f:ff:0e:
34:1d:ab:df:ed:e3:bd:b6:4b:6b:7b:d1:64:05:28:60:bb:cc:
65:fc:45:75:f3:1c:36:56:7e:59:f7:dc:91:68:df:b9:99:3a:
92:cf:8b:2f:70:2b:e7:2b:83:33:59:80:40:46:7f:5c:6d:ff:
2d:d9:78:59:2b:88:ed:43:3f:05:03:6b:ec:26:29:0c:da:79:
1a:e1:81:a9:bd:52:a1:34:4d:9f:e6:7d:0e:6c:ac:38:9a:5b:
11:14:78:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalRsxJ98VVLwnF1inoAY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw
YTdkZGIwHhcNMjUwNDIxMjMwMDQzWhcNMjUwNDIyMjMwMDQzWjAzMTEwLwYDVQQD
EyhmMjJlNDExNjg3ZjAyMmQyYzU4Yzc1NzQ5NzE1NWVkOWY5OGVlNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIG6z2SpTHPaozj9nqBZvoE3fC/W
pvPlkYVapLJDVFbO8ASf1l+Un4FKl3810D0z4POUaYR6cGUQnLuFs4/lr8pC80ur
wEcUMcL4pe1IL7VFP1XO+OXwHW5X4V4kiZs/o5K9wF1r3P7OKI5DWER5/YottBnS
qlqGvUZVQVF8JO+Blg6FmemTnTYbGmC+yQHaEMzsS1ZNDMnDDEM19LA+UnJFCOMB
Byetr7suWpBk1xk7tTQesdOFw+q43puUZP2MrFMZ7aQotSEtC7dRkKvpum78Kurp
fBVXOl1BZFEX3qDbMWTL/q0uPEBVQvvY4j5hS0nvf34fNL130njO3wHgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIuQRaH8CLSxYx1dJcVXtn5juWMMB8GA1UdIwQY
MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt
MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5
LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaO7M/iHT
5n97hDHVrXR3uErrG/lAhjf4ozR55vJAuey/JdiDUwd8Tb4GPQQLuerznIyguWFh
K/vyAYDc+adN1l7aWHFSFQzl+RpShvmzpaWJqUC4CBr1h7hZVvTadXjX0DuZOfi2
6Cf3w16GoS3G5ESWZoOw8hGP1cVkPVu2FmeeF1I4Ge6GO+OsSNas0cVGMb1Kyui0
fARX3+B1Gdn/D/8ONB2r3+3jvbZLa3vRZAUoYLvMZfxFdfMcNlZ+WffckWjfuZk6
ks+LL3Ar5yuDM1mAQEZ/XG3/Ldl4WSuI7UM/BQNr7CYpDNp5GuGBqb1SoTRNn+Z9
DmysOJpbERR4rg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:06:44 2025 by rpki-client