Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: e8pD0kSXJ6/nZxOZFt6KiUekp8b1/xMQeDjyEx9QZ9I=
Subject key identifier: 24:E9:F3:C1:4D:F6:81:30:FD:4C:80:F8:0A:A6:C2:0C:DA:5B:E6:CE
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019A0290A78BB4BC7B1ABD0D45A590173DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 1558
Signing time: Mon 20 Oct 2025 17:00:25 +0000
Manifest this update: Mon 20 Oct 2025 17:00:25 +0000
Manifest next update: Tue 21 Oct 2025 17:00:25 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: g7jXwWyf8LFyCme5TAclydCqCDwDLXo1KoUMhkWpKKc=)
2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:a7:8b:b4:bc:7b:1a:bd:0d:45:a5:90:17:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Oct 20 17:00:25 2025 GMT
Not After : Oct 21 17:00:25 2025 GMT
Subject: CN=24e9f3c14df68130fd4c80f80aa6c20cda5be6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:65:88:a7:45:ee:0d:be:8b:49:20:73:fd:
69:47:94:d6:e7:b0:c3:b2:68:c3:cf:df:c7:87:2c:
87:fc:a8:bd:66:c7:36:3d:91:5e:71:b2:b2:08:10:
69:72:33:ce:5f:21:4c:ca:29:15:10:13:8d:0f:bf:
67:79:7d:13:76:c5:7b:32:4b:74:f5:bd:2a:8f:29:
a2:76:f4:00:b4:17:02:a6:de:14:5b:ac:2f:d6:c0:
0b:62:56:26:d4:05:28:6c:5a:6a:ef:17:b2:59:b0:
a9:47:ef:07:f6:dc:7b:28:8a:ff:27:4c:e2:f5:bb:
ae:f3:38:e6:26:c3:6e:c3:ca:c6:8c:7e:3c:f2:58:
78:e9:c7:77:6e:6b:48:2f:d2:24:2a:e5:08:1f:28:
ec:5e:25:50:55:49:2d:ca:e3:f1:06:82:2e:95:32:
cb:ac:40:6e:ec:15:b1:71:56:50:d0:1b:b4:5a:78:
7c:36:90:88:66:fe:70:9d:f9:e6:f4:8a:27:e2:f9:
d9:a7:c5:0e:ee:9e:a3:88:11:3c:2c:f6:83:2e:96:
a4:87:fd:d1:a3:08:65:c3:ae:d5:36:42:6c:e7:a6:
b9:c2:be:4b:2d:5a:07:55:fb:ca:3b:d1:f1:90:70:
21:bb:5f:6a:83:96:b8:6e:0c:1d:65:19:8e:bf:25:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:F3:C1:4D:F6:81:30:FD:4C:80:F8:0A:A6:C2:0C:DA:5B:E6:CE
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:62:b3:0c:00:50:1c:07:1e:ca:26:64:3b:ca:5e:a4:0d:ad:
fa:40:5f:76:80:68:1f:fd:06:3a:4e:cc:ae:66:9d:04:f3:98:
5d:d5:fb:69:cf:b2:6a:f4:32:3f:b9:c0:9a:43:b0:65:5f:db:
34:16:03:61:9f:5b:e8:78:12:1e:2e:38:f0:c8:1c:38:ce:4e:
d0:d3:bb:b4:4b:27:f9:a1:a0:c9:c8:ca:ee:9d:90:97:72:0e:
60:19:7c:dd:19:bd:f4:af:bb:0e:fc:94:e6:1f:41:fd:ca:57:
0a:88:dd:f7:07:1c:97:22:8b:9c:fc:0d:dd:89:ad:b5:19:3a:
50:f2:32:30:df:d9:9a:8f:07:5c:76:0c:aa:fc:34:b3:3a:df:
e1:7b:7f:2f:40:92:fa:4b:85:af:5c:96:ea:f3:02:da:81:9c:
19:8c:ce:2c:cf:a9:1b:9a:82:d2:29:c2:30:10:86:1c:e2:26:
0c:61:3a:c9:4f:31:c4:1b:b5:fc:5c:ae:c6:71:a8:95:56:2b:
d7:8b:fc:c7:19:43:29:f0:8b:cb:1a:7b:ed:01:bb:63:cc:8d:
8d:26:6d:d7:45:ac:ff:9e:4f:66:cb:b5:a7:67:c2:32:27:e3:
77:7a:2e:d9:c6:62:44:ee:ed:20:6a:ad:d5:a2:17:ac:4e:73:
0f:f0:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:25 2025 by rpki-client