Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: UGjIW1E3zcvK9Db9eaSIozA/kWVG3nY3MJk9HUoIIZo=
Subject key identifier: 50:9A:D4:DE:4C:7E:0F:B9:BC:BC:9F:2B:19:38:9A:3D:ED:78:71:98
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0196B96C8A92BC35C539DA0415BB3020C4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0827
Signing time: Sat 10 May 2025 09:00:20 +0000
Manifest this update: Sat 10 May 2025 09:00:20 +0000
Manifest next update: Sun 11 May 2025 09:00:20 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: dRuZbuinuWUt8nlC6k9jZpn/AzUi1QMVy9iU2sU0DvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:8a:92:bc:35:c5:39:da:04:15:bb:30:20:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: May 10 09:00:20 2025 GMT
Not After : May 11 09:00:20 2025 GMT
Subject: CN=509ad4de4c7e0fb9bcbc9f2b19389a3ded787198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:e5:8c:53:d6:5d:44:1e:4a:93:cd:8a:0d:
1f:cc:51:a5:f3:b9:49:11:ef:ae:19:3f:ac:b5:46:
3c:64:de:19:ba:3e:5e:0b:b1:b1:32:a0:a8:5a:b6:
20:43:b0:d9:2e:16:fa:b3:74:d8:4a:40:82:33:31:
60:00:c2:43:b0:ac:2c:7e:bc:e5:06:88:5c:d1:99:
0b:a5:4d:b1:0f:42:1f:1b:75:d2:92:e0:82:d4:76:
5b:a4:7f:ec:f1:25:87:a3:ba:5c:7e:31:1f:84:7c:
a1:88:d9:29:77:9a:72:a7:67:7f:06:3e:68:cf:db:
3c:a3:13:33:e4:e1:37:2f:5f:ca:ab:74:32:0e:5a:
ca:85:00:81:0e:67:70:f9:f3:81:93:e0:75:fb:a4:
9c:78:7b:c7:80:ac:b6:c7:30:db:62:07:10:8d:46:
3c:24:a8:5c:a9:8e:89:ed:76:60:58:2e:4e:ac:20:
99:26:24:03:1a:27:c3:7a:75:e9:93:67:4a:f7:ad:
31:16:56:d0:80:3f:f3:3f:6d:99:07:23:80:9d:27:
0a:1a:a7:7b:4a:5c:3a:a1:ea:17:ab:0d:6c:94:27:
37:8f:ae:b6:ee:f2:28:5f:55:ae:8d:a8:7d:37:0c:
5b:13:ff:0f:55:26:72:1c:f7:61:42:06:e1:ad:af:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:D4:DE:4C:7E:0F:B9:BC:BC:9F:2B:19:38:9A:3D:ED:78:71:98
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:1a:7e:ee:fa:49:74:4c:04:99:b1:27:ff:ef:33:d2:65:
9b:13:09:60:68:2c:5d:e8:4f:ee:a7:f3:1b:51:bb:9f:c7:7a:
49:40:16:a5:f8:2d:6e:a0:63:7d:48:91:35:31:4c:57:d8:94:
74:24:f1:c4:2a:aa:42:66:dc:49:fe:fc:a9:ef:99:79:93:c7:
ca:d7:78:7f:a2:ce:a6:64:3d:a1:a5:11:d3:dd:d1:78:ad:36:
76:97:17:6a:36:68:1a:e3:5a:6e:03:eb:c3:8e:23:b2:b5:73:
eb:04:57:a5:07:92:67:79:4c:09:63:55:b3:f7:4a:0f:fc:52:
f2:c2:19:47:6e:b6:e9:2b:e8:fb:7e:7d:f8:36:c8:dd:e9:0c:
79:f5:1a:74:f5:b8:3c:3a:95:d2:89:51:95:38:2d:49:27:ad:
c9:dc:26:be:56:02:bc:9e:63:84:73:43:7f:69:92:78:5e:e4:
29:2a:83:ee:4d:b9:82:3f:01:5a:4b:02:fa:43:92:5e:15:dc:
78:74:5a:a0:06:50:f3:d3:46:27:68:1f:95:81:b4:5b:eb:35:
3e:ed:14:53:76:91:5e:64:27:e7:70:8b:1f:e1:52:97:68:f5:
6f:f4:b2:7b:04:be:d6:b9:42:74:52:6a:a7:23:cd:e0:33:27:
46:37:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:54:11 2025 by rpki-client