Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: xbrwZyamOyP08/veDYHa6tSabyAKctb0k5MVZHcRxRw=
Subject key identifier: 18:B9:8B:6D:27:D9:06:FA:CB:A5:B9:A1:A9:5F:7B:DD:BE:FB:73:12
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 019A209B1526185B96B3499B5CBCAACDFDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 09EA
Signing time: Sun 26 Oct 2025 13:00:25 +0000
Manifest this update: Sun 26 Oct 2025 13:00:25 +0000
Manifest next update: Mon 27 Oct 2025 13:00:25 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: hOhIbK+wtXc6upu+chaqzcN+3eLDPZg7oY4EEAlI3Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:15:26:18:5b:96:b3:49:9b:5c:bc:aa:cd:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Oct 26 13:00:25 2025 GMT
Not After : Oct 27 13:00:25 2025 GMT
Subject: CN=18b98b6d27d906facba5b9a1a95f7bddbefb7312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:bb:81:e0:4b:08:1c:0f:ff:cc:32:48:f9:
68:34:52:8d:de:2f:15:d0:d0:64:fc:20:4c:1b:a7:
86:ba:fe:ce:96:5b:ad:a7:c1:4a:c7:1a:19:15:0b:
28:75:c1:a2:c3:9c:6a:3f:27:18:19:99:da:d4:1a:
31:a6:7a:90:f9:d0:73:9e:15:b1:e6:c3:6f:a2:f9:
05:a0:ba:3e:1a:bb:4e:ef:e6:21:4f:d5:1d:db:b3:
be:f1:04:55:dc:25:6a:d7:4f:17:44:0a:32:d9:9f:
6b:5f:67:97:65:3f:72:42:1b:a6:46:57:4f:ef:8b:
1c:70:35:5e:a4:34:c9:16:d2:3f:8a:8c:2c:54:12:
9f:9c:3b:ed:08:bc:0c:51:10:18:05:f9:fd:bd:03:
74:92:9e:f1:8e:b1:d4:be:04:71:d4:1a:c4:67:e1:
32:b4:c0:a6:96:20:28:a6:a0:20:51:57:bc:16:65:
c1:f3:70:27:5e:b2:e3:89:b7:c1:6b:3d:5c:5d:b7:
cc:57:82:90:15:90:a3:0c:9e:a1:f8:50:57:1c:aa:
50:b7:aa:d7:2d:ed:32:cf:13:13:9b:89:be:e7:0c:
10:77:4f:2f:60:44:6f:cc:d0:54:c0:bc:2f:11:de:
b3:6b:81:f5:d1:a9:9b:c6:8a:00:9d:87:66:88:ef:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:8B:6D:27:D9:06:FA:CB:A5:B9:A1:A9:5F:7B:DD:BE:FB:73:12
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:44:58:16:f2:f4:1a:4c:50:14:18:14:90:54:eb:2b:71:
16:a9:18:1f:47:ab:3b:65:51:ad:76:25:da:0d:a0:83:72:81:
0f:3e:39:3e:f5:f1:14:8e:26:b9:3d:27:52:a2:92:8c:80:ed:
37:3b:17:05:83:48:94:1b:fc:b6:da:70:c5:85:d8:3f:eb:9c:
48:5b:78:fb:1f:e5:24:4b:b1:92:55:9c:50:d6:18:c2:0b:fc:
7f:70:55:0a:43:a6:3f:0a:2b:30:7c:3e:5b:db:78:26:d2:30:
94:63:8d:25:ff:f3:12:a4:33:e4:dc:cc:79:b2:60:d4:93:39:
ec:fc:ef:c0:aa:62:2b:ff:fe:1c:4f:b6:a1:a2:ee:11:2b:4f:
12:59:e1:39:c5:38:9d:b9:ec:0e:5f:bc:f0:a4:68:c3:ce:73:
9d:25:38:11:c9:cc:92:a9:d3:47:62:bb:97:37:84:49:be:60:
41:83:82:6a:06:fa:87:bd:af:43:46:0e:94:af:6c:bb:3b:72:
7a:72:7e:87:07:d3:04:7d:32:1d:84:98:94:6b:a9:5d:2a:f5:
9c:11:24:b9:49:6e:05:38:3f:9b:94:0c:95:07:63:fb:68:2b:
7f:51:c8:ff:54:b9:94:c3:7b:d1:6e:df:3d:32:48:f6:ba:22:
47:db:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:07:07 2025 by rpki-client