Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File: rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier: 5OEzj/MeSPStjJyPZfPYSoNS+9hH+X4HxPib7RD1qC4=
Subject key identifier: 57:25:F5:17:08:A0:DD:44:18:2A:9C:06:B2:15:0F:98:20:23:71:D9
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer: /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial: 01967755CBBB9569FE888D315687A23FBEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number: 0F0A
Signing time: Sun 27 Apr 2025 13:00:33 +0000
Manifest this update: Sun 27 Apr 2025 13:00:33 +0000
Manifest next update: Mon 28 Apr 2025 13:00:33 +0000
Files and hashes: 1: QVia0R-C1R2OtBKefX55cNuuXdw.roa (hash: 5hYta4LOp/wluPpRpLQ0dqF8+c0Z+WJxjmlf/9qWqq0=)
2: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: EjgAuqAblXbNFD5UC+gMTf9aRVx3+y77IwDh8fxEZII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:cb:bb:95:69:fe:88:8d:31:56:87:a2:3f:be:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Validity
Not Before: Apr 27 13:00:33 2025 GMT
Not After : Apr 28 13:00:33 2025 GMT
Subject: CN=5725f51708a0dd44182a9c06b2150f98202371d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:36:45:0b:b4:b3:b4:17:bb:d9:e9:52:82:
1c:0d:1e:fd:84:f6:4c:c3:b7:78:c7:22:de:7a:9b:
e4:22:df:03:9b:3d:47:a1:ed:82:22:65:90:9f:4c:
55:03:a4:7f:49:c7:b0:20:8c:ed:39:87:11:d2:19:
84:6c:bd:71:73:af:a2:5f:cc:45:42:b0:43:53:1d:
ec:57:18:95:95:ad:9c:ac:c0:a9:a9:2c:23:b6:73:
84:c9:df:7f:b6:b0:3a:b6:35:5b:5e:33:ab:dc:a0:
ea:62:c3:32:66:1b:58:12:1a:d9:3d:ed:d0:e7:9e:
83:bd:50:49:c2:e5:fb:65:cd:c4:3f:75:21:f3:df:
3e:70:6a:21:5e:82:05:12:46:56:9f:bc:88:48:ce:
1f:e9:12:b9:ff:66:4f:02:f6:b4:3b:b8:53:97:ec:
d1:e2:ab:93:31:62:9e:35:66:0c:af:67:ea:cf:6c:
18:b6:9f:6c:dd:90:c6:fe:c9:6c:df:7c:b0:d9:12:
96:78:f1:75:67:51:a7:6b:75:96:d0:ac:69:ad:6f:
33:1b:54:04:89:67:6f:7a:89:23:79:6e:95:81:3c:
a3:c3:76:70:d9:23:85:2f:95:30:0d:d5:b1:20:2e:
9f:50:44:f6:c3:c9:da:fd:2d:82:be:57:06:af:64:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:F5:17:08:A0:DD:44:18:2A:9C:06:B2:15:0F:98:20:23:71:D9
X509v3 Authority Key Identifier:
keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:ab:5b:07:78:a9:a0:b4:6b:e0:21:09:c4:c7:15:fd:10:
09:b9:ac:97:02:84:25:3c:9a:ff:b3:71:34:0b:ba:3f:22:ac:
b8:d7:94:0a:59:eb:0f:6c:43:a7:7d:d9:8c:81:01:b8:2f:cd:
e8:b1:24:05:4d:72:e9:05:f6:4d:92:ae:d7:87:33:ac:64:c8:
3b:93:64:a2:c7:03:3e:12:42:2f:4a:03:1a:a7:47:2a:1b:52:
ac:a0:d2:85:62:48:ec:c3:fd:23:88:d9:f1:38:5f:82:39:33:
46:74:03:e3:40:21:76:79:18:6a:41:04:78:4c:e8:1c:41:62:
9f:61:ea:0d:69:f8:59:af:76:32:e3:b7:17:c5:12:6c:e5:57:
29:0e:79:50:71:1f:47:29:b8:98:9c:7c:a8:f0:8f:01:a0:93:
2f:e2:93:14:43:ef:d7:aa:12:f7:ad:44:dc:8e:22:7d:ed:e5:
33:65:ba:71:a0:b6:5a:85:5f:f4:94:09:0d:67:2e:d2:1a:b9:
c7:84:1c:ec:54:08:12:2e:76:3c:51:83:76:9c:37:6b:49:4f:
ad:16:a7:9d:f6:81:c3:4c:a6:f9:7b:9c:7e:76:a7:68:29:5f:
0a:17:f9:a6:81:5e:a7:b8:a7:bb:71:0e:af:ba:0a:af:03:25:
18:d4:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:42:50 2025 by rpki-client