Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: fIKyIexgbewOI7TUxa2UhBI/0T2TvMkJZ8iFrt7HksI=
Subject key identifier: FE:67:18:CE:72:6E:5B:25:95:38:48:ED:1C:EC:39:DF:2D:B7:8D:9D
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01964D470666F903B12F38BCCED0F9DA525D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 07EF
Signing time: Sat 19 Apr 2025 09:00:22 +0000
Manifest this update: Sat 19 Apr 2025 09:00:22 +0000
Manifest next update: Sun 20 Apr 2025 09:00:22 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: holXv5MXA1p8ZvXjVcv5wTTsriPDUZc6X6dOt09QRfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:06:66:f9:03:b1:2f:38:bc:ce:d0:f9:da:52:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Apr 19 09:00:22 2025 GMT
Not After : Apr 20 09:00:22 2025 GMT
Subject: CN=fe6718ce726e5b25953848ed1cec39df2db78d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:83:f2:59:ff:8c:44:8e:7c:52:01:9d:d7:
f1:37:b8:46:70:b6:1d:20:3c:4a:bf:74:7f:f3:9f:
ca:f3:02:34:a9:0a:ed:10:cb:f8:64:01:b2:13:ad:
b4:6a:a1:7a:d2:c9:4a:ac:77:1b:9f:42:0f:b9:32:
08:c9:fc:2c:2e:aa:f0:c5:8c:f4:1c:5a:2c:cb:aa:
e2:84:f6:6c:5c:42:c3:32:fb:93:9d:a6:32:ec:a3:
c2:ac:24:37:c1:91:d8:e5:ae:2a:77:f6:6c:38:af:
9d:70:fb:d2:8c:0c:39:59:15:4d:ba:50:57:1f:83:
be:5d:89:5b:a3:95:5f:31:c1:a4:a8:17:ae:10:d7:
15:e2:2b:13:c2:7e:6c:1d:89:04:8e:41:55:97:ab:
50:03:2b:20:70:ea:52:cd:4b:3c:34:db:a7:a6:cb:
bc:cd:4b:89:09:26:72:f0:da:e0:7c:40:44:b2:a3:
ab:0e:b0:b0:9d:24:13:e6:80:d2:b4:48:4e:ea:01:
26:e1:dc:29:c2:7c:d0:80:e0:ba:1e:a1:62:dc:1b:
af:fe:43:fa:77:31:6e:13:f8:f0:e2:70:bf:7e:ea:
43:44:aa:b2:fa:c1:b7:a5:52:42:8c:22:2b:ef:3d:
83:1d:86:31:30:ae:f4:3e:79:5a:f0:d4:7c:2b:e6:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:18:CE:72:6E:5B:25:95:38:48:ED:1C:EC:39:DF:2D:B7:8D:9D
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:74:67:0e:bc:5a:5c:a4:3c:b9:53:95:93:00:07:1b:76:be:
9c:1b:1b:2b:93:af:b1:36:4c:58:55:89:31:d1:e5:43:9a:e2:
e1:0e:ee:ce:91:9a:92:05:18:c4:e5:35:43:c4:3b:a1:63:0e:
b6:cd:53:2b:29:47:56:f6:10:da:94:d4:99:a6:17:a0:30:15:
f1:a5:8f:54:d9:a5:d9:1b:c1:cf:93:08:96:99:6d:41:e4:0b:
72:ae:43:22:c6:50:2e:f0:7d:71:db:81:4f:2d:24:71:4c:2a:
2e:18:5e:c8:6b:1c:9c:91:d2:67:5b:23:6e:a0:9b:67:ec:89:
ac:86:f7:5f:6e:1f:64:6f:09:d0:2c:d4:70:a2:97:6e:86:96:
6d:db:fb:82:ef:87:6f:ac:77:75:0b:75:75:a1:21:ec:1f:22:
1d:52:dc:8f:c0:00:73:43:f2:01:de:91:25:66:7b:5a:89:cf:
eb:24:25:51:31:51:c1:7f:38:10:48:c5:68:9c:5d:03:87:3e:
3e:89:59:72:86:46:52:6c:1b:6f:06:1c:fb:b9:ea:4c:0a:f8:
12:95:1e:32:ec:35:0f:d0:b8:d7:ee:a7:2b:32:1d:1f:46:7c:
51:b8:2c:fa:a4:0a:2e:10:27:3b:7b:26:10:30:2b:df:3d:e2:
fc:41:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:41:10 2025 by rpki-client