Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File: XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier: 7ZLCP/8b7tiDp2txm2fxUN2K86IkgKFo1lHWuKmOEfY=
Subject key identifier: D0:9E:1D:A5:4D:FC:64:D6:B7:9D:05:CF:7D:27:4F:1D:69:C9:2B:AB
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 0198D660DBBB20E7DF27D602DFB26CADDCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number: 0CE1
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: y2YBEffbrZX4m5t6OjkPmI7TpNZXx3kK+hEmrOsAGV0=)
2: mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa (hash: eEF1vwGGqfylK4nRHvE5xtss/22xA/yBRdsBu2iNecU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:db:bb:20:e7:df:27:d6:02:df:b2:6c:ad:dc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=d09e1da54dfc64d6b79d05cf7d274f1d69c92bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:49:5f:90:ac:5e:1d:a5:3b:ee:72:1b:ab:
29:51:71:99:f8:9c:1d:0b:fa:1a:eb:a0:6b:1a:ed:
8a:e6:8e:f5:b2:0b:b6:cb:27:6e:61:e4:68:05:01:
89:fe:5b:52:f0:f2:58:da:0e:a7:51:39:1f:6d:89:
7f:a5:f3:e5:9b:6c:24:2c:18:31:a7:d1:08:4c:48:
f1:c2:86:99:ef:62:4e:e1:79:f7:32:ed:7d:6c:72:
3e:de:00:5d:26:ac:67:4c:8e:52:6b:40:a3:2f:aa:
0f:fa:e6:d2:a6:62:bb:30:05:ca:65:a4:b9:dc:c7:
5b:ef:d5:5b:c4:d8:75:58:2c:27:67:cf:02:70:5f:
9c:61:b5:05:9b:96:cb:7c:3d:56:1c:a7:ac:98:45:
47:d2:30:ff:70:74:bb:06:0b:dc:5f:91:9b:bb:67:
5a:f7:15:2c:c1:20:d4:73:da:26:d9:aa:8c:75:42:
b8:23:be:48:4b:a2:58:57:ae:0f:6c:a1:7d:46:e3:
ea:e2:ae:d9:9c:c1:aa:d7:e8:ef:1e:a0:d0:b0:d6:
2b:18:a3:67:fa:70:aa:19:35:4f:7f:78:9f:2a:bd:
0f:4a:fe:e9:7d:8f:e1:9e:ea:1c:cc:7e:64:f8:9e:
a9:14:95:ab:ef:ab:5a:c6:71:8a:b4:19:52:bf:63:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:1D:A5:4D:FC:64:D6:B7:9D:05:CF:7D:27:4F:1D:69:C9:2B:AB
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:c2:67:0b:e9:5c:e6:1c:fb:51:6f:0a:ba:19:f1:f4:66:
19:b3:12:ec:43:8d:f0:37:b9:93:20:b2:19:38:ca:a8:51:b2:
a3:7c:67:4c:25:d5:f3:ee:d3:1f:d6:cd:43:23:e0:ee:88:6b:
53:4f:09:ec:9a:c7:1d:8a:69:3a:46:2f:ea:4b:4b:45:49:a7:
91:be:e4:07:87:d0:4a:a3:5d:87:be:07:03:83:80:71:6e:b2:
a7:2f:ff:14:3b:b4:61:69:5a:65:3c:e0:aa:08:3f:97:88:3e:
b0:04:c0:dd:70:08:25:a5:b7:cb:3a:de:9b:bf:fd:4e:4c:f8:
62:35:a5:fe:10:eb:e5:97:62:06:1c:c5:b2:39:09:43:79:ef:
b7:9c:d0:16:5b:83:e8:0b:7b:1e:81:51:44:42:f5:cd:79:b1:
cd:29:cb:a4:e3:66:a8:9f:b0:ac:62:02:b7:e0:24:bc:83:ab:
8e:f3:c9:fd:64:a5:be:82:8e:4b:77:06:98:7e:e1:58:1a:b9:
32:df:9e:bb:19:2e:e1:73:27:52:5e:27:ed:77:11:d2:9c:8e:
94:93:22:fc:c6:f6:15:8a:e9:54:49:6b:5f:69:e2:da:60:ec:
0b:09:53:26:5d:2d:73:0c:f5:40:15:d1:55:d2:2d:fc:09:d1:
c3:35:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:16 2025 by rpki-client