Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: mFIOgrRL1DS1eiU6avyq44BfM1WkVH/lnqhV1IT+tOo=
Subject key identifier: AB:4F:ED:96:BA:8D:EF:75:02:9A:B9:36:01:FE:F5:73:02:54:FF:45
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0196553816CE90F7DB8CD9D6C0B8BDFFA89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0CEB
Signing time: Sun 20 Apr 2025 22:01:01 +0000
Manifest this update: Sun 20 Apr 2025 22:01:01 +0000
Manifest next update: Mon 21 Apr 2025 22:01:01 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: KD1fMn96/9HH2zD1Hw+Z2ML4J5MVpLHyaR9i61JHi3I=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:16:ce:90:f7:db:8c:d9:d6:c0:b8:bd:ff:a8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Apr 20 22:01:01 2025 GMT
Not After : Apr 21 22:01:01 2025 GMT
Subject: CN=ab4fed96ba8def75029ab93601fef5730254ff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:ae:14:8d:20:ea:fd:bf:b9:e9:d7:53:da:
ad:7c:a0:d3:b8:4e:95:a7:3a:be:76:18:78:c3:1b:
d7:cd:08:08:1c:21:6b:cc:e1:b1:92:5f:64:f3:2e:
dc:f3:48:77:7d:3f:0a:2e:2b:3c:b5:d9:dc:a0:89:
2d:6c:36:d6:70:26:da:c2:8b:0d:5d:58:bc:86:10:
4d:69:ca:e3:1b:3d:31:47:07:7d:11:20:af:2e:2a:
70:e9:6f:b1:86:98:8d:f2:f0:c4:18:05:a8:d5:25:
46:37:03:bf:47:e4:4b:7d:f3:5c:2a:1a:6f:e2:0e:
7a:28:68:38:e2:13:c6:c2:53:bb:d4:0a:4b:16:1f:
43:86:a5:d4:fa:ae:69:b5:1f:ae:8a:dc:c6:d7:ac:
a4:b1:3e:92:1a:5b:30:d8:5e:27:92:d5:2d:11:f4:
21:c5:2e:91:3d:e3:c5:94:09:5b:ed:51:aa:64:24:
b1:15:44:73:cf:04:db:26:ee:79:01:f6:2b:d0:f3:
91:6b:72:b4:83:6c:12:eb:97:14:49:b4:aa:91:f9:
09:b3:02:08:51:ec:40:a8:25:d5:ce:10:92:3c:5e:
ba:a1:48:0c:98:76:38:47:40:cf:c3:3b:12:41:dd:
ef:83:11:e6:62:a6:6a:16:67:fd:ce:be:68:52:d5:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4F:ED:96:BA:8D:EF:75:02:9A:B9:36:01:FE:F5:73:02:54:FF:45
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:0f:f5:30:da:17:7b:16:b9:91:27:e8:2f:8a:d3:ab:17:
5c:28:98:7d:fa:b9:0b:55:14:57:78:e3:83:ac:fd:62:dc:0e:
e7:04:34:fc:7f:ba:92:91:a4:c0:3a:f9:1c:1f:bf:2f:de:0b:
1f:4a:3a:59:5f:65:81:4b:7e:5f:6d:b9:2a:aa:13:1c:49:4f:
80:ec:21:93:51:60:b0:de:26:a6:fc:cb:8c:6f:66:8b:8c:60:
52:d3:8d:8b:47:0e:c2:60:48:6c:e6:ac:3e:0f:f0:e6:6e:25:
c4:20:bc:27:94:5c:10:d9:32:b0:86:14:75:19:ef:5d:d8:ea:
30:ba:4f:19:c8:7c:f5:46:8f:bc:b9:75:34:88:5a:03:1f:e4:
87:3c:6d:f9:0f:22:71:f5:43:60:9c:bf:73:05:c0:02:cf:df:
04:44:27:95:8c:cd:3e:8b:ec:4b:fd:ba:7e:d1:3f:15:00:9a:
26:95:68:f3:34:1e:41:32:ed:88:ed:8f:be:dc:dc:1a:2f:0d:
bb:b0:06:c9:30:b2:05:c7:6f:79:ad:82:f6:7d:87:e8:22:c9:
3b:a9:79:da:92:80:c6:0a:e5:17:5d:77:04:1a:7c:cb:c4:9e:
0d:1d:93:75:f6:89:1e:d6:34:6b:29:62:4c:2c:1a:2f:be:a5:
76:17:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:45 2025 by rpki-client