Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: g4HzJE45+gTZHta9rzcFkp/IKOzLWoslPwomj5JGVLk=
Subject key identifier: B4:87:BA:9E:3C:B7:17:2F:EE:97:F1:1E:39:FE:95:EE:49:DD:9A:54
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01984965EE5823E52E14B209C973C1E759EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 08F6
Signing time: Sun 27 Jul 2025 01:01:13 +0000
Manifest this update: Sun 27 Jul 2025 01:01:13 +0000
Manifest next update: Mon 28 Jul 2025 01:01:13 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: qj3stsFZ7hudmhS0PYrbTGOkgqVCLE+bWqUrVcCd1nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ee:58:23:e5:2e:14:b2:09:c9:73:c1:e7:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jul 27 01:01:13 2025 GMT
Not After : Jul 28 01:01:13 2025 GMT
Subject: CN=b487ba9e3cb7172fee97f11e39fe95ee49dd9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:54:88:a0:8b:8a:d5:12:a9:f6:4b:b9:e4:
4a:4f:4b:5a:00:7a:1f:e7:42:88:43:0e:5e:5f:71:
fd:f3:9d:77:e5:7f:fc:18:e0:92:1a:55:79:6f:bb:
07:da:b6:ba:22:1a:c3:0e:0a:de:4e:8a:6d:e8:89:
16:5b:ea:e3:2a:24:f9:95:f7:43:6a:a9:33:f2:26:
6d:32:9b:2b:f9:7f:df:a6:4d:ef:f8:09:72:d2:ae:
f6:01:63:64:3f:e6:48:49:ab:63:d1:92:cd:61:87:
8a:b4:67:46:fa:60:89:b9:b0:e8:0b:61:1d:ac:ef:
d6:43:b7:f0:83:0f:e3:c4:b8:3a:76:98:86:7e:ab:
ad:4a:e3:6d:a0:14:38:84:fc:3a:06:27:ce:0f:ce:
d6:ca:eb:4f:82:12:c5:a4:3d:a4:49:00:81:0d:c3:
26:40:00:3d:a4:d1:0f:ea:c2:fa:80:5a:d3:91:af:
ee:0c:ee:81:fd:5e:75:05:50:02:f2:50:a6:70:28:
0a:5f:8b:b1:f2:e1:ea:d1:60:d6:31:ea:8b:69:f8:
e4:fc:ed:72:56:1e:38:ef:b8:f8:5c:2e:9d:77:19:
84:a4:ed:ca:58:f4:5e:fd:9f:f3:eb:7b:32:4c:90:
14:9f:6c:71:4d:da:72:57:45:39:42:30:fe:a9:19:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:BA:9E:3C:B7:17:2F:EE:97:F1:1E:39:FE:95:EE:49:DD:9A:54
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:39:97:37:d4:58:9e:14:d2:9a:4d:e2:0d:1a:98:8e:12:
60:16:1c:3c:7d:8b:69:f1:54:3e:9d:b0:33:38:20:77:39:f1:
30:67:99:16:3e:be:bd:f9:88:bc:30:4a:59:98:57:d5:70:84:
bb:b6:9c:e5:07:80:2f:78:3c:44:40:b1:b5:3f:5e:3a:44:5a:
fd:da:3a:49:da:39:ed:c6:64:a2:58:3d:02:4e:df:e2:4c:57:
65:9f:e9:68:aa:29:5f:f9:7c:7f:fa:d7:ba:54:68:72:d9:0d:
dc:84:2e:77:d8:1b:f4:ad:a6:41:5a:94:8b:f8:e2:4c:31:f5:
2c:12:21:8a:42:10:d5:8f:f4:72:31:96:f6:6a:7c:88:2f:cd:
85:71:7f:a8:fb:7e:30:ff:6b:7a:ff:08:48:9d:a2:d2:87:20:
54:f9:de:b8:ac:24:e3:1f:e4:33:68:ce:c6:6f:e7:7c:5e:df:
09:23:88:15:c0:52:53:9f:0f:c3:c2:8a:3c:36:58:91:dd:60:
0f:80:79:3f:53:3d:36:17:84:67:4b:e9:98:bd:ec:8b:0a:92:
6d:31:4d:1b:e3:e0:95:56:19:4a:48:75:ef:02:d9:bc:ab:50:
e5:74:d1:f5:e3:0d:2e:e8:57:57:81:c4:20:8e:7c:93:ab:f0:
a6:a7:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:40 2025 by rpki-client