Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: i2C+hla0HtQ67TRYN/yO2SC8F243PsccRYwhTxL6PW8=
Subject key identifier: D7:53:FA:E5:10:B9:5C:C0:73:3D:93:48:6A:A0:60:6B:5B:F7:86:55
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0198D4E06371AEBCAA2DAB9E12F0BEE0D8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0BF6
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: lJ/1FRELiHNuh4bvkYskK933Y4HW2LmQrtUOzd55YWo=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:63:71:ae:bc:aa:2d:ab:9e:12:f0:be:e0:d8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=d753fae510b95cc0733d93486aa0606b5bf78655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:33:5c:95:21:a2:17:b1:6b:ef:2f:db:c3:
f1:ed:11:26:b7:29:b6:27:c9:80:a3:c2:63:15:aa:
00:64:eb:50:90:90:4e:9e:70:57:1d:f1:64:eb:1d:
2d:a1:90:cc:27:87:da:94:40:4c:93:f1:20:f4:7b:
bc:4e:62:ad:0e:62:bc:7a:45:cf:fa:85:e1:3b:2d:
e5:24:c6:fe:16:5a:a3:55:d0:1b:41:0b:f4:ee:52:
6a:95:44:bb:80:bf:9f:e6:60:72:e3:6f:5b:42:93:
ea:40:82:0c:c6:95:1b:b3:4d:1f:cc:ce:fb:bb:16:
cb:ea:d0:91:95:09:c7:eb:75:00:3e:48:52:6e:3d:
c5:cc:96:a9:9d:a0:58:06:48:8c:1e:ce:c1:42:c6:
45:df:99:e3:bf:6f:84:6d:80:99:e0:31:00:21:6f:
c8:04:18:2f:50:20:4c:21:e2:de:8a:e0:81:4e:fc:
86:a2:36:a1:d8:58:b9:58:d0:bb:ff:33:17:da:f0:
21:d4:22:3e:a8:e9:bc:f2:6b:c4:c0:5e:9c:41:f0:
c4:1c:a2:99:a9:ce:81:c2:a2:c1:b0:51:fa:3b:fe:
a9:40:02:4d:35:b6:11:3f:25:14:22:2f:c6:1a:01:
d3:bd:df:c2:a3:49:61:55:0e:44:a1:9f:39:05:11:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:FA:E5:10:B9:5C:C0:73:3D:93:48:6A:A0:60:6B:5B:F7:86:55
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:f6:dd:91:80:f3:a8:23:05:78:fc:d8:b0:de:d0:48:da:
39:80:80:31:8c:e9:b2:14:4b:80:16:d0:59:ab:4d:46:4b:79:
43:d3:d6:62:ff:c9:8d:00:e2:7e:5d:62:22:ca:ca:20:ea:af:
b0:de:6d:97:b4:39:a9:6b:9a:3f:b0:c0:c0:d9:37:cd:ef:6f:
e7:95:d9:81:03:ef:d8:33:51:26:ce:3a:de:99:af:63:99:e4:
b2:21:0f:c6:cc:37:2a:08:f4:24:f8:09:fe:81:82:cb:2a:10:
82:6d:8f:03:df:4e:3a:a2:93:fc:62:b2:5b:01:68:84:28:72:
95:f0:67:31:c0:b2:61:3d:86:fc:6d:12:77:35:d0:3c:ee:3a:
87:1e:3b:43:25:85:d9:ce:ba:ff:f9:a7:f5:40:37:20:b2:3b:
dd:d7:a7:b3:45:75:b3:20:2e:5c:85:1e:a0:00:90:4c:d4:a5:
e4:b6:19:41:d7:fc:4c:5c:d2:82:cd:75:c5:b3:61:7d:5a:c6:
f0:b4:fd:26:85:a4:c4:50:7c:87:df:3a:6a:f6:43:c5:16:ca:
3e:0d:6e:50:e6:21:80:ad:6f:05:24:18:7b:6f:b9:a6:08:1f:
53:41:bb:81:69:87:0a:02:6a:8c:e3:cf:6e:f8:cb:be:bc:9e:
d3:1e:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:48 2025 by rpki-client