Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: 0WPYF5RbHSTeF4PqQdXx+8y2SwVwuFZOzOv8fE/A5qc=
Subject key identifier: 33:93:C8:8F:08:52:8D:D2:06:C0:3E:50:5F:B6:1F:5F:BC:19:1E:C5
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01965D5F015D69AFACB9E7AB35F47F4EBBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0AAF
Signing time: Tue 22 Apr 2025 12:00:29 +0000
Manifest this update: Tue 22 Apr 2025 12:00:29 +0000
Manifest next update: Wed 23 Apr 2025 12:00:29 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: 1vx87gDXcWjtocrupMzRFXnZTwK1iHSL9n8bGwKnQu8=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:01:5d:69:af:ac:b9:e7:ab:35:f4:7f:4e:bb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Apr 22 12:00:29 2025 GMT
Not After : Apr 23 12:00:29 2025 GMT
Subject: CN=3393c88f08528dd206c03e505fb61f5fbc191ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:4c:98:90:72:4b:e8:0f:b4:3e:f6:b1:8c:
9c:77:10:06:65:43:b3:d3:1a:91:e4:a6:1b:38:ac:
12:dc:ac:85:ba:bf:87:af:f1:8e:46:72:65:86:3a:
50:24:99:c1:59:4a:0f:95:fb:f0:ad:09:5f:34:08:
7f:12:b0:09:c2:c5:03:25:f9:68:7f:2e:2f:22:58:
e9:63:7c:f1:dc:a9:e5:17:7e:d5:f4:1c:a7:fe:29:
de:b7:bb:ae:c5:bf:93:3e:fb:b0:6e:32:ae:d2:ff:
91:65:fa:24:31:22:38:09:a7:43:35:2e:29:6b:9c:
f8:28:c4:af:8e:b8:87:61:65:43:21:22:b1:92:b3:
48:09:2b:5a:2e:31:5e:34:e7:8d:cc:ab:c0:ac:3e:
cf:7d:8c:d2:be:0a:50:f0:92:7f:bf:e0:cc:aa:f9:
86:1f:8b:09:98:07:a1:60:50:f5:ca:dd:a6:68:5d:
24:d9:3d:52:38:91:bb:b8:a6:04:37:4b:78:28:2e:
d5:7a:10:a2:69:07:f5:cd:37:fd:f0:61:5d:4c:ac:
b9:ff:d4:9b:40:16:1a:10:d2:e0:1f:7d:d6:f0:22:
ce:51:59:7f:11:bd:13:ee:6f:39:5b:98:8d:a6:53:
e0:7a:a6:e1:dc:0e:2d:38:55:a2:9c:3e:4d:80:a7:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:C8:8F:08:52:8D:D2:06:C0:3E:50:5F:B6:1F:5F:BC:19:1E:C5
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:f6:c4:d4:39:1e:a0:bf:ae:3c:09:26:e3:58:d4:6c:a3:
a3:82:af:9f:c8:76:d3:71:b4:b4:30:dd:c3:ab:82:03:6f:28:
48:30:a6:f0:49:74:a8:61:f9:04:ea:54:80:2c:c9:a7:df:a3:
5a:2d:42:83:c4:1f:a5:6f:18:c2:ba:c4:5b:01:b9:98:12:36:
f6:4a:78:0e:14:14:7c:6f:68:76:9b:89:59:b2:32:f5:78:35:
e1:e8:c9:73:f1:67:50:e3:59:c3:c0:2a:c1:54:9e:ef:c7:c0:
da:ed:b5:b0:bb:45:61:7e:51:45:54:58:34:1a:bc:1d:b2:ce:
6c:04:af:9a:8a:e4:11:2a:ef:e3:81:99:5b:45:a3:5a:66:36:
bd:cc:bc:f1:bc:0a:52:b7:7f:08:03:a3:4e:db:60:20:a8:b5:
ee:c9:12:99:63:cc:ae:92:8b:79:9e:71:6b:3c:ca:f2:f5:c0:
b9:70:eb:bd:68:d9:88:d7:eb:f9:ac:72:af:45:de:7e:99:fe:
93:5b:ff:c5:c9:e8:9d:d8:6b:30:e0:b6:5f:69:2b:b3:24:8c:
f8:67:55:37:4d:96:4a:e4:13:4a:96:64:56:51:bb:24:e8:19:
67:6f:c6:e7:1a:74:9c:2d:be:22:25:29:d3:d0:a8:68:6b:67:
0f:6f:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:24 2025 by rpki-client