Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: CQau27BIa/maMaXzke0gThHeHvpJWA6nd8Fw6/hoK/g=
Subject key identifier: 66:0C:1E:95:D9:9C:18:C8:49:20:FD:C2:E3:B8:A9:9D:0C:AE:2F:9E
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0198D660F404A0C93793305FF84D0151369C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0E37
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: ypPBK0hmSPtWFqn4GUgVcNo8+5BFT61zIXAbheawpZs=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f4:04:a0:c9:37:93:30:5f:f8:4d:01:51:36:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=660c1e95d99c18c84920fdc2e3b8a99d0cae2f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:ab:8a:f4:20:de:72:57:e5:c0:2e:96:c6:
fa:83:b5:c0:5b:ef:ea:05:a8:3d:16:cb:fb:54:83:
52:66:4d:c7:99:c3:52:aa:43:ac:f2:21:1d:32:35:
01:f5:76:30:d3:c4:4b:75:26:71:d7:53:77:8b:0d:
2b:40:43:bf:39:77:8d:62:5e:97:c1:a6:5b:b1:78:
87:df:28:70:59:da:04:6e:99:7b:b9:76:b1:b5:f0:
2d:3c:79:a2:79:00:5c:e7:50:0f:8e:f5:c0:9e:fa:
b5:e6:7d:b2:f9:24:32:69:06:8c:62:a0:fd:03:fe:
fc:78:a9:4c:ad:56:91:0a:01:81:5e:64:1e:60:fd:
e4:3c:eb:be:5b:ef:19:81:f0:17:0f:49:98:f0:77:
75:6f:7d:84:77:c8:3f:e4:3c:7e:1c:69:81:4c:77:
86:74:9b:8a:78:b4:be:aa:59:49:86:0a:9b:75:be:
ed:a6:ff:ff:1d:e8:5c:fb:19:68:eb:93:14:35:f3:
d2:11:ff:58:9a:f5:7c:1c:e1:d1:4d:5c:60:9d:b0:
33:65:40:c4:35:28:38:c5:6c:ed:b4:da:b1:be:bb:
72:77:2d:1a:1b:46:f5:07:55:39:d5:60:d8:49:ac:
1b:e9:48:a7:9f:46:79:ef:0e:74:ca:cb:80:17:be:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0C:1E:95:D9:9C:18:C8:49:20:FD:C2:E3:B8:A9:9D:0C:AE:2F:9E
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:73:8b:4e:aa:86:6f:78:4f:52:3d:2f:f2:b0:b1:a3:06:
18:50:d2:35:e7:e1:76:b2:da:ff:ab:e6:94:56:fa:78:8e:50:
0e:dc:be:df:50:0d:b1:70:cf:dc:05:13:62:3e:93:ff:91:60:
26:3b:d4:7a:e9:e9:3d:d6:f1:a0:47:7c:41:25:99:4b:66:33:
b5:c2:cd:60:d2:53:71:e9:d2:8d:b2:ec:78:52:b8:d4:22:29:
ba:5f:8a:c2:b4:df:69:15:66:e8:50:6c:e9:a9:6c:bd:1e:0e:
1c:4a:8a:e0:81:a8:7d:92:72:2e:da:39:bd:57:47:e1:23:f5:
ca:5d:b2:bf:87:7e:2f:44:b3:64:1d:13:75:15:fd:bb:a8:cb:
6c:f4:8e:f0:be:39:b4:4c:c4:12:4d:e8:d9:80:1c:b3:65:41:
4a:77:56:4b:7f:7e:b0:6a:88:66:a1:de:62:96:99:13:f9:ab:
19:eb:aa:91:c9:69:05:ec:61:25:0d:ac:af:49:71:4f:b9:11:
3c:57:b1:fd:14:6f:a7:15:67:78:c6:97:dc:7a:53:c3:64:17:
2b:6d:76:da:98:47:c5:d0:dd:a3:7b:68:ac:29:f0:08:2b:14:
2f:dc:3d:1f:96:b5:df:90:b7:0b:04:f2:16:19:d3:29:29:e5:
80:fc:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:17 2025 by rpki-client