Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: GxbeDwirrwexdXmtkX+tE9MkuTvobtY3DqfzmAyyxhc=
Subject key identifier: 29:1C:78:81:54:D2:2D:80:97:56:5D:18:40:FD:13:C6:37:B5:30:4F
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0198D660E9B2A8363C1235BF3CD57FCA3014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 093F
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: q36Mq6R+LBs82F7Dnxho3IC2x6lmVpRJ+7W/6FebaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e9:b2:a8:36:3c:12:35:bf:3c:d5:7f:ca:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=291c788154d22d8097565d1840fd13c637b5304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:43:eb:05:01:5d:2a:64:38:67:80:35:9f:
c1:f2:f0:d7:a2:42:68:44:ff:70:20:aa:59:2b:08:
e4:c3:c4:64:55:32:c4:bc:88:c6:ea:41:f9:7d:c2:
cc:47:26:bf:9f:c6:f2:05:b5:21:3f:1c:f6:c7:40:
1f:b2:e6:1d:eb:f0:95:fe:b7:fc:2c:31:2d:77:75:
bf:d1:c0:74:e5:da:7e:0c:25:5d:11:c9:84:06:6a:
3c:e8:64:22:4d:8c:09:30:96:4d:bd:32:57:77:17:
d2:85:0f:12:3c:f5:a9:7e:d5:cf:02:30:a3:47:fa:
66:60:77:fa:69:36:ef:c5:8c:6c:82:0e:17:44:f4:
70:97:b8:b8:f2:67:49:7c:3e:5e:ec:13:58:23:e7:
05:a9:40:fc:37:44:9d:76:7f:bf:9f:35:46:73:65:
0e:f1:35:24:fa:db:70:4b:23:29:a6:27:c2:31:0a:
7f:cd:b4:99:b1:a6:49:fa:60:67:22:82:69:22:58:
b7:48:f7:8f:16:da:a3:50:89:4a:87:01:57:66:d4:
bd:34:39:0a:89:23:e5:18:af:ac:61:34:12:c6:28:
c7:4f:15:be:6c:d8:78:72:44:da:f5:24:57:31:c0:
f5:89:9a:96:de:fb:8e:6f:53:12:6f:a1:b7:cc:86:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:78:81:54:D2:2D:80:97:56:5D:18:40:FD:13:C6:37:B5:30:4F
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ff:49:04:61:bb:e7:74:ad:83:3e:60:f2:df:5b:4a:14:85:
a6:8a:42:45:b6:91:93:e9:8f:5f:96:9b:cc:40:9d:e9:7c:c8:
4c:94:96:08:a8:bb:15:d9:f8:53:4b:e5:56:b5:ac:f3:70:2f:
3e:a2:5f:95:3e:5e:5f:65:38:22:89:a7:3e:e1:39:84:b4:bf:
f6:e1:41:fd:b8:ab:7a:26:84:26:17:0f:e2:b5:5f:eb:54:5e:
fd:fb:9c:ee:44:83:44:8e:0c:ae:09:27:b6:69:90:f2:cc:6a:
03:c7:a3:f3:06:c1:b7:f0:97:8e:ab:4e:61:c7:50:ba:76:03:
c7:89:bc:20:b6:b9:45:36:1d:b7:6d:c6:22:42:fc:0e:d7:99:
12:a7:fa:1e:c4:c2:63:0d:a0:e7:68:42:04:c3:e7:66:40:ad:
f5:84:74:1b:15:af:51:ae:8a:f7:dc:93:af:0e:2c:a5:ee:49:
d9:47:a1:f9:63:22:bd:72:2d:b4:1e:e7:9d:d3:aa:dc:5d:8f:
d6:c3:86:44:50:c8:6f:7d:ff:13:f0:5d:34:e9:ef:bd:e9:52:
c7:3b:f6:b8:8f:50:df:77:80:11:2b:92:7c:a9:06:be:ee:73:
d1:28:df:c7:77:18:dc:4e:1a:25:d8:23:2e:66:d2:1a:59:7c:
7d:ec:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:53 2025 by rpki-client