Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File: rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier: XClhnCVlszBtkz7vgiGeQKuixaNqEfjJi3LzUSzNnsU=
Subject key identifier: F9:61:C3:36:CC:86:58:31:A3:65:14:A3:ED:FB:DD:6C:C7:27:6A:FD
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer: /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial: 019749D5DE273CF29B3C7E6DEE317C03A31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number: 0F77
Signing time: Sat 07 Jun 2025 10:00:42 +0000
Manifest this update: Sat 07 Jun 2025 10:00:42 +0000
Manifest next update: Sun 08 Jun 2025 10:00:42 +0000
Files and hashes: 1: QVia0R-C1R2OtBKefX55cNuuXdw.roa (hash: 5hYta4LOp/wluPpRpLQ0dqF8+c0Z+WJxjmlf/9qWqq0=)
2: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: c4RL29rOLcWDcuPb4EB9EvxNk0aZVqVysLfhvYgDJlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:de:27:3c:f2:9b:3c:7e:6d:ee:31:7c:03:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Validity
Not Before: Jun 7 10:00:42 2025 GMT
Not After : Jun 8 10:00:42 2025 GMT
Subject: CN=f961c336cc865831a36514a3edfbdd6cc7276afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:a9:a0:44:93:78:ad:4e:3e:a1:2a:d6:e7:
f7:58:eb:2c:c7:9f:75:96:8b:e7:cf:42:08:48:07:
39:22:24:07:5c:3a:e0:bd:a5:9a:4e:6c:e4:70:a3:
0e:ff:ef:79:49:86:b7:db:9d:b9:6d:ec:82:52:26:
3f:92:78:5f:1c:83:07:f2:34:95:05:95:37:37:73:
70:49:55:f6:a9:23:a9:d0:e3:e9:54:86:8a:57:ff:
cb:7d:66:d3:a3:f1:41:3b:be:bb:9c:97:81:9a:19:
77:0d:b5:38:a0:77:eb:9b:02:d6:c0:b2:62:35:bf:
d6:da:b7:dc:50:96:08:ab:2f:ba:ad:90:ee:d1:54:
b0:0a:4e:59:48:26:cd:dd:b3:fd:72:c2:0a:a9:82:
9a:38:d5:09:cb:a6:66:f7:8b:bf:63:03:ef:62:af:
8f:c0:20:db:7e:07:9a:d8:47:71:0e:d8:1d:40:4f:
81:e0:76:04:31:83:d6:75:e1:64:0f:bd:56:37:c5:
35:e3:f8:46:28:f2:05:ff:a1:52:e9:e5:35:9f:e2:
ec:1f:de:c4:cc:2b:32:f5:dd:44:74:da:b4:3a:e4:
16:1f:a4:c7:d4:37:10:db:c0:ac:00:1c:ff:19:24:
e5:c3:37:9e:44:d9:03:5a:bf:98:2c:87:fb:de:e5:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:C3:36:CC:86:58:31:A3:65:14:A3:ED:FB:DD:6C:C7:27:6A:FD
X509v3 Authority Key Identifier:
keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5c:45:b0:33:e9:1f:ed:07:46:5d:db:45:89:3a:3d:cd:f1:
f7:ee:3c:c6:cf:b1:b3:bc:16:d4:ad:43:1f:8c:d5:d9:e7:7e:
61:50:ac:5f:73:1f:29:95:5d:7d:0e:ca:10:d5:e1:ef:e5:db:
f2:2b:f0:3c:dc:69:45:55:e7:96:db:df:57:6f:78:ce:d3:3d:
7a:e3:c6:4d:da:e4:fa:f7:22:23:84:34:fc:f0:26:bd:76:67:
6f:fc:8d:fc:f4:eb:9d:3e:2f:5c:40:6d:52:45:99:35:d5:8f:
15:b8:7a:f1:d3:7c:93:77:6a:56:f3:da:d5:57:da:4c:63:62:
20:ef:20:6c:03:b4:ff:28:74:71:69:fc:b0:27:15:c0:fb:c0:
9f:83:61:73:cb:8d:4f:71:a0:fc:2b:15:de:1f:cb:3e:8b:d8:
e4:3d:aa:a6:9f:e7:75:fa:e7:b5:4d:66:d2:5a:63:94:9d:e2:
59:89:e3:67:3d:35:ad:8a:01:b2:88:2f:d1:14:a8:0d:82:85:
a4:c4:13:86:6a:6c:ad:8e:34:74:a1:5a:1f:29:a0:d2:84:eb:
b1:0e:08:ff:e3:e7:a6:44:6d:a9:2c:61:12:50:f7:2d:4c:b7:
7c:be:d5:7f:c5:70:58:ce:38:86:08:02:e0:ce:4f:76:32:18:
41:ed:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:52 2025 by rpki-client