Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: L4Mm/1bPgKuGH4Y2m4VaqdE9v6miKPkH4/HkcAjtfBk=
Subject key identifier: A0:3E:34:C0:B4:C8:3B:FC:9D:E8:E8:AE:E4:D4:29:7E:0B:69:18:7F
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0199FDDA0584269FE73D61EC7207461E4B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 09D8
Signing time: Sun 19 Oct 2025 19:02:27 +0000
Manifest this update: Sun 19 Oct 2025 19:02:27 +0000
Manifest next update: Mon 20 Oct 2025 19:02:27 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: WvvXL4jW4VC2ifW3j8lBgdNUNgJl+tiIgC3x4km8FJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:05:84:26:9f:e7:3d:61:ec:72:07:46:1e:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Oct 19 19:02:27 2025 GMT
Not After : Oct 20 19:02:27 2025 GMT
Subject: CN=a03e34c0b4c83bfc9de8e8aee4d4297e0b69187f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:d7:30:5d:9e:97:13:6f:08:be:c3:2c:67:
db:cf:71:69:82:37:63:3f:3a:3f:fa:99:2d:69:b2:
53:45:a2:b2:8b:2b:28:c1:b2:72:94:97:db:d1:07:
f8:7c:cc:94:c1:e6:24:6d:af:fd:f9:9a:d5:64:78:
b3:67:8c:de:dd:8a:ca:df:31:44:29:c6:82:a9:d8:
a2:77:a1:09:92:6f:54:72:23:f3:99:63:f9:95:bd:
4c:6f:dc:49:b0:24:90:f8:f4:37:3d:17:b7:49:4f:
b4:9e:56:09:6a:1e:cf:34:15:9c:59:1c:9a:f0:f7:
04:ee:7b:10:a4:68:e0:e0:7f:59:bd:ed:7c:10:1a:
a7:10:fc:57:2d:be:a0:e5:40:18:39:26:cb:97:52:
3c:5a:af:56:09:a5:e3:83:ab:df:3f:d9:f8:79:4a:
b0:3c:33:d1:96:51:b4:f0:76:00:ef:93:46:4d:e7:
6c:7e:ed:50:03:53:0b:77:8a:0b:60:fe:0c:90:37:
88:c2:0d:92:42:83:81:82:5a:5e:11:24:c3:34:44:
4e:36:4d:ff:a1:67:b1:22:3d:b8:9f:52:a5:19:e2:
e8:62:b8:be:01:24:93:cd:77:6a:c3:0e:ab:32:8e:
a4:0a:ab:7b:10:4e:d4:9f:e1:87:3b:5c:02:fe:1f:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:34:C0:B4:C8:3B:FC:9D:E8:E8:AE:E4:D4:29:7E:0B:69:18:7F
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:bb:0d:ba:08:8e:11:8e:f0:c4:70:eb:da:ed:e4:35:98:
a8:69:29:28:8a:0c:06:ca:39:64:cf:3c:c5:be:ef:66:52:95:
50:32:47:03:64:17:eb:e6:4e:dc:e5:82:7d:44:93:8a:55:a9:
b6:3b:76:ba:ed:0e:6a:cf:24:55:0f:64:32:b3:e1:92:c7:4b:
d7:8f:28:8e:ee:b3:68:11:d7:a9:89:09:9c:9e:3a:fe:28:90:
23:20:ac:bd:4a:e3:6e:7e:01:bb:e6:22:62:96:c9:71:d6:36:
c8:1f:e8:5d:5f:3a:b2:02:3c:d9:ab:1e:2f:c2:58:ba:c4:8f:
af:2e:3f:3d:95:53:08:c1:a5:2a:8e:a2:24:37:be:02:a0:ca:
27:4c:ef:11:47:36:9e:47:67:f7:0a:40:1b:07:cb:f7:0b:a8:
8f:65:32:89:19:a6:01:f6:23:9a:90:53:33:ee:4e:4d:12:09:
0c:bc:c4:a4:10:8b:0d:0f:ab:a5:93:cb:5e:17:4b:64:27:64:
3e:99:8d:30:71:77:ac:c7:e5:d3:c5:ff:78:ea:91:ab:11:a7:
2e:95:62:36:02:a1:87:e8:90:3f:ae:c1:c6:f7:c6:1e:59:12:
38:43:bf:54:d3:73:cc:3c:7c:b4:84:98:69:dc:9b:1e:b2:4b:
8e:94:eb:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92gWEJp/nPWHscgdGHkuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx
OGY1MTcwHhcNMjUxMDE5MTkwMjI3WhcNMjUxMDIwMTkwMjI3WjAzMTEwLwYDVQQD
EyhhMDNlMzRjMGI0YzgzYmZjOWRlOGU4YWVlNGQ0Mjk3ZTBiNjkxODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YfXMF2elxNvCL7DLGfbz3Fpgjdj
Pzo/+pktabJTRaKyiysowbJylJfb0Qf4fMyUweYkba/9+ZrVZHizZ4ze3YrK3zFE
KcaCqdiid6EJkm9UciPzmWP5lb1Mb9xJsCSQ+PQ3PRe3SU+0nlYJah7PNBWcWRya
8PcE7nsQpGjg4H9Zve18EBqnEPxXLb6g5UAYOSbLl1I8Wq9WCaXjg6vfP9n4eUqw
PDPRllG08HYA75NGTedsfu1QA1MLd4oLYP4MkDeIwg2SQoOBglpeESTDNERONk3/
oWexIj24n1KlGeLoYri+ASSTzXdqww6rMo6kCqt7EE7Un+GHO1wC/h9aywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA+NMC0yDv8nejoruTUKX4LaRh/MB8GA1UdIwQY
MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt
ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm
LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNW7DboI
jhGO8MRw69rt5DWYqGkpKIoMBso5ZM88xb7vZlKVUDJHA2QX6+ZO3OWCfUSTilWp
tjt2uu0Oas8kVQ9kMrPhksdL148oju6zaBHXqYkJnJ46/iiQIyCsvUrjbn4Bu+Yi
YpbJcdY2yB/oXV86sgI82aseL8JYusSPry4/PZVTCMGlKo6iJDe+AqDKJ0zvEUc2
nkdn9wpAGwfL9wuoj2UyiRmmAfYjmpBTM+5OTRIJDLzEpBCLDQ+rpZPLXhdLZCdk
PpmNMHF3rMfl08X/eOqRqxGnLpViNgKhh+iQP67BxvfGHlkSOEO/VNNzzDx8tISY
adybHrJLjpTrSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:09 2025 by rpki-client