Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: U8MMvWo93YgxG9WhMyEvwn7IdaFQ9DKana/dT5WimT4=
Subject key identifier: 6D:D5:77:A9:FF:27:22:DB:60:AF:B2:8B:A4:0E:06:A9:CA:44:7E:39
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0195903CAB68C3E7F8F46BBB5584D924C0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0C85
Signing time: Thu 13 Mar 2025 16:00:49 +0000
Manifest this update: Thu 13 Mar 2025 16:00:49 +0000
Manifest next update: Fri 14 Mar 2025 16:00:49 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: ckel4+DrU4BTD1nkiUzCWD9iWJPo7xmii9nmA0m/6Js=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:ab:68:c3:e7:f8:f4:6b:bb:55:84:d9:24:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Mar 13 16:00:49 2025 GMT
Not After : Mar 14 16:00:49 2025 GMT
Subject: CN=6dd577a9ff2722db60afb28ba40e06a9ca447e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:fc:d2:76:05:18:9b:b1:79:27:d2:1e:5a:
d1:4d:95:78:d4:ce:96:d6:1d:41:cb:88:74:ce:05:
85:a1:a2:42:17:26:a4:6b:68:98:b2:6e:89:36:dc:
aa:46:c3:24:ca:f9:a2:66:ea:d7:b1:4e:d9:07:f0:
58:1d:7c:b1:54:4f:ee:9f:fb:08:3d:9a:ba:24:f7:
ef:4b:65:81:0e:cf:bf:15:89:54:43:36:37:42:5b:
dd:4b:4c:26:33:99:79:ef:77:f7:ed:fe:a8:cc:6c:
80:df:e9:16:6b:e9:22:a2:8e:90:43:4d:b9:38:ad:
57:e6:3f:bb:00:ea:e4:14:39:62:73:f7:02:fd:44:
8e:35:28:46:fe:08:01:5a:13:e1:fa:1f:c2:39:19:
dd:07:61:e0:f9:ee:c0:d9:5f:8c:b9:a2:32:01:30:
1d:0f:49:28:55:de:60:1e:e0:0e:d2:a4:1f:31:00:
74:de:b2:d2:5d:76:3f:84:9b:6f:e1:1a:f2:d1:f7:
d7:fb:e8:91:42:c4:56:94:17:80:0f:1d:ac:19:e2:
6a:4d:d0:5d:2f:b2:a2:9a:09:48:5b:22:30:fc:bb:
c2:f2:c8:5e:03:32:10:04:ae:06:1e:72:36:7e:87:
df:3a:87:71:26:b9:fa:a2:08:73:d6:31:b8:96:de:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D5:77:A9:FF:27:22:DB:60:AF:B2:8B:A4:0E:06:A9:CA:44:7E:39
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:d2:29:8f:7a:e0:31:0f:85:94:9b:f5:c0:84:a7:ad:b9:
0f:7e:77:16:8e:d2:5b:0b:6b:29:83:d4:e6:4a:25:e4:96:e7:
23:4d:5a:7b:06:02:50:00:86:61:67:a8:e1:ab:da:0d:70:fd:
aa:0d:75:ab:46:fc:60:7a:50:d5:fc:06:14:66:20:6f:fb:a3:
e2:d4:b3:f4:32:97:5e:e0:67:67:03:cb:1e:17:63:82:31:98:
20:c4:38:7e:5e:c3:bb:ee:58:9f:88:2b:dc:83:14:01:1e:9d:
ff:e5:41:a4:6a:f5:5d:c2:14:49:08:50:b4:ab:de:75:80:ce:
fb:51:73:5d:35:54:7c:5b:6a:b2:b2:a8:1f:b9:86:17:03:85:
cc:88:b8:90:49:dd:7f:a4:75:c3:cc:a2:a9:38:5b:b7:24:65:
17:23:51:9f:98:8a:a4:bd:86:72:fb:57:66:06:af:d7:69:76:
12:07:52:df:3e:7f:e0:ac:42:ae:a7:93:2a:9a:89:1c:10:24:
7a:f7:bc:0b:7c:4f:1d:2e:d9:11:5e:7b:1b:4a:67:f2:2f:e1:
07:c3:70:82:e9:57:02:73:bf:e9:a5:76:55:a5:06:72:fc:39:
81:7e:0c:99:25:3f:de:e0:b4:ed:04:b9:99:96:11:d1:71:eb:
bc:23:e7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:15 2025 by rpki-client