Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: SNIz0y2yi6c+HGjiUaDMPv0q0y0B/rLjvj8VvyKJSPc=
Subject key identifier: 1F:FD:71:F1:A6:16:C7:CD:A3:21:43:B3:04:BF:2B:E0:E7:28:57:4B
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0198A04E7B18C85B69E6C965EAC0A180BEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0E1B
Signing time: Tue 12 Aug 2025 22:02:34 +0000
Manifest this update: Tue 12 Aug 2025 22:02:34 +0000
Manifest next update: Wed 13 Aug 2025 22:02:34 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: SsJcrTa1Jyr7WziqG5Iz8ajlJw8iWDp2+LW16l3ugYM=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:7b:18:c8:5b:69:e6:c9:65:ea:c0:a1:80:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Aug 12 22:02:34 2025 GMT
Not After : Aug 13 22:02:34 2025 GMT
Subject: CN=1ffd71f1a616c7cda32143b304bf2be0e728574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:c5:c7:fe:c5:55:fe:83:14:26:eb:e0:f1:
56:80:52:85:bd:7c:a6:aa:a3:88:12:ca:34:3d:21:
a9:e6:03:bc:ab:1c:6d:06:78:f5:14:39:3e:7c:bf:
c6:8e:22:dc:ff:6b:18:dd:49:3a:8b:75:c4:84:ac:
cc:d0:d3:63:3d:52:3e:4a:c7:a8:34:b7:74:d1:e0:
b0:e6:f8:84:99:c8:09:da:84:eb:1f:f9:fc:b2:25:
6c:4c:3e:a3:73:e2:c5:96:81:48:b1:2f:f2:0f:c4:
0a:73:3e:bd:c2:9f:09:31:93:c9:d7:c5:d7:36:5e:
6e:3f:f2:b6:3e:32:42:00:e7:ed:90:cf:22:c5:87:
da:0c:13:25:e9:8e:20:7e:a2:e3:2b:60:90:33:b0:
a3:33:de:08:60:02:0c:fa:e5:11:f5:ef:a0:31:9d:
c4:14:02:47:7e:27:cc:bd:04:ee:86:48:1d:4c:ac:
f9:28:66:6c:4a:e4:af:54:9f:91:18:57:93:26:76:
d2:23:7f:30:0a:68:ec:d0:d5:c2:4a:2f:4d:8c:c3:
85:39:4a:8d:80:5c:e5:86:fe:01:df:4c:8f:aa:54:
d8:eb:b4:bb:5f:f9:01:de:da:95:89:a0:94:ec:e6:
52:fc:7d:2a:fa:84:42:93:cb:5f:b5:53:21:ee:92:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:71:F1:A6:16:C7:CD:A3:21:43:B3:04:BF:2B:E0:E7:28:57:4B
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:1e:c2:76:57:bc:e8:14:23:a7:62:ee:10:cd:89:49:27:
f6:4d:7c:03:68:d0:93:90:ed:ef:d0:a8:f9:fd:f9:1f:30:b3:
71:ae:39:2a:65:3b:87:66:a4:8c:53:3b:24:8f:d5:88:75:b9:
aa:be:10:5f:a8:38:9e:8a:0a:7b:17:ff:23:a3:d1:c7:11:38:
74:a7:9c:47:b6:b5:4d:13:f8:c9:5e:99:76:de:18:e4:e4:7b:
df:3b:52:c0:5d:4d:a6:56:22:4c:90:e9:66:d6:08:69:94:60:
b3:1e:ae:20:53:b8:ad:bf:43:5d:0c:65:73:31:c4:ec:23:00:
a6:0c:a9:6f:08:2a:2d:e8:34:85:76:33:d5:05:08:3f:20:06:
eb:12:e3:2f:d0:db:c6:b0:a1:7f:5e:4b:0a:35:78:74:a1:1c:
e1:b8:c7:10:da:56:86:0a:73:40:1c:8d:db:47:aa:42:ec:4b:
bb:54:8c:7a:30:5a:cb:a9:c6:08:35:1d:58:79:ad:7b:c3:0f:
35:b0:aa:bb:94:28:77:96:b3:fe:8f:0e:df:94:7c:27:a6:0a:
20:66:b3:0f:be:4c:5a:8e:6c:48:78:cd:66:10:e4:0f:de:d9:
9c:24:f5:e8:2d:0e:6b:cd:42:b4:2a:83:53:a8:95:6d:be:33:
9d:79:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:24 2025 by rpki-client