Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: tV2BMEbnoP+/L6fqLLREFRxLN1jRXFgtxYMAir5kaI8=
Subject key identifier: 8E:35:0B:5D:AF:FA:56:0B:10:82:8F:34:58:85:11:59:B4:81:61:CB
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019A01B55FC07749A08CD64F8688DD9072F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0ED2
Signing time: Mon 20 Oct 2025 13:00:54 +0000
Manifest this update: Mon 20 Oct 2025 13:00:54 +0000
Manifest next update: Tue 21 Oct 2025 13:00:54 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: ghHnrplrkSH5fA+sKV+RS36v3f3cscQEC5oZ0TDVMOA=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:5f:c0:77:49:a0:8c:d6:4f:86:88:dd:90:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Oct 20 13:00:54 2025 GMT
Not After : Oct 21 13:00:54 2025 GMT
Subject: CN=8e350b5daffa560b10828f3458851159b48161cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:d8:62:52:fd:dd:9c:a7:5c:43:59:ba:5e:
83:5b:ce:72:55:97:ca:e9:ba:ad:ee:cd:d5:49:0a:
1b:a5:a1:00:d0:48:45:e3:41:6f:61:5f:05:e2:36:
e5:b2:6f:09:a0:f1:aa:5f:41:dc:63:27:76:b9:9a:
91:15:5e:5e:39:4b:5a:f3:09:2f:fc:fb:9c:3f:fa:
4c:2a:e2:31:2a:ee:fa:bf:07:3b:ec:51:93:26:03:
7d:7b:de:0c:79:a7:e8:95:b8:a1:28:0f:a7:e9:fb:
99:c5:94:e1:23:d9:aa:f3:71:50:38:f5:ce:c8:0d:
c3:93:7f:bc:bc:b1:d2:c8:55:ab:8d:96:df:54:e9:
58:93:67:4a:0c:f5:a2:91:c2:64:73:53:2e:94:40:
a5:91:cf:fa:0e:12:6b:65:38:69:e7:ac:96:9f:13:
ed:11:fe:3c:86:c4:43:eb:c5:86:7a:b7:8e:7a:91:
bd:80:73:61:62:63:89:e3:60:24:aa:a4:c9:6e:f0:
2d:a7:c9:0f:fc:36:4a:19:fb:1a:a6:dc:1a:80:d4:
a4:d1:a1:05:24:89:af:bd:1a:33:02:c0:f1:c6:6c:
a3:14:80:f4:10:e1:5c:e2:c4:a8:b4:20:e1:89:df:
82:82:f1:46:15:49:37:1b:9a:f6:cd:d1:b8:9b:6a:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:0B:5D:AF:FA:56:0B:10:82:8F:34:58:85:11:59:B4:81:61:CB
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:89:40:42:7a:71:c8:0f:36:ab:ec:c0:21:79:1a:54:69:95:
d4:cd:5f:21:75:09:9b:37:49:c0:f0:4a:d2:cb:4a:96:5e:97:
88:57:48:ac:33:b2:63:68:ca:99:96:75:7c:6d:74:35:87:eb:
fa:5d:79:92:3d:1c:d0:4d:ff:8c:73:88:9f:78:76:cf:ef:07:
79:b6:0b:8e:1b:8a:51:3b:4b:e1:1b:4d:b4:83:d0:ec:aa:d9:
e6:53:07:f8:85:05:10:03:4d:08:38:6a:9e:ed:dd:e3:a7:14:
ff:53:51:77:71:e0:80:bc:48:24:8a:7b:c6:26:7e:dd:52:54:
7d:24:9f:64:fc:d9:ad:7f:d6:d9:f9:3d:f2:64:b9:ea:ae:67:
8e:86:00:ec:12:46:4a:e5:4c:34:75:b4:bb:99:b1:4a:95:c1:
cc:55:b1:ad:4b:aa:86:27:ad:44:a7:45:89:7e:78:a3:2d:67:
65:cb:bc:06:0d:d0:ff:7b:d8:5c:3d:86:8b:b6:1d:fd:e4:de:
2b:ae:b2:ff:a2:87:5e:91:0a:2b:92:26:5c:b3:9a:85:80:ed:
2c:df:ee:d6:4b:50:31:32:fb:7c:bf:d5:e7:ac:be:06:8f:3f:
1f:b8:5c:76:4e:75:f8:52:e0:d3:18:e7:f4:1f:ce:45:cd:93:
09:40:95:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtV/Ad0mgjNZPhojdkHLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjUxMDIwMTMwMDU0WhcNMjUxMDIxMTMwMDU0WjAzMTEwLwYDVQQD
Eyg4ZTM1MGI1ZGFmZmE1NjBiMTA4MjhmMzQ1ODg1MTE1OWI0ODE2MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2DYYlL93ZynXENZul6DW85yVZfK
6bqt7s3VSQobpaEA0EhF40FvYV8F4jblsm8JoPGqX0HcYyd2uZqRFV5eOUta8wkv
/PucP/pMKuIxKu76vwc77FGTJgN9e94MeafolbihKA+n6fuZxZThI9mq83FQOPXO
yA3Dk3+8vLHSyFWrjZbfVOlYk2dKDPWikcJkc1MulEClkc/6DhJrZThp56yWnxPt
Ef48hsRD68WGereOepG9gHNhYmOJ42AkqqTJbvAtp8kP/DZKGfsaptwagNSk0aEF
JImvvRozAsDxxmyjFID0EOFc4sSotCDhid+CgvFGFUk3G5r2zdG4m2qI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI41C12v+lYLEIKPNFiFEVm0gWHLMB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIlAQnpx
yA82q+zAIXkaVGmV1M1fIXUJmzdJwPBK0stKll6XiFdIrDOyY2jKmZZ1fG10NYfr
+l15kj0c0E3/jHOIn3h2z+8HebYLjhuKUTtL4RtNtIPQ7KrZ5lMH+IUFEANNCDhq
nu3d46cU/1NRd3HggLxIJIp7xiZ+3VJUfSSfZPzZrX/W2fk98mS56q5njoYA7BJG
SuVMNHW0u5mxSpXBzFWxrUuqhietRKdFiX54oy1nZcu8Bg3Q/3vYXD2Gi7Yd/eTe
K66y/6KHXpEKK5ImXLOahYDtLN/u1ktQMTL7fL/V56y+Bo8/H7hcdk51+FLg0xjn
9B/ORc2TCUCV9A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:49 2025 by rpki-client