Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: q7LiHo+BkIk3mWRBCb2APyNcmG4VBTJX8LzwROt+5Qc=
Subject key identifier: D8:B8:E9:13:09:A8:32:48:4A:51:B1:2B:4C:EB:23:77:32:64:D3:1E
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 019A0C01E93C24984E3D41A2E5164DE09CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 0F4A
Signing time: Wed 22 Oct 2025 13:00:42 +0000
Manifest this update: Wed 22 Oct 2025 13:00:42 +0000
Manifest next update: Thu 23 Oct 2025 13:00:42 +0000
Files and hashes: 1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: J4izgppvtR9u0oRXwCeUXohOuOPw40cUwCHhBfhKCMo=)
3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:e9:3c:24:98:4e:3d:41:a2:e5:16:4d:e0:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Oct 22 13:00:42 2025 GMT
Not After : Oct 23 13:00:42 2025 GMT
Subject: CN=d8b8e91309a832484a51b12b4ceb23773264d31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:81:76:5b:00:8e:b2:53:ac:ae:00:8b:34:
06:11:d4:96:1e:61:5f:22:b4:94:9b:79:68:a4:08:
cb:8a:b6:73:4b:5e:2b:70:d3:8c:da:24:46:fc:ad:
0b:7b:77:c0:f1:25:5a:ab:27:69:23:5a:95:83:ab:
8d:70:5a:d9:58:8e:56:e1:6e:31:59:ba:04:9e:ce:
c5:0b:fd:f9:be:59:c7:88:14:8a:9b:1d:c5:d0:c9:
4c:4a:49:88:fa:8c:30:e1:b4:70:1b:23:d1:a7:9f:
23:c1:b6:47:1a:bb:17:42:92:a8:ac:99:60:73:fd:
e9:17:3d:0a:fe:91:ae:47:a3:cc:e6:3e:df:ea:cb:
c6:5b:d8:09:b8:ef:f7:cc:bf:98:29:27:a8:72:54:
c6:05:95:5d:3f:3b:35:8c:54:90:26:eb:6b:32:88:
e3:15:81:1c:6a:fe:44:0e:ca:4b:3d:3f:cc:e7:9e:
81:ab:f3:98:08:d7:0e:8c:c6:cf:c1:72:50:9e:ca:
9f:bd:6e:a0:28:57:83:74:9e:0e:f2:cb:7b:ad:7d:
62:66:23:d8:8b:95:71:08:85:7d:f0:4d:5b:67:cc:
9e:e2:9a:e1:64:7a:5f:bd:a8:23:26:25:78:a4:1c:
d7:7a:ef:ee:50:d6:83:ee:63:9e:ab:6c:c0:33:7e:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:E9:13:09:A8:32:48:4A:51:B1:2B:4C:EB:23:77:32:64:D3:1E
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b8:dd:e7:19:05:19:35:02:c1:c7:fb:6e:0d:d5:c2:2d:99:
84:d6:43:c3:05:fe:37:32:1a:fe:8f:47:29:fa:67:c0:fc:32:
c9:6d:a6:12:c6:e3:44:7e:74:d9:20:62:79:78:b3:74:71:ad:
6b:a6:3b:40:7f:37:5b:60:ff:91:97:79:54:4b:6b:f9:c6:34:
ba:5d:e2:36:00:a3:94:7e:8f:57:1c:52:b5:e2:ab:cc:50:b0:
25:3b:ff:3e:8a:ff:de:62:55:bd:30:17:6c:45:11:78:b0:8e:
77:98:2e:ae:d2:65:c3:c5:94:6c:92:a0:a5:3b:c8:e6:ae:f8:
7e:f8:84:b0:26:3a:0d:47:2c:8a:57:46:3b:16:27:7a:ee:28:
f5:34:c6:3a:25:42:f3:30:f4:0b:f1:a4:37:69:1e:50:7d:07:
ed:9c:7d:9a:c9:81:70:b0:28:62:64:a3:19:b4:88:12:f5:56:
ef:64:93:95:8b:a6:ee:d6:e8:1e:be:33:90:6c:d6:e8:11:ae:
f6:7e:55:60:69:fb:d1:80:88:0b:81:b8:34:11:7e:61:e4:4e:
69:55:51:d0:f4:3d:e3:0e:be:a4:8f:70:27:8b:5b:b1:aa:73:
6b:7d:52:64:1c:40:ff:86:e4:13:11:0d:3e:b6:65:50:66:be:
ed:b9:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:56:41 2025 by rpki-client