Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: cyDG+LABurEDwPUg0vL/MU+Tt7FtmXQac+xtBgaJ6B4=
Subject key identifier: 33:81:59:96:00:F2:C5:13:52:B0:CC:AC:EF:D0:F8:8D:48:02:B8:4E
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0196AE0DE6B01AD556D02AB7EFCC176D95D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0D19
Signing time: Thu 08 May 2025 04:01:08 +0000
Manifest this update: Thu 08 May 2025 04:01:08 +0000
Manifest next update: Fri 09 May 2025 04:01:08 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: obp3AaHiirfGywqqkzTkNpvSnTWatgMe3kjvUHfm/As=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:e6:b0:1a:d5:56:d0:2a:b7:ef:cc:17:6d:95:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: May 8 04:01:08 2025 GMT
Not After : May 9 04:01:08 2025 GMT
Subject: CN=3381599600f2c51352b0ccacefd0f88d4802b84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:65:5c:36:ab:8c:ff:79:77:f4:4c:de:77:
c9:e4:4e:50:82:7d:fc:ef:4f:76:57:29:6a:02:2e:
8b:80:0e:ed:c4:db:93:48:70:f1:78:e6:40:bc:c0:
c8:92:73:76:9f:a8:fb:03:fd:13:0e:cc:89:d6:b9:
d2:55:d6:0b:5e:7b:c1:27:eb:8d:92:ef:d9:53:ee:
29:4e:04:89:49:5e:1a:d4:6a:cf:83:c4:31:8a:c7:
11:62:ad:ac:7c:93:1d:04:6e:0d:79:4f:c6:0a:c9:
23:9b:73:9d:b9:4e:62:f7:e4:53:70:ad:ab:8c:6c:
31:4f:ea:7e:64:52:b8:40:6e:76:f3:09:a1:ed:00:
66:cb:54:f3:0d:2f:e9:8c:d8:55:07:5a:a4:3a:f6:
d3:6a:6f:a7:36:ae:34:a8:49:14:5b:3b:20:14:25:
49:1a:b8:b0:10:dc:f3:40:81:f3:3e:85:0d:7a:e0:
56:5e:08:5e:0d:6b:a5:44:4b:ad:2a:a7:36:34:f2:
02:2b:61:c6:82:56:37:6b:0a:00:a5:9f:b3:32:d0:
9c:e1:dd:c1:96:58:99:d7:c4:64:5c:45:47:15:85:
d6:c4:0d:61:fc:34:3d:8a:85:be:2e:c2:b7:8a:73:
3b:13:c0:72:bd:bd:ee:98:6b:91:a1:82:00:41:59:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:59:96:00:F2:C5:13:52:B0:CC:AC:EF:D0:F8:8D:48:02:B8:4E
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:75:17:3d:15:bf:9e:e4:b5:27:ec:a1:72:c4:a1:7b:b2:c2:
c5:e2:75:f3:f1:4e:52:ca:41:f6:c8:e4:d0:cf:59:76:e0:88:
b2:b3:67:2a:27:7d:78:2b:e7:b6:e6:ef:0a:0b:f0:e2:9b:fb:
b7:7f:cf:01:5a:ef:83:67:9a:18:df:af:c6:21:8d:4f:be:fd:
88:3d:06:51:40:ee:04:95:e4:2d:2a:5c:48:34:77:f6:e1:a7:
ce:53:ea:16:9a:18:82:7a:81:7a:ab:00:f3:e7:c3:30:dc:d3:
48:02:5f:17:be:b5:15:5e:12:a7:1d:74:dd:32:c4:d2:83:39:
41:f5:d9:23:3b:74:41:a4:40:1e:97:7e:17:ea:2b:01:67:b9:
b4:26:8c:68:8a:1e:b7:4a:36:f4:78:a3:40:8c:27:e9:d7:f8:
43:08:38:ea:82:d3:84:45:da:22:f8:35:cd:0a:16:30:ac:6c:
ac:b0:c0:b9:eb:bc:87:a3:d0:52:af:9f:e1:55:ac:3b:8a:06:
66:89:dc:e5:ea:2b:56:20:33:a3:49:42:49:a4:5b:a0:a5:53:
8a:11:75:20:a9:ec:45:4a:82:9e:13:e1:c1:a3:af:83:96:38:
2b:e0:e9:6a:47:76:03:e8:55:02:ff:9c:3e:7b:95:e8:24:ee:
2a:16:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:02:36 2025 by rpki-client