Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: KLH2EqPu0VDH8wMeY8VcQ6Qmn+EdblI8olc5Dx0nbww=
Subject key identifier: 9F:E8:70:D8:B2:D6:F5:57:48:CB:78:94:44:91:DD:FA:FB:D7:BB:9E
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019A4EF44719BBD5682624FAB1EAE3D08901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0EFA
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: H8akXZBm3TapyuNEofYwJUr09O/ZmFpLS5MpXEsNZXg=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:47:19:bb:d5:68:26:24:fa:b1:ea:e3:d0:89:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=9fe870d8b2d6f55748cb78944491ddfafbd7bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:12:64:be:a6:98:4c:a9:66:3a:3d:50:ec:
2b:cd:07:45:10:e5:8b:3d:db:3d:91:5c:88:f1:e3:
0d:f1:f3:7f:ed:12:b2:7c:53:4f:64:e6:3f:dc:74:
4b:d2:8a:30:38:cc:bb:2b:0a:73:13:8e:ea:07:89:
21:92:4a:2c:da:f6:60:49:00:76:bd:a5:ce:af:35:
0c:5b:44:1a:62:49:ec:7d:02:f2:f0:92:7e:a0:90:
0e:47:6a:6c:9e:7d:1e:44:00:12:81:f7:86:54:15:
fb:a2:1d:18:30:72:fc:26:01:fc:af:89:1d:f5:fa:
de:89:c4:05:00:cf:7c:b2:4f:23:37:8a:d7:c3:8a:
51:b3:bc:18:0d:07:b4:b2:2d:96:f1:e9:8a:d0:42:
44:9f:f2:3e:30:91:85:80:33:49:5d:c9:dd:5b:32:
1d:3d:e5:c0:93:af:0f:d4:e5:5f:dc:db:ac:79:92:
2c:dc:93:24:73:af:51:df:d7:0c:cf:cf:1f:b0:05:
97:e6:7c:ad:cf:16:b3:4b:92:df:1a:00:1e:c0:d8:
a3:d9:6f:75:05:2a:50:d0:a6:62:df:3b:56:4a:37:
a8:6d:83:62:92:b8:e3:81:b6:6f:46:5a:48:ee:9a:
54:35:6e:a4:20:e1:ec:2e:4c:05:26:9f:a5:51:6b:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:70:D8:B2:D6:F5:57:48:CB:78:94:44:91:DD:FA:FB:D7:BB:9E
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7b:23:72:69:a5:35:6e:25:59:c1:50:e0:9f:fd:dc:fa:fa:
f0:94:29:72:32:e7:07:a3:b9:a7:8e:f1:13:77:b0:89:05:00:
54:85:70:a0:ec:51:ab:8e:3e:d6:bb:59:04:d8:f5:4e:86:79:
9b:b0:77:d8:87:34:6c:e8:69:21:b2:5b:9b:ef:6f:08:bf:93:
70:b6:f3:bd:ab:b5:3a:99:08:0e:9d:d1:52:3c:ab:bb:b1:89:
3a:0e:47:dc:f4:4e:5d:d0:2d:09:b2:2a:0a:d5:1d:b9:ec:74:
3d:da:bc:25:03:b5:72:34:6d:b9:be:6d:7b:62:89:ae:60:b8:
ee:85:15:59:d5:a9:33:9c:20:06:fd:11:56:c1:ed:33:a2:8a:
e6:61:7f:5e:98:ab:e1:b2:c7:93:e4:38:fc:b4:ce:d3:6c:df:
da:61:32:c6:68:c9:80:e9:86:21:86:f1:a6:8f:aa:51:cf:57:
37:fa:87:36:39:b2:e1:9f:f1:23:7f:70:fb:be:2d:e9:18:98:
9e:03:9c:0a:cc:1f:fd:fb:1e:c4:87:1e:88:2d:b5:c5:72:e3:
98:36:29:00:ec:b6:5d:ba:3a:b3:96:db:62:ca:ba:6e:36:b9:
b9:a7:3d:97:54:b7:16:5b:88:84:fd:94:a3:ca:9c:a1:3e:30:
36:61:9b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EcZu9VoJiT6serj0IkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjUxMTA0MTMwMDIzWhcNMjUxMTA1MTMwMDIzWjAzMTEwLwYDVQQD
Eyg5ZmU4NzBkOGIyZDZmNTU3NDhjYjc4OTQ0NDkxZGRmYWZiZDdiYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiQSZL6mmEypZjo9UOwrzQdFEOWL
Pds9kVyI8eMN8fN/7RKyfFNPZOY/3HRL0oowOMy7KwpzE47qB4khkkos2vZgSQB2
vaXOrzUMW0QaYknsfQLy8JJ+oJAOR2psnn0eRAASgfeGVBX7oh0YMHL8JgH8r4kd
9freicQFAM98sk8jN4rXw4pRs7wYDQe0si2W8emK0EJEn/I+MJGFgDNJXcndWzId
PeXAk68P1OVf3NuseZIs3JMkc69R39cMz88fsAWX5nytzxazS5LfGgAewNij2W91
BSpQ0KZi3ztWSjeobYNikrjjgbZvRlpI7ppUNW6kIOHsLkwFJp+lUWt6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/ocNiy1vVXSMt4lESR3fr717ueMB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXsjcmml
NW4lWcFQ4J/93Pr68JQpcjLnB6O5p47xE3ewiQUAVIVwoOxRq44+1rtZBNj1ToZ5
m7B32Ic0bOhpIbJbm+9vCL+TcLbzvau1OpkIDp3RUjyru7GJOg5H3PROXdAtCbIq
CtUduex0Pdq8JQO1cjRtub5te2KJrmC47oUVWdWpM5wgBv0RVsHtM6KK5mF/Xpir
4bLHk+Q4/LTO02zf2mEyxmjJgOmGIYbxpo+qUc9XN/qHNjmy4Z/xI39w+74t6RiY
ngOcCswf/fsexIceiC21xXLjmDYpAOy2Xbo6s5bbYsq6bja5uac9l1S3FluIhP2U
o8qcoT4wNmGbag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:55 2025 by rpki-client