Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: oQpgv/MfQVrZozpC3REkuglu19CGqxmOd0KC+jfrom0=
Subject key identifier: E3:DC:1E:FB:FF:5E:19:A7:EE:DF:9C:10:C7:DA:44:0A:F4:14:ED:3E
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0198C75B244A5AC915EFC58EC6520C64299D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0BEF
Signing time: Wed 20 Aug 2025 12:01:35 +0000
Manifest this update: Wed 20 Aug 2025 12:01:35 +0000
Manifest next update: Thu 21 Aug 2025 12:01:35 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: ybiUq2TSQp9gkM2p8bB1sliVEb2Cxs6bqdvyos0RXzU=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:24:4a:5a:c9:15:ef:c5:8e:c6:52:0c:64:29:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Aug 20 12:01:35 2025 GMT
Not After : Aug 21 12:01:35 2025 GMT
Subject: CN=e3dc1efbff5e19a7eedf9c10c7da440af414ed3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:a1:c8:71:45:e4:b7:24:6e:a3:7e:65:0a:
bd:02:9f:08:59:4c:52:74:7d:6d:d6:fa:e7:90:28:
de:95:3a:c2:e5:c9:64:72:40:44:55:d7:94:a4:dc:
75:32:95:f3:9a:be:2d:cf:d1:55:3f:7d:b5:62:26:
d6:4f:25:86:20:94:34:55:f4:b9:ae:4a:33:b3:c7:
03:fb:e9:c8:73:26:d9:90:16:4c:4e:48:17:c5:b0:
be:21:67:6f:82:c1:45:13:3b:17:6a:00:10:cc:df:
20:3f:56:66:0b:76:e9:ca:c7:7d:6b:0d:3c:8a:83:
d2:2d:79:66:70:d4:12:d2:24:6b:02:dd:ac:02:ad:
83:2c:83:4d:d6:ce:83:70:af:f4:44:0a:9c:00:d2:
06:5b:48:0c:76:f1:8d:8f:2a:ec:c3:2b:e1:cd:52:
39:c2:28:c8:06:48:7f:19:fa:fb:30:8f:eb:d7:f1:
da:a8:85:8e:c6:70:86:c3:4e:ce:56:47:60:c3:9c:
3e:bb:99:07:45:5c:e9:6b:5f:fa:cf:38:71:96:fc:
0d:84:d2:c5:62:05:b9:80:47:ed:04:e9:ba:53:09:
91:1c:d0:1d:d5:f3:4d:f7:ef:8c:67:0f:0f:54:e1:
e6:87:13:31:f4:62:d2:ea:de:0a:70:45:d8:ae:47:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DC:1E:FB:FF:5E:19:A7:EE:DF:9C:10:C7:DA:44:0A:F4:14:ED:3E
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:51:2c:b8:88:fd:da:8f:ec:a4:69:1c:f9:22:e4:50:a8:f7:
8a:ab:d4:06:3c:10:a2:43:a7:55:77:3d:b2:b4:19:82:e5:6d:
7b:8b:cb:a5:64:92:c6:78:4a:e7:70:e2:35:44:24:63:7c:61:
bc:1b:43:fd:ce:37:cf:ab:58:90:2d:cf:b7:62:c9:19:08:21:
15:93:5d:a9:34:83:97:76:61:ab:08:f0:ed:19:f4:d3:4c:46:
15:b7:4f:b8:30:e9:dd:07:ab:0c:14:ea:a8:84:e3:f0:ec:e9:
a2:8f:2c:5d:5b:eb:5b:ea:ad:6e:c7:c2:97:da:1e:23:b0:8a:
9a:82:4a:68:44:a3:87:c7:6f:ae:8f:9b:df:ae:3f:24:d1:01:
cf:a1:8f:33:2d:75:e8:99:ae:99:7c:c7:5a:16:85:a0:b6:fa:
9b:8d:b8:e3:7f:ba:db:f2:27:65:12:a7:3c:b3:cf:a4:a1:bd:
c8:cb:3e:23:16:9d:88:27:0d:f4:f9:e4:be:b1:dc:98:17:6c:
cd:9e:2c:fb:ad:26:36:c9:36:01:85:af:61:e0:66:78:e8:cc:
c7:59:da:87:fa:03:f8:69:7b:40:b4:8a:62:58:89:dd:b2:16:
d2:dd:88:95:85:cd:fd:44:90:42:cf:8b:4c:76:33:2b:b3:e8:
c5:46:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:19:32 2025 by rpki-client