Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: 4ugm/dSnYhqyE9VUlOaWWF+AmVXYUMFUorc5o8XOCK4=
Subject key identifier: AB:1E:C9:FD:82:03:6B:55:CB:8F:E1:4E:02:48:E8:91:5C:23:CA:36
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 0196729DB3BD84EDB77B7BBEBF0F2F13BD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0ABA
Signing time: Sat 26 Apr 2025 15:00:59 +0000
Manifest this update: Sat 26 Apr 2025 15:00:59 +0000
Manifest next update: Sun 27 Apr 2025 15:00:59 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: AcFRTwB8Nos+9ob3EQgyt03PX4JJt4eo1iOCKHIcA24=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:b3:bd:84:ed:b7:7b:7b:be:bf:0f:2f:13:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Apr 26 15:00:59 2025 GMT
Not After : Apr 27 15:00:59 2025 GMT
Subject: CN=ab1ec9fd82036b55cb8fe14e0248e8915c23ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:fa:3c:c7:1f:6c:d0:f4:d9:fc:a8:aa:93:
c4:ca:74:97:61:0c:b9:f6:90:bc:be:1e:61:f9:4e:
8e:79:cb:1f:8e:0a:93:21:69:f4:5b:01:e9:63:dc:
22:a3:4c:56:02:aa:d4:c1:ec:d1:9d:2b:e0:8d:e6:
e2:cc:76:ad:af:d0:b0:92:01:a6:77:e1:b2:52:83:
9f:80:4f:3b:0e:70:e3:e2:56:c9:09:e3:f1:d9:b0:
c6:44:c4:9e:63:0a:03:84:78:34:c4:ed:5b:6c:7d:
30:6c:bb:6f:65:26:52:a3:d4:e7:d0:14:14:49:b3:
17:ef:0b:40:a9:53:c1:05:d0:9f:3f:a8:85:c0:91:
cf:de:96:cc:78:7f:d0:f8:3e:5d:bb:0f:8f:b2:4d:
0d:7e:23:64:57:9a:de:f6:7f:8e:70:2a:e1:6f:f7:
f2:87:d4:e2:e8:ff:58:6d:31:75:23:fd:c7:f4:fd:
ad:e5:1a:fc:28:21:ee:d6:94:5e:85:f6:dd:4f:9b:
54:eb:0a:5e:b3:33:57:47:73:00:f1:75:cf:91:59:
54:bb:2e:ff:44:a3:59:4a:73:b6:9f:95:91:72:90:
02:51:fd:55:29:af:e8:aa:5b:4c:80:5c:68:1c:36:
b8:f5:13:92:f1:a8:9d:11:31:7f:89:fc:db:f5:96:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:C9:FD:82:03:6B:55:CB:8F:E1:4E:02:48:E8:91:5C:23:CA:36
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:03:33:29:d4:e4:81:d4:64:17:65:cc:de:96:a2:7c:cf:4a:
04:cc:ba:e7:fb:01:21:fa:8d:69:2e:09:65:8b:50:4e:e4:a3:
e1:f6:42:a1:2e:6b:0b:64:8e:da:98:0e:d9:c3:c9:cb:6f:31:
aa:f7:76:2d:69:02:82:89:83:fb:da:35:e4:ff:39:3c:cf:81:
8b:1f:3f:47:dd:b9:eb:54:4f:62:16:94:36:c2:e8:c2:34:6d:
ac:38:b8:ed:01:d1:ad:cb:d5:d3:46:ae:15:cb:a6:99:a7:2b:
9f:58:b4:77:6f:67:65:51:e3:d0:a6:bb:7c:d0:c0:1f:17:a6:
c8:3c:38:85:51:a0:50:78:b5:cf:5d:97:28:ff:69:c3:89:a0:
ea:e1:5f:51:1b:64:6a:14:a7:f5:b6:10:f3:b1:88:7a:0e:3e:
2a:73:d9:92:62:d7:85:fb:b1:2e:4d:4e:80:f4:a2:1f:6d:43:
02:f3:98:7e:1e:e9:76:a7:45:ba:26:2c:ec:d1:6e:ee:d5:a2:
73:0f:da:ca:1b:76:81:e0:43:a6:7b:f1:b3:93:8a:0c:a7:4f:
9c:42:91:01:77:86:8b:71:9f:6c:b4:31:f0:c2:e3:3d:ae:df:
a9:45:5c:5d:02:f4:ac:23:ae:47:34:bf:d1:1b:eb:d6:5f:2a:
b1:fb:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:04:42 2025 by rpki-client