Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: ndFMQbFMX/WPU0rUPzbThqT5KruDxvhoux7Tss5Yz/o=
Subject key identifier: EE:FF:DF:CD:25:9F:49:94:94:76:03:88:7C:EE:19:54:B3:CC:8D:E3
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0197B6A22962F25DB96FFFA4A06B848036B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 08AA
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: hqT7jamBcfbiBQjjYb9b9mvIeElmsElyLPa+olZczDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:29:62:f2:5d:b9:6f:ff:a4:a0:6b:84:80:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=eeffdfcd259f4994947603887cee1954b3cc8de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:d7:86:f7:6e:2d:21:f2:5b:5a:1d:2f:59:
4a:ef:fd:c4:bc:01:8a:85:a7:0e:a0:b0:43:d2:00:
8c:95:07:da:d1:0e:61:d9:d0:b7:89:d5:2b:3e:de:
fa:19:00:7b:f7:02:49:62:27:4c:79:26:b5:f4:a6:
13:3f:ee:62:09:d4:f7:c3:2e:ef:31:17:75:84:44:
2e:3d:a8:30:4a:66:56:1e:3a:6f:bb:9c:73:d4:62:
dd:6c:a6:c1:a9:b7:dd:1d:60:af:d3:9c:93:7b:f2:
6f:81:b4:f2:4d:01:fe:93:68:66:1f:36:0d:53:92:
dd:2c:cd:cb:fc:74:1f:e2:e5:8d:a4:c4:10:25:97:
d1:82:98:d5:bb:42:2f:b5:e7:80:45:cb:df:bd:33:
93:08:b1:87:86:7a:36:bf:15:33:7e:e4:5e:69:af:
d4:b4:20:a1:03:53:85:23:26:18:02:75:a1:f8:21:
67:8b:1c:ba:5b:b8:ba:d4:32:e8:df:46:9a:76:15:
b4:c7:57:47:49:30:95:23:26:65:48:8b:61:ae:b3:
6e:f8:b4:86:d7:6f:70:92:b0:62:c2:3c:69:22:9f:
81:3e:9d:e6:70:ba:73:91:fe:1d:a0:79:5b:7b:32:
fc:3d:a7:7e:0a:bd:c8:b8:89:e9:46:82:cd:65:01:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FF:DF:CD:25:9F:49:94:94:76:03:88:7C:EE:19:54:B3:CC:8D:E3
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b5:a1:9e:61:78:d6:8e:cb:75:65:be:0e:db:fd:90:3b:3b:
a0:ce:6c:c0:3a:ad:e3:09:e3:fc:c4:ca:97:05:47:ea:b7:37:
bb:56:06:2d:bb:b8:f8:57:13:3e:1b:91:10:27:be:e1:e4:57:
b5:1e:7b:b6:20:78:7e:a7:6d:72:1d:12:73:c9:db:24:b0:d8:
0d:8a:7f:6d:ee:28:04:69:6b:a5:7e:dd:3c:d7:d9:21:ed:f9:
40:ce:69:57:80:b5:f9:c7:88:ef:6a:77:15:1d:19:55:0a:d8:
b3:15:e2:6a:77:a4:e0:eb:e0:f5:b2:73:66:01:f2:06:91:07:
5e:60:21:c8:e1:7b:d2:76:35:47:ae:7c:a9:a2:aa:f5:ee:8b:
c7:e8:dc:4d:1c:cb:21:32:38:ff:d2:d6:07:ef:bb:f9:60:d3:
48:3c:85:b2:b9:c1:82:8e:99:35:1f:b9:70:dd:e4:2c:a6:15:
bb:3c:30:17:d6:4c:19:fd:0e:03:ed:c4:cc:9c:7f:d3:c7:5e:
a5:e7:5d:7a:af:25:7e:c7:66:65:20:50:ce:12:bf:0c:62:e0:
61:30:4a:66:55:85:fd:d7:8f:05:b2:66:a7:46:ce:f7:f3:69:
a8:45:19:e0:73:42:51:f3:ae:d0:7f:6e:68:68:43:4f:08:2b:
cb:99:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:54 2025 by rpki-client