Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File: XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier: CTBKZKP3mTNEVoqyT92csBVMsUtUKvszDriqcscJwDM=
Subject key identifier: 44:56:FB:B1:D9:64:0D:59:59:71:7C:A9:02:F4:AF:5E:4D:AA:73:57
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 0196B1B314B3A5810FACE9335F81EDA96B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number: 0BC5
Signing time: Thu 08 May 2025 21:00:25 +0000
Manifest this update: Thu 08 May 2025 21:00:25 +0000
Manifest next update: Fri 09 May 2025 21:00:25 +0000
Files and hashes: 1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: 6xF9cBphE6COuifcOMrQHfSt0LmcdbY15SmQ4u3HI+Q=)
2: mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa (hash: eEF1vwGGqfylK4nRHvE5xtss/22xA/yBRdsBu2iNecU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:14:b3:a5:81:0f:ac:e9:33:5f:81:ed:a9:6b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: May 8 21:00:25 2025 GMT
Not After : May 9 21:00:25 2025 GMT
Subject: CN=4456fbb1d9640d5959717ca902f4af5e4daa7357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:3e:5c:4d:3e:95:65:f8:81:f1:31:fb:8c:
ed:1e:9a:8b:78:a0:fa:9a:13:65:08:5a:44:c2:ee:
ca:91:fc:cf:9e:76:42:c8:b6:a4:89:00:3c:94:e0:
fc:99:c4:84:53:f1:21:48:78:88:58:8d:f2:65:c8:
23:bf:89:99:f3:0e:dc:32:6c:b8:3c:00:76:66:9c:
6c:46:9c:97:64:10:ca:2e:7e:75:39:fb:6e:1e:81:
c0:89:2e:f2:e6:55:f9:ce:3e:1c:41:6f:8d:cc:0d:
99:ea:59:e9:8b:64:4d:7c:c7:75:f2:e6:88:29:95:
1f:96:7a:9a:eb:b2:61:0e:48:87:8f:4b:57:90:93:
13:de:57:27:70:61:62:76:8b:05:be:9d:34:1e:f8:
52:a1:23:80:ba:91:e7:2a:53:d8:77:09:ce:ca:88:
0f:08:1c:cf:ea:31:cd:57:52:37:3a:69:17:1f:25:
07:ad:32:79:b3:26:df:72:ba:18:51:66:8f:96:11:
52:81:a1:22:d5:57:ca:6e:b9:90:24:19:24:8f:35:
9e:d9:b9:d3:4f:3e:00:0b:2c:cc:5b:8c:76:6f:a7:
cc:11:0e:eb:0a:f4:a6:d1:82:09:8c:f2:c1:98:47:
1b:e9:42:ad:74:52:11:b9:bc:4d:c7:71:bf:7b:32:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:56:FB:B1:D9:64:0D:59:59:71:7C:A9:02:F4:AF:5E:4D:AA:73:57
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:bd:12:d1:f2:2c:3e:df:51:47:e4:21:14:a6:0f:0c:8f:
58:ae:d1:72:b2:b0:b9:65:0d:f9:5d:43:f9:5d:1f:cb:ec:7b:
82:dd:33:2b:51:a7:9d:d1:9a:b7:40:fc:fd:d7:3b:0d:7c:cb:
47:f4:8d:b1:e2:63:48:94:f8:fb:7c:16:9e:87:74:db:c6:66:
6d:b4:54:9b:3a:ca:3e:f7:c6:b7:3e:6f:82:63:a6:8e:09:0c:
f6:19:35:10:c9:49:5b:52:78:2c:2e:10:ec:4c:98:1f:ee:85:
87:33:8f:e5:94:95:c4:63:5d:a7:ee:e5:89:ab:10:fa:b7:ea:
b5:c9:47:59:84:6c:06:b9:97:52:77:41:c0:d9:13:5a:a0:de:
8c:48:6e:77:f6:32:f9:67:25:8e:c7:88:7c:a5:04:6f:f7:97:
ef:51:90:4b:15:01:0b:0b:1c:64:54:cf:4d:6b:22:1f:fa:37:
76:dc:65:ec:99:ee:79:92:87:ed:ae:0b:04:e4:7c:73:ef:9e:
08:b5:16:8f:dc:c5:49:97:cc:23:88:59:15:30:b7:06:ec:aa:
3c:03:21:5d:58:04:65:ba:52:29:d0:f4:ee:ff:bd:0e:14:fb:
26:7e:3d:2b:1d:80:23:a4:aa:a1:37:b4:57:dd:b3:d5:34:01:
b0:b2:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:42:23 2025 by rpki-client