Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: 4E3Lyk6hEFif5tbkxkJEaYMlhanancyhAoU5ferl6mY=
Subject key identifier: 8A:FB:53:5B:70:70:57:65:A7:92:20:1E:2C:4D:C7:1D:14:BF:58:1C
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 01976BF4A0CCAE7257D84CB09434B0AB8CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 0DEE
Signing time: Sat 14 Jun 2025 01:01:23 +0000
Manifest this update: Sat 14 Jun 2025 01:01:23 +0000
Manifest next update: Sun 15 Jun 2025 01:01:23 +0000
Files and hashes: 1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: FoDx0AZ8hkWp56dC+6pTMJo1VHAqEjU9Bcatezem36g=)
3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:a0:cc:ae:72:57:d8:4c:b0:94:34:b0:ab:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Jun 14 01:01:23 2025 GMT
Not After : Jun 15 01:01:23 2025 GMT
Subject: CN=8afb535b70705765a792201e2c4dc71d14bf581c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:4b:b8:f0:5b:90:34:fa:b2:e0:c2:4d:fc:
5e:d9:c6:fd:c6:43:c1:d4:a2:ac:c1:b5:2d:c4:0d:
cf:eb:69:b7:7e:60:36:72:9c:ed:df:45:7e:3c:fc:
f1:d9:4f:73:f5:70:d0:9e:44:c5:e1:d2:45:db:f6:
f5:d3:47:10:72:ac:b1:c6:be:05:ad:35:67:d7:d4:
d1:78:cf:e1:2c:40:c0:3b:42:45:69:ae:cb:7c:95:
98:b7:6a:da:ae:e4:3c:b6:51:b5:46:08:a8:82:2e:
16:e9:15:6b:ea:e2:28:47:41:73:d9:f3:aa:f4:04:
ff:cc:66:42:0d:41:03:93:c2:47:02:65:33:a1:57:
2f:0c:02:68:8c:3f:b0:71:4e:50:9e:4f:eb:03:d5:
e8:d0:e8:13:31:39:b2:98:cd:9f:3a:1d:d9:bb:98:
12:9b:6c:2d:92:78:9f:2f:d0:cd:3a:51:38:08:92:
02:20:10:89:a6:09:7b:16:d2:be:38:4c:86:24:f8:
e4:be:2a:b9:45:b4:07:fc:a1:66:fe:8a:c9:15:f5:
ff:d9:a4:89:96:66:02:5a:96:00:c7:35:38:3f:7c:
f6:7d:b2:f7:ab:7d:f8:54:72:e0:ce:86:85:6d:64:
c0:62:56:d8:6c:5e:2c:42:30:0b:24:f1:bf:f0:f7:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:53:5B:70:70:57:65:A7:92:20:1E:2C:4D:C7:1D:14:BF:58:1C
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ab:ce:a9:52:df:a4:f0:af:44:5c:b1:64:34:45:c3:7b:36:
86:f5:6e:d5:e8:08:e9:f6:d4:5e:4b:a8:8c:60:18:0f:b9:22:
d6:49:bc:3c:38:81:41:be:3e:69:28:0f:f6:64:a5:07:bd:79:
a6:a9:89:9d:29:02:e9:23:0a:d4:e8:4d:56:4d:72:ae:62:70:
6f:f1:96:2d:c6:61:ca:d8:a4:a7:31:3b:97:22:5e:7e:66:b9:
83:79:13:a9:c3:89:52:c6:b4:47:95:ef:98:6d:90:1f:f8:9c:
30:12:b5:38:bd:bb:65:f6:50:29:ec:f1:48:94:62:81:81:01:
57:65:69:32:2b:b6:c9:3c:d9:8a:1d:ec:4d:93:fc:d2:81:5f:
4c:6f:a0:19:28:25:5d:fb:c0:cc:35:cd:a3:39:0f:29:61:53:
ce:e2:7a:7c:88:f8:b3:13:7b:22:4e:59:10:14:63:09:1c:6c:
14:c1:ee:9e:82:f0:4c:93:0d:29:b1:1e:e0:53:fe:2a:f9:b2:
a6:d2:44:c0:15:e7:73:55:7b:a3:4a:c7:31:7a:1b:86:cb:02:
96:12:ac:0e:94:65:41:7a:9a:2e:03:1e:10:d3:32:c7:be:91:
1d:af:fd:82:75:f2:b0:ed:6e:3e:c9:f6:39:bc:b0:59:01:3e:
69:5b:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:28 2025 by rpki-client