Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: u5EfZOPClejBv8+Im4V3cw7+o1jFBlDn8ewWj3ElXrc=
Subject key identifier: 7B:02:2E:C3:95:7A:14:DD:89:85:2F:04:D0:0C:3B:3B:45:32:FE:95
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0199312495CAA733C8EB5AAD9AF83CF77EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 096E
Signing time: Wed 10 Sep 2025 01:01:44 +0000
Manifest this update: Wed 10 Sep 2025 01:01:44 +0000
Manifest next update: Thu 11 Sep 2025 01:01:44 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: V45zZTfVrrxvrUJQJDzCxBc5NDr08IPzVvsWfziVTUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:95:ca:a7:33:c8:eb:5a:ad:9a:f8:3c:f7:7e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Sep 10 01:01:44 2025 GMT
Not After : Sep 11 01:01:44 2025 GMT
Subject: CN=7b022ec3957a14dd89852f04d00c3b3b4532fe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:c7:2f:97:91:11:d1:49:78:ef:0d:30:7f:
e8:8e:66:45:45:94:8a:e7:b7:ce:5f:46:e6:3c:06:
38:48:20:ad:af:e6:f3:5f:d5:1a:94:3d:84:d1:83:
b8:29:be:47:a0:c4:47:34:9e:a3:23:03:dc:0f:ac:
c8:08:2b:c8:46:f6:d8:33:35:c5:dc:d9:c1:e0:03:
ed:21:6c:c9:9f:b2:d4:3d:44:a0:e2:d2:33:99:1e:
e2:00:c0:4d:cb:40:4c:45:46:8a:b1:03:a0:9a:f1:
17:4c:56:db:23:48:61:fd:28:90:a4:44:2d:40:ea:
9d:d8:3e:2e:84:b8:f3:89:ba:13:68:9e:36:ca:ef:
36:47:79:8c:7d:54:96:c4:c9:cb:b1:84:0b:f8:31:
75:df:97:dc:d6:ad:13:40:d2:9e:99:e9:e8:3c:1a:
bd:cd:f1:6f:8f:7c:cd:6c:a1:e7:65:be:97:62:ac:
d6:5d:d9:09:8c:79:04:fd:df:28:5d:fb:4c:88:e3:
31:0c:5f:94:29:e0:59:53:a8:08:27:c5:d1:94:3d:
09:e2:20:6d:06:04:37:29:d0:d9:a0:45:29:76:57:
17:a1:e9:64:95:65:06:bb:2e:8a:31:d9:dd:8f:00:
40:9e:da:d2:9f:59:f1:44:56:1a:30:49:12:d2:ed:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:2E:C3:95:7A:14:DD:89:85:2F:04:D0:0C:3B:3B:45:32:FE:95
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:31:07:bb:52:c0:f0:54:51:0a:75:b2:0a:e9:cb:4f:85:
8d:44:cc:27:65:e2:da:35:fc:bc:f9:b6:d8:61:a7:c5:aa:e8:
60:5a:29:d8:30:59:98:c9:a7:41:32:ae:c8:69:05:c1:13:8e:
e8:fb:92:5f:8c:20:54:6d:a5:5d:7b:48:b7:25:e9:1c:be:1d:
42:5d:4d:ac:0d:e7:0e:27:5b:61:90:64:52:c0:04:88:56:8c:
c4:10:ab:9b:04:1d:ff:ab:39:c2:49:ab:57:bb:e6:34:93:13:
11:44:90:68:90:46:49:a9:14:1d:59:3e:32:b1:ea:a9:7b:b6:
89:b3:77:a1:0e:90:b0:6d:f3:6c:de:14:ca:fd:e7:ee:9c:67:
b5:3d:01:0a:fb:ef:2e:5e:84:1c:9b:14:f8:60:a6:15:4f:4f:
83:8d:fd:90:17:cf:35:bf:bc:69:cb:fc:fb:83:db:22:ad:8a:
bf:8c:d7:44:41:1a:46:2f:1c:de:d7:5a:6d:e8:05:40:ce:d5:
ba:70:9a:4f:b0:b5:7d:37:89:3a:00:25:d4:ae:c5:58:67:80:
63:6a:7d:25:2b:62:f7:05:ac:a1:90:3b:74:02:9f:ff:e2:ec:
52:15:77:93:4b:de:92:6e:2f:ca:9d:6a:f1:9f:21:0b:f8:2a:
2c:00:69:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:04:37 2025 by rpki-client