Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: lnKfsm2i7p/50pEqw5pJc+R1y9HgMtD3EvTm0xx4f6o=
Subject key identifier: EC:D9:AC:23:7E:7C:3F:A2:64:56:7A:F4:2A:A2:FF:A8:CF:3C:EA:6A
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 01987298DB1FE5725FFA589886DED967C3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 0E76
Signing time: Mon 04 Aug 2025 01:01:16 +0000
Manifest this update: Mon 04 Aug 2025 01:01:16 +0000
Manifest next update: Tue 05 Aug 2025 01:01:16 +0000
Files and hashes: 1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: 6PplNlmaBtW2LXqLexvxckTdMYzev0J/nQFxMhlSCMs=)
3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:db:1f:e5:72:5f:fa:58:98:86:de:d9:67:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Aug 4 01:01:16 2025 GMT
Not After : Aug 5 01:01:16 2025 GMT
Subject: CN=ecd9ac237e7c3fa264567af42aa2ffa8cf3cea6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:bc:ec:de:eb:d0:e2:ad:64:4c:32:bd:06:
6d:8d:a1:75:6b:be:31:92:1d:92:e8:3a:23:8c:41:
9f:d9:97:8a:5d:f4:e5:10:e4:fc:a8:36:c0:ab:b8:
4e:23:49:d4:b1:a7:0a:30:d9:07:04:87:6c:de:7f:
7b:87:94:13:be:cc:03:3c:d1:fb:93:2d:0e:80:a3:
b4:a5:22:f2:01:ae:b8:ec:87:0a:10:78:ba:c0:4f:
43:b6:d2:24:33:16:05:26:77:28:2c:50:f1:b3:0a:
70:f9:29:db:5d:7c:50:89:ce:86:c4:49:19:6f:af:
8b:cd:36:37:28:b1:1c:99:b0:4f:30:a3:98:69:f4:
b4:89:ec:4b:52:84:9d:8e:09:d8:17:30:3d:ce:b7:
68:9a:bb:d8:32:97:ce:32:46:e9:6f:80:7d:ce:7a:
61:92:e0:f4:8f:fd:ad:e3:30:e4:b7:25:3b:84:83:
c6:1d:e7:19:0e:3a:a2:2c:13:11:67:13:40:87:44:
c5:47:20:9d:25:c3:f6:2d:9c:92:a9:8f:e5:9e:da:
15:77:42:37:d5:d3:54:e6:b7:9b:ee:d9:e8:78:c5:
da:7a:74:df:d8:1c:96:cd:44:58:67:2c:43:f4:05:
d5:0b:ee:83:83:98:df:47:4e:a0:5b:68:99:82:0b:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:AC:23:7E:7C:3F:A2:64:56:7A:F4:2A:A2:FF:A8:CF:3C:EA:6A
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fa:d0:1f:ac:8d:f5:e0:18:7f:07:f8:c9:0f:db:a9:cf:ad:
7f:88:08:0f:49:c4:38:78:85:02:07:19:5f:2f:ad:ba:bb:9e:
d6:82:3f:09:56:75:00:bd:59:96:7b:28:84:56:e2:76:be:44:
41:3a:fd:85:8e:c5:2a:cc:ff:a8:c5:99:b1:a1:18:4c:cf:67:
06:3e:a1:2e:96:c8:0c:33:36:1d:21:8e:62:eb:ee:6e:6a:df:
ca:6b:ee:d0:82:c5:c0:94:5c:68:e9:77:02:51:4d:68:00:93:
a0:e0:5f:9f:4f:38:81:a1:29:da:22:4a:c0:fb:ff:d9:c0:ca:
4a:37:a8:3f:7b:49:a0:af:36:03:59:a6:59:49:7d:60:7c:9b:
45:79:d9:0c:ed:f0:f9:bf:97:7d:a4:41:80:ae:a9:45:7c:05:
e4:62:cb:29:b2:3d:bc:91:e8:63:81:0e:36:e1:82:79:5d:4b:
cc:95:17:04:ca:5f:ec:c8:f4:71:f1:1e:33:0d:37:1a:71:5b:
e3:6d:60:b3:b7:2c:9a:dc:58:37:15:70:ec:14:c1:d7:42:2c:
49:75:de:a9:b6:b5:b7:1e:59:ef:0e:56:7d:42:78:78:da:69:
c8:d4:fd:16:70:b2:6c:05:74:fc:b6:40:f0:da:21:b1:20:94:
66:d7:ea:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymNsf5XJf+liYht7ZZ8OlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2JhMzgwMmY5YzliZjY3NTZkYWFiZDMyNGU1MzI2ZWRl
NDE5YWEwHhcNMjUwODA0MDEwMTE2WhcNMjUwODA1MDEwMTE2WjAzMTEwLwYDVQQD
EyhlY2Q5YWMyMzdlN2MzZmEyNjQ1NjdhZjQyYWEyZmZhOGNmM2NlYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq687N7r0OKtZEwyvQZtjaF1a74x
kh2S6DojjEGf2ZeKXfTlEOT8qDbAq7hOI0nUsacKMNkHBIds3n97h5QTvswDPNH7
ky0OgKO0pSLyAa647IcKEHi6wE9DttIkMxYFJncoLFDxswpw+SnbXXxQic6GxEkZ
b6+LzTY3KLEcmbBPMKOYafS0iexLUoSdjgnYFzA9zrdomrvYMpfOMkbpb4B9znph
kuD0j/2t4zDktyU7hIPGHecZDjqiLBMRZxNAh0TFRyCdJcP2LZySqY/lntoVd0I3
1dNU5reb7tnoeMXaenTf2ByWzURYZyxD9AXVC+6Dg5jfR06gW2iZggt5IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzZrCN+fD+iZFZ69Cqi/6jPPOpqMB8GA1UdIwQY
MBaAFBI7o4AvnJv2dW2qvTJOUybt5BmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQt
ZTRkMDI0Y2RhZTBjLzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQtZTRkMDI0Y2RhZTBj
LzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfrQH6yN
9eAYfwf4yQ/bqc+tf4gID0nEOHiFAgcZXy+turue1oI/CVZ1AL1ZlnsohFbidr5E
QTr9hY7FKsz/qMWZsaEYTM9nBj6hLpbIDDM2HSGOYuvubmrfymvu0ILFwJRcaOl3
AlFNaACToOBfn084gaEp2iJKwPv/2cDKSjeoP3tJoK82A1mmWUl9YHybRXnZDO3w
+b+XfaRBgK6pRXwF5GLLKbI9vJHoY4EONuGCeV1LzJUXBMpf7Mj0cfEeMw03GnFb
421gs7csmtxYNxVw7BTB10IsSXXeqba1tx5Z7w5WfUJ4eNppyNT9FnCybAV0/LZA
8NohsSCUZtfqfA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:15 2025 by rpki-client