Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: jognfsIbz+Y8KCUlhNyo0EayZX1gQIGgErKLYCraxmc=
Subject key identifier: 55:C3:6B:C1:99:EC:2E:31:D0:A9:CF:0A:63:0D:7E:73:68:63:58:D3
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 019590060BC9AC9A85EBFFC3EFB2FBE218C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 078D
Signing time: Thu 13 Mar 2025 15:01:09 +0000
Manifest this update: Thu 13 Mar 2025 15:01:09 +0000
Manifest next update: Fri 14 Mar 2025 15:01:09 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: CugExKgcMQv0A8oPrnEnV8Y9/nP/QOrff3xZOcNWMDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:0b:c9:ac:9a:85:eb:ff:c3:ef:b2:fb:e2:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Mar 13 15:01:09 2025 GMT
Not After : Mar 14 15:01:09 2025 GMT
Subject: CN=55c36bc199ec2e31d0a9cf0a630d7e73686358d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:c3:b1:0e:8d:6e:32:35:99:e1:44:8f:57:
4f:2c:f1:46:45:33:95:97:87:7a:dc:de:18:c5:ed:
fc:b0:bb:aa:8c:9a:7d:eb:b1:d5:3a:6d:98:21:7d:
6a:7e:f1:dd:d6:b9:21:e9:1b:88:f6:b6:db:5c:3c:
09:ec:33:2c:2a:a4:f9:70:0c:54:c1:ac:48:29:91:
75:e4:bc:11:0b:45:c5:fe:1a:69:9a:a4:43:ea:69:
3d:44:a2:96:ce:08:4d:50:2e:ee:3a:7b:50:d6:98:
dd:60:9c:9a:29:09:5c:e9:b7:46:84:5e:52:d6:3c:
1f:e3:fb:3f:92:ae:c9:fe:ab:cb:d5:fd:41:51:ca:
9f:5e:54:2e:aa:10:9a:f1:7f:3a:51:7c:49:aa:c0:
e2:8e:00:4d:c2:7f:00:67:ab:60:4d:30:8f:2d:4d:
6c:bd:d7:5a:f3:9b:9c:33:c0:46:ac:4f:43:d0:29:
5c:d8:d3:06:01:ff:66:09:52:d1:80:3b:ee:23:d3:
67:8c:08:11:06:00:c2:11:86:75:18:d3:95:21:c9:
01:ef:51:63:5d:1d:89:02:15:5b:38:b6:0e:f6:43:
d9:c4:8a:45:e4:04:1f:7b:ab:e3:ec:07:27:52:7c:
a3:4b:98:a1:40:07:99:9f:e7:0c:c6:d2:cb:88:32:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:6B:C1:99:EC:2E:31:D0:A9:CF:0A:63:0D:7E:73:68:63:58:D3
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:99:12:89:dd:c2:94:fc:18:53:ec:4b:5c:c2:22:d8:60:72:
91:98:da:4c:42:42:f1:8a:b1:b2:59:17:ef:17:e4:5c:58:db:
40:3a:1e:70:ef:fc:af:57:0a:90:76:7d:1d:be:c5:85:29:c6:
88:e8:8e:40:04:d9:e9:80:e2:55:8b:06:3c:1e:7d:9d:af:3a:
26:29:84:09:11:df:5d:75:b6:b3:7d:02:8b:35:71:1b:c7:99:
52:41:71:d6:f1:65:44:ae:10:b7:b4:2e:e8:7d:97:8f:8b:f3:
0c:f6:00:bc:fa:69:46:d2:b3:0c:7e:88:4c:bd:49:dc:48:1d:
0a:4a:01:ad:0c:43:e8:ec:82:55:d8:96:6b:cd:d6:34:25:10:
8a:c6:67:2d:a5:33:06:50:5b:35:24:8c:f1:d2:0a:20:64:c9:
5f:2c:88:f6:79:11:4f:ad:13:4f:5f:65:cf:27:9c:c8:52:f8:
8e:b8:98:cf:c6:1b:de:c7:8d:15:d6:20:e0:9e:ad:4d:60:a1:
aa:49:36:fb:87:e9:c0:7d:34:77:b2:65:75:11:79:e5:c8:2f:
54:7e:91:77:7e:7e:1a:75:15:55:e8:d6:4b:fc:dd:3a:af:53:
44:27:89:df:d1:55:c4:ec:f7:e8:71:4c:4e:ea:6b:27:81:e5:
3f:81:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:40 2025 by rpki-client