Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: gZakjRqjKSPtltZgcaMcoO5bPPFffvpEqHyqcFMCXa0=
Subject key identifier: 0F:3E:D0:38:DB:2B:CF:BA:C5:80:88:91:72:11:9C:E9:B7:8E:68:4E
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01958CCE5586C363C24BDE8BEBFEC08B26A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0A43
Signing time: Thu 13 Mar 2025 00:01:27 +0000
Manifest this update: Thu 13 Mar 2025 00:01:27 +0000
Manifest next update: Fri 14 Mar 2025 00:01:27 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: Lr06sqvZNRuUbY7CRwouwCoa9shM+UvN5pwLNc70kgg=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:55:86:c3:63:c2:4b:de:8b:eb:fe:c0:8b:26:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Mar 13 00:01:27 2025 GMT
Not After : Mar 14 00:01:27 2025 GMT
Subject: CN=0f3ed038db2bcfbac580889172119ce9b78e684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:bc:db:7e:0a:19:9b:ce:1b:1f:61:60:50:
66:ab:9f:5d:84:32:19:06:e9:ca:18:8e:85:2d:ad:
38:78:e6:e1:1f:c5:5b:eb:3e:67:ab:9e:2e:1e:d9:
89:a5:4e:4f:cc:92:f6:e6:98:48:59:62:fa:b6:3d:
ef:e8:4d:bc:eb:6e:cc:a0:c5:72:ed:03:99:59:5b:
67:1f:f9:90:8b:79:89:f9:ba:d5:6b:97:48:d2:07:
9c:f4:27:6b:d7:0d:7b:d8:b0:bf:13:28:af:81:42:
14:28:56:83:5d:46:64:04:a6:95:09:ae:23:c8:8f:
d8:9f:64:8c:cb:b2:fc:7b:c3:0d:bc:79:9e:8f:5e:
5e:6d:24:70:9e:ed:c5:d5:65:f5:66:8d:50:84:fd:
be:7e:82:60:20:97:3c:8f:86:7c:5f:40:df:e1:be:
a2:f0:b0:7a:7f:33:2f:c3:36:fd:82:c3:e6:82:de:
f9:ad:bb:04:c1:7f:26:f5:39:ed:db:8c:c2:e3:d9:
8e:35:46:f2:8f:2d:6c:cd:5b:11:04:56:1d:1e:34:
38:68:1c:87:74:7c:78:a1:6e:fd:e6:f7:f6:eb:df:
c1:fd:71:01:6c:21:e0:a5:ea:8c:d3:b6:ef:7b:c4:
38:89:dd:89:89:a7:d8:e4:a7:38:d9:5f:92:19:2e:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:D0:38:DB:2B:CF:BA:C5:80:88:91:72:11:9C:E9:B7:8E:68:4E
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:65:5e:ed:35:3e:9f:3c:b7:ed:39:52:41:5a:7d:13:f4:44:
cf:4e:05:8a:69:8d:37:07:63:4b:33:48:61:6a:67:89:f1:b7:
31:6c:ed:d9:0f:88:62:43:4e:47:1a:2d:64:15:60:e5:b7:41:
c2:39:5d:f7:3e:7e:50:1d:c1:51:14:08:80:ce:db:ab:0c:c6:
4c:f6:84:6d:f8:cc:2b:53:0b:72:e3:b0:04:0d:b6:0f:05:4f:
a1:ca:33:b5:8e:88:c3:31:8d:a7:9b:41:e1:ec:57:7a:d6:5c:
b0:39:83:f8:75:6e:d4:d7:3e:77:4c:e2:7c:6a:30:57:70:7a:
b8:99:4e:fe:36:f0:d7:2c:03:6d:c7:e8:04:31:3a:99:fe:b5:
a2:76:df:5a:78:5b:a0:ae:e1:26:49:1d:8d:49:2f:9e:c7:48:
e3:00:2b:f6:25:9f:45:bd:00:d2:f0:62:48:ed:9b:6c:39:c5:
97:79:c6:17:05:98:c7:b7:f6:8e:2c:6d:8a:a8:b3:e3:88:cb:
31:ba:43:82:64:0e:12:6f:bf:7e:20:09:76:d2:3a:dc:dc:d0:
f0:bc:27:d6:63:12:8d:a9:e3:26:9d:47:76:6f:da:b6:bd:05:
88:d9:57:68:68:75:1d:52:aa:19:2e:c2:88:9a:69:14:74:da:
e4:f3:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:28 2025 by rpki-client