Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: 84Kow/0VtXZv91QDo/JtJFYoMmKBH0lXT2TAVueH78I=
Subject key identifier: FB:53:95:CA:2C:8A:87:18:E0:25:8B:2B:DD:AE:BE:34:92:FB:D9:BF
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 01974A7A74EF178AA82A4CDD3A7899E47A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0D6A
Signing time: Sat 07 Jun 2025 13:00:28 +0000
Manifest this update: Sat 07 Jun 2025 13:00:28 +0000
Manifest next update: Sun 08 Jun 2025 13:00:28 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: f6NuKWnSHODlD7gGZoj69l4QkY70bjtrXFhc2GKuDUY=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:74:ef:17:8a:a8:2a:4c:dd:3a:78:99:e4:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Jun 7 13:00:28 2025 GMT
Not After : Jun 8 13:00:28 2025 GMT
Subject: CN=fb5395ca2c8a8718e0258b2bddaebe3492fbd9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:fd:38:fe:81:09:87:91:0f:21:88:d1:a7:
27:af:92:b2:c2:3b:96:40:a9:e9:db:79:a3:54:2e:
98:b0:b3:df:80:cf:22:a9:ae:4f:56:58:54:10:3b:
68:85:39:fc:e4:19:53:6c:ea:72:4c:2e:42:b1:e1:
32:b1:33:a5:89:96:5f:4e:47:e5:f0:15:65:87:56:
cd:25:45:b5:bd:b5:b4:50:f6:11:de:17:43:17:01:
ae:f9:21:47:67:54:74:dd:57:37:7e:7a:b3:b8:41:
02:3b:34:ce:0a:83:2d:b0:9d:6a:fa:ad:c7:43:3a:
fa:40:f6:09:78:6f:40:57:74:17:d1:a4:4e:b1:6c:
59:7b:01:f6:7b:ee:89:ef:c7:05:57:03:87:b8:64:
c5:5b:04:35:87:1a:d2:92:76:d2:7c:d0:f5:d5:0f:
fd:85:e8:d3:1f:0a:d9:b6:04:5d:ae:03:79:61:50:
dc:05:ff:93:29:db:45:82:ad:6a:d3:e3:b4:f4:c3:
76:e0:9c:e9:ac:97:6d:0c:bd:d2:6a:37:cc:cd:79:
da:db:d9:d4:1f:0a:24:96:c4:df:a9:8a:62:26:c6:
9c:61:c0:2d:4d:25:a2:5f:13:d9:e8:d3:c4:c4:40:
50:7f:8f:ba:74:06:30:60:7e:1b:2c:2a:a3:a1:63:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:95:CA:2C:8A:87:18:E0:25:8B:2B:DD:AE:BE:34:92:FB:D9:BF
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:2a:f4:b2:9d:44:29:47:d6:78:c3:0a:43:2d:00:16:04:
a5:03:d8:8c:85:f3:ba:da:06:25:a0:b1:c9:fc:9f:59:2b:02:
2e:5a:1c:a9:f9:35:89:6e:df:a1:33:f6:72:84:21:2c:a7:0f:
80:3f:03:d1:9c:14:9c:22:4c:c5:b8:cf:18:bd:5d:b0:94:cd:
40:ba:0f:35:bf:b9:57:79:25:75:cc:13:7c:15:07:16:ef:c2:
93:bc:de:7b:6f:dd:b4:94:ab:c4:d6:b7:d1:54:11:93:24:83:
0c:9b:5b:c8:0d:67:05:5f:d2:e5:5d:b4:31:a2:14:7a:03:1f:
e3:a2:47:e0:d8:43:7f:f7:7c:c7:bb:60:29:7e:be:cc:57:04:
3f:eb:bb:b4:8f:df:85:e9:61:33:e0:aa:1d:3d:82:7a:fe:cc:
44:11:0a:9b:a0:73:a9:6e:14:8c:09:88:36:dd:6d:ca:e4:f3:
91:ca:78:24:26:4e:c9:f9:1c:cd:dd:7a:1f:1b:47:92:96:c5:
5d:4a:ad:d1:85:ce:ab:59:a4:44:42:60:a5:bd:30:06:22:e5:
70:69:6a:42:41:a6:88:e2:00:bf:51:8f:10:da:f1:bc:d3:c2:
4a:db:de:8a:ef:b4:d5:12:81:36:f8:ed:e9:97:5c:b6:61:f3:
56:e8:4e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKenTvF4qoKkzdOniZ5HpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjUwNjA3MTMwMDI4WhcNMjUwNjA4MTMwMDI4WjAzMTEwLwYDVQQD
EyhmYjUzOTVjYTJjOGE4NzE4ZTAyNThiMmJkZGFlYmUzNDkyZmJkOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyar9OP6BCYeRDyGI0acnr5KywjuW
QKnp23mjVC6YsLPfgM8iqa5PVlhUEDtohTn85BlTbOpyTC5CseEysTOliZZfTkfl
8BVlh1bNJUW1vbW0UPYR3hdDFwGu+SFHZ1R03Vc3fnqzuEECOzTOCoMtsJ1q+q3H
Qzr6QPYJeG9AV3QX0aROsWxZewH2e+6J78cFVwOHuGTFWwQ1hxrSknbSfND11Q/9
hejTHwrZtgRdrgN5YVDcBf+TKdtFgq1q0+O09MN24JzprJdtDL3SajfMzXna29nU
HwoklsTfqYpiJsacYcAtTSWiXxPZ6NPExEBQf4+6dAYwYH4bLCqjoWOUHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtTlcosiocY4CWLK92uvjSS+9m/MB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6wq9LKd
RClH1njDCkMtABYEpQPYjIXzutoGJaCxyfyfWSsCLlocqfk1iW7foTP2coQhLKcP
gD8D0ZwUnCJMxbjPGL1dsJTNQLoPNb+5V3kldcwTfBUHFu/Ck7zee2/dtJSrxNa3
0VQRkySDDJtbyA1nBV/S5V20MaIUegMf46JH4NhDf/d8x7tgKX6+zFcEP+u7tI/f
helhM+CqHT2Cev7MRBEKm6BzqW4UjAmINt1tyuTzkcp4JCZOyfkczd16HxtHkpbF
XUqt0YXOq1mkREJgpb0wBiLlcGlqQkGmiOIAv1GPENrxvNPCStveiu+01RKBNvjt
6ZdctmHzVuhOEg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:02 2025 by rpki-client