Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: q3I4KYjycOqhqNsftk7/IMs2yghshP1Oi45UpSF5afE=
Subject key identifier: 3E:3F:6B:EE:74:8E:C1:49:27:97:D2:A1:69:36:BF:93:84:3E:66:00
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 0197B745B85F64BAFEA6602D996DA29C7C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 0E15
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: 1A8TBZUxzT5E+yFuFM1vKETvRnd04othxWrXlOyT54k=)
3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b8:5f:64:ba:fe:a6:60:2d:99:6d:a2:9c:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=3e3f6bee748ec1492797d2a16936bf93843e6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:ab:65:aa:82:d7:82:f4:3c:c6:ba:ec:a2:
18:4e:f9:38:67:52:ad:dc:91:93:8a:3d:3a:82:64:
7b:86:14:b2:d6:e2:ef:db:b8:4d:61:b8:02:02:80:
d2:87:2e:6d:af:a3:90:dd:3a:cd:2f:fa:7e:ec:6b:
c2:6d:f0:4f:91:67:2b:25:4f:73:d9:a5:be:92:49:
2e:64:d7:66:39:78:7c:46:56:0f:9e:25:39:f2:ff:
90:25:a3:36:76:0e:f7:a1:1b:14:09:8e:ba:86:d4:
cf:65:50:74:bf:db:9b:c7:f5:7b:a1:db:70:6f:6f:
23:a1:4f:d6:f1:cf:21:11:e5:80:1b:da:ad:ac:77:
1a:77:18:7a:d7:07:c0:7c:c0:66:fe:cc:3f:e9:a8:
bd:59:11:86:15:3f:44:4f:3c:59:0e:0b:a9:fa:f4:
4d:12:2c:2b:3b:9c:2e:49:1e:44:08:6c:84:81:13:
3e:f8:10:88:05:b6:52:af:91:24:7d:e7:0f:66:50:
1e:9f:3d:45:72:88:a5:2a:14:10:55:7b:0d:62:9f:
35:d4:38:57:9f:cc:bb:65:ea:2a:70:18:82:a0:69:
d9:38:3d:f0:a2:74:98:11:9f:1c:c1:75:e4:b9:e8:
84:4e:e5:fb:10:88:09:26:4c:9a:a9:26:bf:b7:0f:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:6B:EE:74:8E:C1:49:27:97:D2:A1:69:36:BF:93:84:3E:66:00
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d8:cf:91:0b:28:73:34:e0:ac:09:02:76:4d:52:cb:0b:87:
d3:aa:e1:5f:67:5e:91:98:4d:a4:2a:53:db:ed:55:c9:e7:77:
8b:fd:77:e1:a0:ee:81:5f:26:e3:37:61:f1:f0:0c:9d:5f:74:
29:d6:65:62:30:f6:16:ce:92:a0:d9:f3:ae:a7:5c:3a:87:cd:
07:d4:04:fb:eb:58:7d:30:49:51:d1:2c:91:68:a5:19:89:3f:
0b:47:84:fd:9e:53:fb:1b:b1:4b:c2:31:3f:aa:d8:eb:a3:54:
0f:69:31:23:77:07:14:87:62:4c:3a:d9:f3:d8:14:31:0c:f8:
de:fa:22:ff:2e:22:7a:14:e8:ab:15:e4:81:81:06:21:96:56:
75:7a:73:f2:cf:6a:e2:73:ea:37:95:77:96:70:98:61:49:75:
b8:9b:51:a7:3d:19:d4:d0:39:ee:5b:55:08:d1:b3:08:f7:63:
45:a0:04:c6:30:f4:97:77:ed:53:14:77:65:4c:ee:3f:a6:85:
22:74:f5:2e:1f:9c:7f:46:ec:b2:0b:7b:e3:2c:9c:3a:c8:d3:
3d:ea:9d:75:42:c3:2b:a2:4d:22:b9:7b:4a:59:b6:8a:f7:d6:
fa:79:db:b2:76:45:8c:e4:0b:49:4c:a1:6e:95:a7:47:15:bc:
a8:90:50:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbhfZLr+pmAtmW2inHwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2JhMzgwMmY5YzliZjY3NTZkYWFiZDMyNGU1MzI2ZWRl
NDE5YWEwHhcNMjUwNjI4MTYwMTI5WhcNMjUwNjI5MTYwMTI5WjAzMTEwLwYDVQQD
EygzZTNmNmJlZTc0OGVjMTQ5Mjc5N2QyYTE2OTM2YmY5Mzg0M2U2NjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmCrZaqC14L0PMa67KIYTvk4Z1Kt
3JGTij06gmR7hhSy1uLv27hNYbgCAoDShy5tr6OQ3TrNL/p+7GvCbfBPkWcrJU9z
2aW+kkkuZNdmOXh8RlYPniU58v+QJaM2dg73oRsUCY66htTPZVB0v9ubx/V7odtw
b28joU/W8c8hEeWAG9qtrHcadxh61wfAfMBm/sw/6ai9WRGGFT9ETzxZDgup+vRN
EiwrO5wuSR5ECGyEgRM++BCIBbZSr5EkfecPZlAenz1FcoilKhQQVXsNYp811DhX
n8y7ZeoqcBiCoGnZOD3wonSYEZ8cwXXkueiETuX7EIgJJkyaqSa/tw8jZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4/a+50jsFJJ5fSoWk2v5OEPmYAMB8GA1UdIwQY
MBaAFBI7o4AvnJv2dW2qvTJOUybt5BmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQt
ZTRkMDI0Y2RhZTBjLzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQtZTRkMDI0Y2RhZTBj
LzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndjPkQso
czTgrAkCdk1SywuH06rhX2dekZhNpCpT2+1Vyed3i/134aDugV8m4zdh8fAMnV90
KdZlYjD2Fs6SoNnzrqdcOofNB9QE++tYfTBJUdEskWilGYk/C0eE/Z5T+xuxS8Ix
P6rY66NUD2kxI3cHFIdiTDrZ89gUMQz43voi/y4iehToqxXkgYEGIZZWdXpz8s9q
4nPqN5V3lnCYYUl1uJtRpz0Z1NA57ltVCNGzCPdjRaAExjD0l3ftUxR3ZUzuP6aF
InT1Lh+cf0bssgt74yycOsjTPeqddULDK6JNIrl7Slm2ivfW+nnbsnZFjOQLSUyh
bpWnRxW8qJBQ1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:25 2025 by rpki-client