Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: J1uHC/r/GO4Abmz/zYSXhCDGWivqTbx3MZxeI3pZAys=
Subject key identifier: B5:7E:37:2A:40:21:67:AB:46:A9:8D:B4:0A:09:DF:97:F6:FB:4C:BA
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0196BDEE62F95E27E8E0A7F9B7FE33446B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0AE1
Signing time: Sun 11 May 2025 06:00:38 +0000
Manifest this update: Sun 11 May 2025 06:00:38 +0000
Manifest next update: Mon 12 May 2025 06:00:38 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: lvg+MjfepPxlQIKy8loSIfmE3bHq+Jxp0YbbWzkPzI0=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:62:f9:5e:27:e8:e0:a7:f9:b7:fe:33:44:6b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: May 11 06:00:38 2025 GMT
Not After : May 12 06:00:38 2025 GMT
Subject: CN=b57e372a402167ab46a98db40a09df97f6fb4cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:1a:c2:2f:1d:5f:02:e5:3d:69:32:83:85:
ea:44:4c:28:f9:a1:01:7f:3e:fa:12:17:55:14:78:
ba:cf:a9:e7:a2:88:07:a6:82:08:91:8f:80:3b:75:
27:d7:e7:e8:8d:f1:9c:c1:9d:91:7f:51:2a:09:49:
fd:24:5b:45:13:2a:fe:1d:b2:de:8c:27:2b:b7:ca:
be:b5:57:e6:b9:76:b5:9b:c2:cd:c3:54:52:5b:e3:
a8:ff:f6:76:f3:4d:e2:ab:89:28:a6:73:4c:da:93:
64:db:df:76:2e:f2:eb:2a:43:49:0d:7e:ed:ba:88:
18:da:b0:6f:a4:68:31:b9:31:32:f1:4e:1e:b3:f7:
b9:21:2a:bf:8f:09:ab:d8:78:fa:d9:83:d7:47:b7:
4b:26:b6:3b:f7:72:d4:ab:d2:57:4b:df:15:b2:6c:
bf:8a:86:9a:cf:42:85:66:86:b0:29:cc:5e:16:87:
ce:22:cc:81:1b:c9:85:29:1d:43:74:47:4b:62:8e:
8e:79:57:6f:bd:f4:84:7f:b4:f8:bc:20:86:1b:71:
37:b0:f5:b4:c6:52:f3:e6:01:30:8a:0b:42:e9:70:
a4:f1:94:cb:e8:02:11:0b:68:68:05:f9:13:5b:34:
f8:10:9a:7d:2e:c7:27:00:cd:51:2c:af:c0:95:28:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:37:2A:40:21:67:AB:46:A9:8D:B4:0A:09:DF:97:F6:FB:4C:BA
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:85:bb:b7:24:b6:7d:22:f4:e1:f8:3f:6e:de:73:07:85:3a:
db:5d:9e:01:3c:bf:4a:e8:0b:d5:2b:1c:e4:ca:8d:2d:b9:73:
59:40:f0:00:50:d3:05:92:32:b5:b3:1e:81:98:ed:76:f5:2e:
55:d5:60:35:d8:b5:1b:c2:aa:46:fb:43:7a:eb:63:74:db:69:
cf:29:b4:75:f1:10:eb:b7:0d:ea:fc:46:b7:20:69:fc:57:8e:
53:4e:22:66:0f:f9:54:f2:a1:a3:04:97:da:29:64:b8:c7:9a:
06:97:27:94:3e:66:73:ba:0d:24:ac:93:4e:2e:e4:66:91:64:
5d:37:a0:92:c8:13:1e:ed:9d:a4:6f:46:b4:e8:13:69:19:13:
23:e7:5d:db:58:c6:a4:26:fe:7d:af:90:99:dd:9f:53:29:26:
7c:d0:24:0a:e4:14:71:0d:4a:b2:3b:f7:6a:b7:d4:f5:e9:00:
c1:8d:8d:e7:fc:48:da:6b:11:18:b1:45:18:49:e0:27:9a:60:
9c:e4:5a:b3:52:08:58:59:e7:f2:51:40:d8:73:b0:fd:35:db:
b4:84:58:02:db:91:72:d3:84:68:90:af:dc:6f:8d:94:da:a9:
42:f0:8b:51:95:79:55:54:cb:5c:74:7e:48:21:95:07:d1:66:
e9:40:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:43:09 2025 by rpki-client