Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: Z7+UnwYkpKjhUft95/BizFuy7Uvo6BEUPr9Xp73C99I=
Subject key identifier: AD:51:BD:C3:FA:31:86:78:FE:CE:89:80:55:ED:11:76:0C:5D:9B:85
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0197B6A12AECCBD10713C91D0789412F6812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0DA2
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: Sq2yDAvg/ZdNipf7retsVOKo9HpOshKrtQQfdBW5nm4=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2a:ec:cb:d1:07:13:c9:1d:07:89:41:2f:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=ad51bdc3fa318678fece898055ed11760c5d9b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:7c:09:c7:12:7d:4f:51:d5:8b:9c:ac:9b:
e7:6e:61:1c:cc:a7:7e:41:47:9d:8b:3a:1c:a2:66:
7f:79:13:4b:6b:d9:05:95:72:88:b8:fa:11:78:fb:
1e:6f:7f:68:48:82:47:2c:67:1a:77:81:fe:84:02:
5a:bd:c7:02:6a:b5:dd:84:d1:6d:87:11:9c:3d:40:
bb:04:bf:0f:6f:45:04:35:99:83:39:03:af:2d:4d:
cb:d4:6f:15:0b:70:80:0e:82:f7:60:aa:63:0e:1a:
0c:99:a8:31:08:b6:ff:1e:f7:f3:6b:ab:7b:9e:96:
90:01:57:84:26:40:60:c8:53:db:a8:d8:29:1d:0f:
8b:cc:68:80:18:85:40:9d:e2:4b:27:ae:a0:61:70:
b7:4c:9b:9d:f2:8f:8a:fa:f0:1c:cf:be:8c:41:03:
55:44:43:99:cc:cc:17:67:0c:0b:fb:3c:c8:05:8f:
02:c5:9a:5b:8e:de:43:66:79:eb:67:bb:92:b1:7c:
05:0e:4c:15:2a:ae:75:fb:07:4d:e4:2b:37:97:eb:
ac:1a:05:5e:9b:b8:3f:1b:99:04:fe:4f:cb:f6:d0:
ec:1d:c9:44:87:63:49:96:e3:a4:11:f6:8e:6f:58:
1e:a4:72:51:3e:07:6c:48:48:ec:79:6d:45:9e:40:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:BD:C3:FA:31:86:78:FE:CE:89:80:55:ED:11:76:0C:5D:9B:85
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:48:bc:55:58:91:97:18:87:61:0e:1c:ac:f4:f5:92:8b:f2:
9c:c2:93:e6:90:79:a3:5b:b7:26:bd:34:21:a0:ce:6d:08:21:
74:1a:ae:dc:6d:d5:33:a4:da:1c:50:9b:15:3c:96:5c:14:53:
2f:74:e1:04:26:d9:b7:13:7a:e2:dc:89:0d:a5:95:ae:c7:dc:
8b:18:ea:f3:ae:f4:d9:a9:07:93:0d:f6:3c:72:d9:32:13:57:
af:d5:f6:62:da:16:00:84:28:d5:87:13:45:8f:94:57:6a:ce:
5e:13:59:d3:d3:16:2e:ec:64:e5:99:73:09:5c:f6:d6:e6:e8:
02:d1:7f:99:d2:fc:2d:cf:14:6b:3a:20:16:5f:2a:1b:b6:98:
fd:9d:6d:35:c5:6f:1b:47:0a:92:26:14:b5:ee:70:32:1f:20:
a5:f0:86:14:cf:d8:5a:8c:72:01:c8:39:32:da:6d:c5:f9:1f:
ba:2c:6e:fd:3a:ad:93:18:89:52:5f:53:dc:6d:02:5f:57:9b:
a6:05:b6:18:0d:da:ce:d0:cb:50:a8:9e:a8:55:9b:ab:80:8d:
93:4f:e8:f1:f4:3c:ab:ad:89:b7:4b:a2:ba:5c:df:da:89:2c:
b3:89:42:b6:b2:64:ec:d0:b0:3d:83:5a:4d:e1:0a:df:07:88:
08:f0:99:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oSrsy9EHE8kdB4lBL2gSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjUwNjI4MTMwMTQ0WhcNMjUwNjI5MTMwMTQ0WjAzMTEwLwYDVQQD
EyhhZDUxYmRjM2ZhMzE4Njc4ZmVjZTg5ODA1NWVkMTE3NjBjNWQ5Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0N8CccSfU9R1YucrJvnbmEczKd+
QUedizocomZ/eRNLa9kFlXKIuPoRePseb39oSIJHLGcad4H+hAJavccCarXdhNFt
hxGcPUC7BL8Pb0UENZmDOQOvLU3L1G8VC3CADoL3YKpjDhoMmagxCLb/Hvfza6t7
npaQAVeEJkBgyFPbqNgpHQ+LzGiAGIVAneJLJ66gYXC3TJud8o+K+vAcz76MQQNV
REOZzMwXZwwL+zzIBY8CxZpbjt5DZnnrZ7uSsXwFDkwVKq51+wdN5Cs3l+usGgVe
m7g/G5kE/k/L9tDsHclEh2NJluOkEfaOb1gepHJRPgdsSEjseW1FnkB7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1RvcP6MYZ4/s6JgFXtEXYMXZuFMB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUi8VViR
lxiHYQ4crPT1kovynMKT5pB5o1u3Jr00IaDObQghdBqu3G3VM6TaHFCbFTyWXBRT
L3ThBCbZtxN64tyJDaWVrsfcixjq86702akHkw32PHLZMhNXr9X2YtoWAIQo1YcT
RY+UV2rOXhNZ09MWLuxk5ZlzCVz21uboAtF/mdL8Lc8UazogFl8qG7aY/Z1tNcVv
G0cKkiYUte5wMh8gpfCGFM/YWoxyAcg5Mtptxfkfuixu/TqtkxiJUl9T3G0CX1eb
pgW2GA3aztDLUKieqFWbq4CNk0/o8fQ8q62Jt0uiulzf2okss4lCtrJk7NCwPYNa
TeEK3weICPCZoA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:31 2025 by rpki-client