Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: 9gBosRbk9xPLowJHmg5y7yuJ77T8E/qy1YGLkQ4qBcc=
Subject key identifier: BF:BD:A1:49:E0:6A:5E:65:43:36:BE:0F:B7:F7:C1:59:F4:EC:9D:94
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01974666E53B2899D5D0385640BE7B0B895E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0870
Signing time: Fri 06 Jun 2025 18:00:37 +0000
Manifest this update: Fri 06 Jun 2025 18:00:37 +0000
Manifest next update: Sat 07 Jun 2025 18:00:37 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: UcpXwAuMEqC44N1ykMLc6Lnt791ePbs7cgcVnbyR+a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e5:3b:28:99:d5:d0:38:56:40:be:7b:0b:89:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jun 6 18:00:37 2025 GMT
Not After : Jun 7 18:00:37 2025 GMT
Subject: CN=bfbda149e06a5e654336be0fb7f7c159f4ec9d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:43:8f:9a:a0:1c:d6:70:16:f1:04:2f:f0:
1f:f2:64:f1:80:e1:5e:e8:0b:0c:0b:23:bd:4a:df:
d8:ba:a5:87:53:bc:a9:07:1d:36:51:2f:42:a6:66:
e5:85:8b:09:c8:e3:b1:44:a5:70:4c:b2:8f:2b:7e:
8b:0f:14:32:85:0a:5a:6c:12:53:44:42:1d:16:51:
5c:4f:9c:33:53:c6:08:24:75:bc:63:ff:67:64:95:
96:95:85:f9:48:03:58:39:d5:10:36:76:de:e7:a5:
95:91:82:18:66:32:96:a7:be:dd:08:86:a8:e2:3c:
0d:d9:75:a5:b3:b0:46:fe:df:7e:41:18:09:16:b0:
60:a0:76:e5:6a:b8:3c:73:55:5e:1e:c0:58:10:bd:
94:42:bb:f9:19:ca:0b:9f:4f:79:b9:dc:eb:ae:01:
68:93:c8:a6:10:51:37:4f:1a:3e:69:5a:db:45:cd:
6f:f8:dc:fa:cd:95:01:22:00:8e:72:bc:6f:f8:a9:
be:68:8d:80:c9:80:41:42:56:f4:48:80:88:26:7f:
77:19:92:1b:f3:21:43:d8:b5:b4:7d:b4:18:3e:b5:
70:3a:58:e3:4b:25:e4:a0:5e:e9:ec:fb:07:5f:75:
2e:23:8f:8f:ac:73:0f:4e:f9:08:54:07:16:7b:32:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:A1:49:E0:6A:5E:65:43:36:BE:0F:B7:F7:C1:59:F4:EC:9D:94
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3a:5c:f4:03:88:c2:4e:db:20:aa:16:93:dd:ee:e6:c6:09:
1a:81:6e:cd:c0:1b:da:72:4a:02:21:e7:60:a0:94:95:ed:ef:
9f:97:d3:1a:db:98:1d:5d:b6:03:c1:a9:3e:85:bc:f5:b6:b4:
0e:ef:6b:c1:b9:f6:8a:9f:89:af:13:16:01:40:0b:f6:91:f5:
f7:3a:1c:89:a8:b3:1c:74:5f:16:f9:f2:f2:f1:2a:73:40:20:
bb:8f:3b:2b:a8:2e:b0:43:86:cc:40:f1:91:71:4a:fd:ca:b3:
58:e7:bb:00:ed:36:6d:32:40:42:2f:67:cc:33:6f:a5:09:71:
a1:27:fd:48:8b:5d:5f:f9:b3:dd:2e:80:32:41:b3:b3:c0:16:
1c:45:37:e8:0b:5e:1f:c7:fc:1d:a5:43:2a:70:aa:4c:03:10:
13:c3:18:11:4c:38:5e:b8:f4:5a:fa:38:b3:ee:ff:e7:9b:f4:
28:09:79:b5:ee:e4:ae:97:b1:3b:3f:39:32:bb:c4:9b:88:ee:
08:e3:54:57:99:74:9c:ad:df:f6:f8:be:bb:bb:e1:4b:11:cf:
9b:88:dc:e7:40:5a:41:c3:e5:5e:ac:01:b5:cb:23:4e:d1:e0:
29:e5:f8:d3:4a:01:c3:fd:e1:c5:41:bc:7a:27:ce:d2:98:71:
82:d9:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:37 2025 by rpki-client