Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: 5cFTKcDew1dQRtXoPZ/fkYzdvTDBR9QL9S0/lPLX0DY=
Subject key identifier: 13:76:2E:01:AC:3B:B4:C2:C9:20:DA:52:E1:23:4F:EB:2D:3E:31:2B
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 019A4D73DDA4A2FD2E092DE52FD8A680AFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0CB9
Signing time: Tue 04 Nov 2025 06:00:30 +0000
Manifest this update: Tue 04 Nov 2025 06:00:30 +0000
Manifest next update: Wed 05 Nov 2025 06:00:30 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: 9mbzzNPChh5EnN1HxSVbR+46vq2zGapH5Gjsvpird60=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:dd:a4:a2:fd:2e:09:2d:e5:2f:d8:a6:80:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Nov 4 06:00:30 2025 GMT
Not After : Nov 5 06:00:30 2025 GMT
Subject: CN=13762e01ac3bb4c2c920da52e1234feb2d3e312b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:f9:0e:ad:97:b7:b8:2b:68:59:06:31:61:
0d:1f:90:ff:28:bf:2a:2d:e9:30:3a:eb:fa:38:0d:
68:c1:6c:62:b0:72:57:39:9f:f8:56:d0:9d:8a:a8:
76:b6:9f:63:94:5f:9e:97:b3:41:bf:14:91:c9:f2:
59:7f:73:16:ac:e1:d3:ab:e0:bd:cd:ca:57:30:8e:
09:06:49:a8:4b:75:24:a5:e1:db:3b:0d:d1:69:13:
b3:e8:6e:54:10:7c:e7:a1:1b:e9:0b:5e:75:f7:8a:
16:b1:c5:55:36:f9:0b:e8:d2:ac:6e:2c:2a:6d:c5:
52:84:e3:a2:a5:c6:34:c5:74:25:57:b2:96:9f:6d:
f5:72:d9:2b:c6:dd:10:5f:4a:4b:6e:6b:f0:c8:49:
9e:0e:54:5e:99:53:f9:f3:7a:cb:03:f0:b8:84:0d:
11:0c:63:79:7c:53:ea:ef:5f:0b:c5:dd:b2:48:5d:
7b:47:01:dc:be:02:c4:be:50:f0:00:de:1c:31:a0:
f1:b7:cb:0d:ef:5d:40:36:1e:e9:11:72:1e:dc:f7:
13:c8:de:33:56:64:34:40:13:e9:a7:21:03:ef:82:
46:2f:cc:ec:bc:6e:a8:3e:1a:e2:d4:8c:ea:fa:6a:
12:1a:f5:1f:a3:28:19:c9:23:cf:d3:26:cc:4a:50:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:2E:01:AC:3B:B4:C2:C9:20:DA:52:E1:23:4F:EB:2D:3E:31:2B
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:dc:46:f6:18:26:74:71:53:05:b9:22:bc:60:6f:c9:02:
bd:8a:a4:a4:ed:10:e4:d4:d5:67:cc:29:1e:fc:3d:88:cf:cb:
63:92:8d:d8:f5:82:5c:d8:be:11:69:e9:c4:52:24:14:c9:74:
48:af:04:c3:fc:26:45:3b:6d:1d:3f:2f:74:86:dd:0a:d4:34:
b7:9c:48:65:3c:8e:79:ae:7b:59:e3:e5:65:61:50:39:77:c0:
0c:e4:6e:af:ff:95:4f:c1:4d:01:40:1b:5e:27:45:63:70:bf:
49:47:14:85:4a:21:72:71:be:f3:47:2c:f0:ce:e4:26:fb:dd:
26:ed:4d:83:c1:47:7b:de:5b:1f:d4:32:59:91:46:ab:21:68:
f4:8c:81:41:da:16:a8:20:d7:dc:90:6a:31:e4:75:b3:f4:2e:
71:e3:75:51:83:08:b8:cb:6e:2d:e0:bd:f2:f4:ba:1f:3a:17:
11:6e:5b:c3:d1:c5:fb:82:56:d9:3f:12:da:27:21:ba:85:e9:
55:39:8c:43:72:8b:f5:94:fa:ce:8f:2c:75:95:e4:3c:9d:5b:
9e:3e:7a:64:7c:bf:ea:39:f2:71:31:9b:0e:4f:25:03:ed:b8:
d7:2b:1a:33:9d:a7:63:c3:20:43:8c:47:39:b8:19:ba:e6:86:
13:3d:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:44 2025 by rpki-client