Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: h4RJgS8yvaY1YxOzx1QINN7bUPldyjXJ0UD6iu1DPLg=
Subject key identifier: BF:C6:8A:61:0C:C8:11:2D:90:5C:32:C5:0B:3F:CA:25:DD:0D:C4:86
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019677FB7B77D96DD8A488576FA44D582F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0CFD
Signing time: Sun 27 Apr 2025 16:01:31 +0000
Manifest this update: Sun 27 Apr 2025 16:01:31 +0000
Manifest next update: Mon 28 Apr 2025 16:01:31 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: 0t7P9JtDjXV6QxhWqUts1bQaBFOC4V5z61HE9PutiYA=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:7b:77:d9:6d:d8:a4:88:57:6f:a4:4d:58:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Apr 27 16:01:31 2025 GMT
Not After : Apr 28 16:01:31 2025 GMT
Subject: CN=bfc68a610cc8112d905c32c50b3fca25dd0dc486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:9d:ec:36:f2:b5:d0:1d:9f:0f:c9:cb:0a:
7b:6f:58:1e:a5:4e:21:fd:6b:38:77:66:19:1b:8f:
8f:f1:37:b5:d2:92:06:5a:2f:2a:e3:95:80:86:e6:
f3:90:b8:be:9c:d4:3b:c6:27:c8:55:2d:eb:34:69:
22:fc:50:17:7d:fe:ee:78:68:1a:5f:74:b4:61:9b:
b5:37:7f:f2:c3:44:a3:e4:cb:96:86:23:39:24:09:
20:d2:5d:a5:ff:ec:5c:45:cd:7c:ac:56:1b:18:81:
ae:b4:45:9d:c5:5c:9c:60:6c:5b:8d:d1:86:13:13:
33:d2:4d:7c:ad:20:06:5c:9a:e7:2e:e4:ab:b7:79:
bd:b8:35:64:b4:de:e4:81:7a:5b:e4:85:13:c2:94:
31:69:2d:a1:03:08:cc:98:7c:6b:15:40:3a:03:ca:
07:11:89:f6:42:75:94:f8:a7:9c:c3:9b:b7:3c:06:
87:fb:2d:4f:e1:f0:29:e2:94:36:3c:50:c8:e2:e7:
a6:b1:72:f4:00:0a:de:9e:c2:ec:3c:a2:ef:00:c0:
1e:37:a7:34:06:75:36:a8:f3:40:75:26:76:8c:82:
70:92:6f:df:3c:b6:a9:0d:44:fb:6c:41:0b:2c:2e:
e5:16:9f:3b:be:bb:45:67:d0:e1:71:8c:b4:72:dc:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:8A:61:0C:C8:11:2D:90:5C:32:C5:0B:3F:CA:25:DD:0D:C4:86
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:14:f3:2a:18:03:68:97:8f:59:9f:98:f4:43:32:25:17:e1:
9f:74:40:ab:1c:a5:a2:c3:36:ae:50:98:e4:b5:0a:72:ae:94:
d4:de:d9:5f:85:bd:83:89:be:84:9f:aa:d1:84:ce:b4:18:bb:
da:a2:f3:0a:c0:b2:fd:6b:52:97:a9:28:e7:d7:f5:cc:f5:26:
3e:41:25:47:25:c1:e5:e6:a3:4b:c6:3e:79:66:d2:a0:47:2e:
94:12:80:62:bd:4c:45:f2:1f:5b:5f:74:02:e6:ec:1d:eb:ce:
dd:2a:46:23:4c:0b:38:73:44:63:6a:10:36:81:ab:7b:ad:e7:
45:62:e2:51:f3:2c:c8:02:09:5f:ae:d9:cd:3e:c8:1b:5a:44:
4b:0c:79:71:c0:a6:94:2c:62:5d:80:c5:bd:2e:ea:ed:51:9b:
0c:da:54:0d:2f:15:a4:40:56:4d:75:89:9f:2d:b4:37:56:7a:
9b:dc:ff:46:06:6f:a2:48:58:fe:e0:8f:dc:b1:e0:33:95:06:
de:eb:68:bb:82:65:cf:2d:93:a3:02:80:c9:5f:83:7c:3f:11:
55:39:8e:72:e7:05:30:4c:b4:5d:94:4a:68:f1:64:04:c9:91:
01:14:57:2f:2b:61:ad:71:4e:27:7e:f7:48:ec:81:64:8f:b6:
0a:fa:e7:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+3t32W3YpIhXb6RNWC9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjUwNDI3MTYwMTMxWhcNMjUwNDI4MTYwMTMxWjAzMTEwLwYDVQQD
EyhiZmM2OGE2MTBjYzgxMTJkOTA1YzMyYzUwYjNmY2EyNWRkMGRjNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U+d7DbytdAdnw/Jywp7b1gepU4h
/Ws4d2YZG4+P8Te10pIGWi8q45WAhubzkLi+nNQ7xifIVS3rNGki/FAXff7ueGga
X3S0YZu1N3/yw0Sj5MuWhiM5JAkg0l2l/+xcRc18rFYbGIGutEWdxVycYGxbjdGG
ExMz0k18rSAGXJrnLuSrt3m9uDVktN7kgXpb5IUTwpQxaS2hAwjMmHxrFUA6A8oH
EYn2QnWU+Kecw5u3PAaH+y1P4fAp4pQ2PFDI4uemsXL0AArensLsPKLvAMAeN6c0
BnU2qPNAdSZ2jIJwkm/fPLapDUT7bEELLC7lFp87vrtFZ9DhcYy0ctxWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/GimEMyBEtkFwyxQs/yiXdDcSGMB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRTzKhgD
aJePWZ+Y9EMyJRfhn3RAqxylosM2rlCY5LUKcq6U1N7ZX4W9g4m+hJ+q0YTOtBi7
2qLzCsCy/WtSl6ko59f1zPUmPkElRyXB5eajS8Y+eWbSoEculBKAYr1MRfIfW190
AubsHevO3SpGI0wLOHNEY2oQNoGre63nRWLiUfMsyAIJX67ZzT7IG1pESwx5ccCm
lCxiXYDFvS7q7VGbDNpUDS8VpEBWTXWJny20N1Z6m9z/RgZvokhY/uCP3LHgM5UG
3utou4Jlzy2TowKAyV+DfD8RVTmOcucFMEy0XZRKaPFkBMmRARRXLythrXFOJ373
SOyBZI+2Cvrn5g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:03 2025 by rpki-client