Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File: XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier: 4Tfl1DhMSYV0Dv2o9FRqvO3oh58WzvMysY86+o+bqLM=
Subject key identifier: A0:6D:75:FB:A2:EC:7F:BC:80:77:D5:AF:40:68:2A:01:05:AE:5B:7A
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 019883575132BA36EDCE6964FEC832DF5E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number: 0CB6
Signing time: Thu 07 Aug 2025 07:03:14 +0000
Manifest this update: Thu 07 Aug 2025 07:03:14 +0000
Manifest next update: Fri 08 Aug 2025 07:03:14 +0000
Files and hashes: 1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: 5Omq8X7l2HODzl2Yd70gD0xpCIuq2JafFZ4k2zc1PFs=)
2: mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa (hash: eEF1vwGGqfylK4nRHvE5xtss/22xA/yBRdsBu2iNecU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:51:32:ba:36:ed:ce:69:64:fe:c8:32:df:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Aug 7 07:03:14 2025 GMT
Not After : Aug 8 07:03:14 2025 GMT
Subject: CN=a06d75fba2ec7fbc8077d5af40682a0105ae5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:58:02:e7:44:fd:1f:93:f1:ec:ec:91:64:
b6:c7:ee:e9:55:cf:df:38:f2:b7:7c:78:57:be:ae:
cf:5b:40:ab:5f:bf:4d:5e:52:99:30:b6:4a:f8:a3:
0a:50:f0:34:d2:2f:d9:eb:0b:18:a9:dd:06:a2:7e:
c8:4a:57:39:33:e5:40:c4:f5:39:9b:ae:e2:63:af:
d4:27:85:db:32:dd:2a:1e:a8:23:fc:86:c4:30:35:
58:e5:3e:b6:30:7e:a9:7b:c1:05:7c:22:d0:73:b8:
5b:6e:13:11:d5:4b:6e:7a:9b:6c:f1:28:20:6c:be:
05:b7:84:26:f2:27:43:ca:9b:79:73:df:c7:8f:13:
2e:6b:86:48:8e:5f:58:1c:49:52:a1:b2:f7:fd:16:
16:42:3b:62:a7:96:45:e9:58:25:20:34:58:fe:b8:
99:03:14:41:84:5b:01:38:3a:99:ef:92:69:9b:fc:
7d:6a:30:c1:46:00:ae:43:ec:cc:90:4c:52:89:bd:
70:f1:3a:c7:d4:64:fd:e8:35:cf:09:13:c0:d0:2f:
4c:98:b7:bb:81:a1:7b:4b:72:9d:e4:3c:1a:a9:85:
e3:e3:89:58:cb:21:95:c2:8d:6e:11:c7:54:a0:28:
99:ff:82:8a:7d:54:1b:50:82:ac:e8:3b:39:bf:0f:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6D:75:FB:A2:EC:7F:BC:80:77:D5:AF:40:68:2A:01:05:AE:5B:7A
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:a6:0e:3c:96:a2:c4:fd:58:34:ff:42:01:e0:15:c3:e6:
e1:70:3f:53:62:83:fd:b1:3a:5c:05:c8:dc:aa:99:a4:0d:92:
8c:07:59:6a:6e:c6:5d:e1:0f:06:ac:f4:35:e5:28:db:c4:3b:
4b:17:8a:8f:73:bd:24:dd:0c:88:c2:9a:ce:53:cb:d8:75:c1:
36:58:ab:41:d9:d4:0d:24:dd:ba:0e:4f:27:62:3f:32:4c:f0:
90:3d:73:f4:51:ba:ef:9c:e4:fc:25:cd:cf:a9:c0:3d:10:57:
ce:70:21:0e:5d:eb:ef:0c:0c:6e:f5:95:28:2a:89:d8:1b:75:
c3:74:5a:25:47:33:1c:0f:cc:f0:fe:2f:e0:93:01:33:5e:4e:
df:5b:f7:94:4b:d3:bf:64:ef:59:e1:e9:29:d0:dd:14:42:94:
33:bc:15:fc:8e:7b:9b:40:ab:ba:f2:0a:e2:be:41:a8:cc:6a:
65:81:be:39:7e:94:6c:f0:63:7c:28:c0:5f:67:0b:40:0d:bf:
bd:7c:0d:03:ac:d6:ec:cc:e1:6a:86:af:70:e9:87:6e:b4:0d:
1e:cb:2f:a7:79:50:b4:c2:f6:b2:c8:4a:cf:e8:03:3d:2e:77:
56:1d:e9:a8:01:a9:44:3d:12:a7:cd:b1:16:8e:23:b9:4a:42:
ba:e4:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:34 2025 by rpki-client