Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: j5zzO3Vq2tFLWyjzjgJZH1ByeLUnvM/YAk3y++/kc6o=
Subject key identifier: C6:91:33:26:3D:62:AC:9A:A8:85:09:BD:5D:64:BB:30:8B:DA:80:30
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0197B70E9A598E2FE9365FDA529F4304C5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0B62
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: Hn0n/tILN2TvFtWgFPHhL9txTJThp3i3vl1lv0Y1eww=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9a:59:8e:2f:e9:36:5f:da:52:9f:43:04:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=c69133263d62ac9aa88509bd5d64bb308bda8030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:89:2f:ed:89:92:a7:32:4e:ab:3e:85:c2:
ae:92:9f:8c:36:f0:f0:78:28:53:60:54:4c:cf:d5:
74:aa:ce:6f:f7:85:66:b5:34:d8:a2:78:6e:1b:9c:
bf:8b:ed:37:4d:ea:0e:e8:2a:6b:1c:9d:59:b3:8b:
36:c5:3d:76:ab:40:7a:2d:21:6d:12:b9:43:f1:cf:
93:0f:be:0d:36:f0:4c:73:16:e8:7c:96:60:41:ae:
a8:8c:27:ac:a7:85:6e:af:24:13:66:55:24:9b:9c:
bc:db:6c:52:1f:ef:d0:1c:76:19:b6:b6:0c:57:d1:
45:93:f9:fa:8f:65:4e:51:18:a1:84:0b:a2:5f:90:
67:e0:26:81:ef:b2:29:17:ce:db:e1:f1:d7:f0:f4:
d7:28:82:5b:81:e7:6f:04:4a:de:c9:17:fb:70:cc:
fd:01:ed:39:a6:67:40:75:67:af:3a:b9:a3:be:81:
d7:bc:9b:47:88:d1:0e:0a:03:c3:09:07:0d:4d:3b:
9e:bc:92:bd:76:5c:17:c3:b5:fc:90:66:ef:00:28:
6c:cf:df:94:18:6c:d3:be:f0:f3:90:a5:1c:52:09:
d3:dd:83:72:76:c7:08:fe:53:04:5e:b1:1a:dd:ac:
a5:2a:8c:96:61:a4:6b:24:b9:38:cd:e0:a9:cf:b3:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:33:26:3D:62:AC:9A:A8:85:09:BD:5D:64:BB:30:8B:DA:80:30
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2b:f5:91:f8:92:e9:aa:b6:34:d4:d9:10:43:13:ec:66:b1:
67:90:5f:c1:03:be:2d:4c:a5:00:94:c7:89:d9:9b:62:48:21:
0a:e4:ef:81:5c:01:32:05:e6:76:9b:f3:34:19:9e:ad:bb:ac:
76:c1:e1:a7:b7:23:dd:dd:39:e4:15:bd:bf:56:09:26:50:3f:
07:2f:b2:41:41:0b:96:66:96:0d:e5:ff:68:da:0b:9b:c8:68:
89:a7:10:7b:6a:28:da:20:b6:16:3e:06:11:cb:70:c6:5c:0b:
84:04:e1:3b:45:0d:27:28:e2:fd:e7:d5:b1:06:1b:f2:b9:d2:
e1:0f:83:85:4a:7e:b2:7c:21:17:37:02:b7:4c:bd:1c:ed:2e:
b7:85:e3:42:5c:f9:87:db:4f:45:ff:34:9c:fb:ec:62:aa:f0:
2d:b4:64:31:cd:1c:da:40:cf:56:38:ef:72:a0:27:13:3c:8e:
58:0e:32:b1:d5:93:46:06:1e:1a:cb:41:f1:6b:51:b4:f4:25:
20:29:fb:02:9e:93:25:26:69:b1:2b:10:98:ed:8e:28:1b:8d:
dd:77:c4:23:f4:98:93:ef:b3:3d:9b:6d:60:e7:4d:f5:5a:9a:
8b:f0:7b:91:3c:60:7a:48:96:3d:8c:1b:a8:06:d5:8f:6a:be:
54:c0:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:44 2025 by rpki-client