Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: pZeTUnrlCwpVm/jztQuTeNZRoTKBAAq+zDqczxMY2QQ=
Subject key identifier: 78:3E:FE:DF:F6:7E:7A:36:05:33:DE:54:DD:38:23:97:08:6A:65:37
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01976F9A43292AE1C8A4DB86F19618B0829E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0B3D
Signing time: Sat 14 Jun 2025 18:01:10 +0000
Manifest this update: Sat 14 Jun 2025 18:01:10 +0000
Manifest next update: Sun 15 Jun 2025 18:01:10 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: SY31Xh0UMVkcZ1iVP1wdaiXtXtq/QIHHC/LU6AyOMEc=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:43:29:2a:e1:c8:a4:db:86:f1:96:18:b0:82:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jun 14 18:01:10 2025 GMT
Not After : Jun 15 18:01:10 2025 GMT
Subject: CN=783efedff67e7a360533de54dd382397086a6537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:0d:48:2b:c1:ff:0d:16:34:a7:3e:da:cd:
95:e5:3b:7d:63:4a:f5:3c:cd:6e:fc:d3:17:78:a0:
ca:49:ac:2d:38:8c:38:2c:4c:f2:0d:79:43:15:e8:
24:bc:cc:b6:15:eb:24:04:7f:92:e4:07:cd:9e:98:
a5:b6:1d:0a:aa:9e:da:48:29:45:9b:e0:1d:44:8a:
8e:0f:70:1f:bd:77:f8:60:93:cd:df:bf:5e:30:c3:
af:50:57:ae:45:a9:f4:b6:12:1f:e0:86:0d:95:5a:
bd:2c:1a:e2:01:5f:21:35:1e:e1:ac:39:e0:46:5e:
7b:b9:db:43:fd:47:ac:a8:fa:77:0f:80:0f:d1:18:
eb:ad:2a:17:d2:9d:32:73:63:8c:74:14:5a:08:c7:
bf:06:37:14:ae:ed:8f:a0:39:03:5b:e4:11:c4:90:
61:af:73:13:71:73:bf:d4:f0:2c:81:0c:7a:41:7b:
2b:be:46:62:af:9f:6a:59:13:6e:c2:58:1c:46:09:
51:58:7c:21:b6:7a:1d:e3:63:2c:33:62:96:cd:b0:
e0:29:9f:07:47:0e:7a:07:bc:73:c1:a9:43:30:87:
24:2c:69:03:76:37:c1:7f:78:e6:f8:e1:45:6c:f8:
d2:eb:f4:e1:d4:dd:06:d1:55:73:be:4d:ec:f7:c9:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:FE:DF:F6:7E:7A:36:05:33:DE:54:DD:38:23:97:08:6A:65:37
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7e:40:51:a0:f7:35:3d:0c:e7:8b:e7:c1:a0:5f:59:73:72:
4e:98:ae:86:58:92:dd:48:38:15:ff:03:6d:cb:f9:b0:1f:fb:
42:ec:78:14:ab:91:6c:0a:08:d2:11:b8:b3:2d:09:9f:c8:c6:
a7:82:69:d8:1d:94:b7:99:7d:99:fc:94:5e:77:33:b5:f2:70:
fb:27:72:a8:da:c8:67:a0:6e:8f:9f:a4:70:f2:48:85:e5:e9:
6b:c6:35:b9:4e:0d:67:b2:93:de:4d:35:54:8d:bb:f7:e0:a3:
54:8a:9d:98:94:93:5f:b9:99:7d:8b:24:1a:04:39:67:78:f4:
d8:8d:5b:e3:24:eb:af:e0:61:b0:1b:56:1a:fa:51:8a:12:51:
64:20:87:01:2a:10:60:a2:86:b5:24:8c:c5:80:61:2d:f6:8a:
a0:f3:20:24:a0:d2:6d:da:6d:8b:2d:60:46:89:3c:a1:11:a9:
9a:87:2b:8c:fd:8e:5c:e1:d1:33:9b:cb:4c:3a:c6:11:a3:93:
f9:9c:4c:af:b3:21:07:a4:8c:c5:2c:a8:87:7d:7c:3b:34:11:
49:f7:f4:ae:76:53:97:18:2d:23:75:c7:aa:dd:50:5c:02:08:
93:fd:70:90:10:68:70:97:15:41:cc:d8:7f:09:b3:a1:1d:79:
2a:86:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:41:18 2025 by rpki-client