Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: ml2t4TVlbXYZXrU+Gis9a5/lTcUBJdDrfCqvuhvOegE=
Subject key identifier: 4E:59:4F:33:7C:7F:5A:1A:69:5F:8F:39:F3:F9:B2:34:B9:05:BC:DB
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01976EF4FA7D0EB277A0B9CB09152873C9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0885
Signing time: Sat 14 Jun 2025 15:00:38 +0000
Manifest this update: Sat 14 Jun 2025 15:00:38 +0000
Manifest next update: Sun 15 Jun 2025 15:00:38 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: HBG/qEGc+baWiNyMYXSFnF7X3KVbnLot4KMv2kSTzqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:fa:7d:0e:b2:77:a0:b9:cb:09:15:28:73:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jun 14 15:00:38 2025 GMT
Not After : Jun 15 15:00:38 2025 GMT
Subject: CN=4e594f337c7f5a1a695f8f39f3f9b234b905bcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:db:36:47:de:7f:d7:9a:da:a6:ea:94:a4:
40:a5:45:3f:07:a9:24:68:fe:ab:12:bf:35:22:44:
98:8d:df:99:45:ac:79:de:e3:57:ef:48:3f:63:ab:
2e:09:b3:c7:67:77:b4:91:22:25:43:ae:8e:a9:ba:
34:5a:c8:1d:57:83:b7:6f:b2:08:5f:5b:ca:8c:af:
53:80:43:a0:59:e4:d5:9c:ac:aa:4f:3c:27:02:56:
7a:94:db:5b:9b:d3:b2:7b:8d:40:d5:78:81:65:b7:
51:8a:2b:75:3d:7c:de:57:4d:df:c1:97:df:be:09:
02:0f:12:dc:af:ba:b3:6c:5d:85:fb:e7:a4:16:0b:
b3:d7:74:ed:07:cc:33:64:f0:f9:4a:a3:98:38:69:
1e:d3:3b:a1:48:03:b7:08:4a:6a:c4:8b:6a:2d:80:
36:44:56:86:f5:f1:f0:b1:ef:b8:ff:62:1e:b1:7c:
44:2e:82:4e:ad:cf:a8:23:cf:9a:a1:c8:b0:ec:9b:
dd:06:33:77:39:b5:da:8a:b1:62:7e:0b:db:1b:8e:
6f:48:01:81:c2:34:7b:17:92:d3:5e:73:89:b0:97:
78:14:4a:87:2f:54:20:5e:77:8a:60:6b:be:b8:36:
e6:fd:b5:c9:92:c7:6f:91:08:37:84:62:ef:8d:53:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:4F:33:7C:7F:5A:1A:69:5F:8F:39:F3:F9:B2:34:B9:05:BC:DB
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:e8:3d:a0:c1:83:98:ce:72:b7:5f:53:4a:ac:0b:48:8b:
65:ab:fb:ab:13:ec:f9:79:5c:48:09:d6:55:f6:a7:08:2f:f9:
4f:c4:e4:49:e0:31:08:16:e9:3e:0c:82:90:8b:48:a7:9c:fa:
81:e5:cc:42:2a:d1:99:d4:06:2e:24:54:75:ac:ee:49:3b:45:
d3:03:66:f5:fd:0d:70:a1:46:8c:53:55:fa:d5:34:bf:62:e7:
4b:65:2b:03:46:b0:b2:ba:cf:23:66:c5:76:c7:1a:f3:91:40:
bf:61:a8:62:cc:2a:5c:a9:68:f4:9a:75:50:c4:d4:9c:53:3a:
09:58:78:8f:23:fb:50:31:c3:93:b7:ba:26:89:16:be:33:ed:
cf:b7:f7:c6:85:df:6d:64:13:fc:c6:e0:43:b6:07:15:40:d0:
75:36:62:92:c5:d5:e8:64:95:53:37:1b:97:c3:a3:10:b9:52:
4d:bc:66:bd:60:59:14:8b:03:4b:4c:0a:69:a8:0a:11:77:3e:
0f:25:43:e6:71:f2:68:4f:03:cb:4a:d0:f7:c9:3f:2e:57:16:
17:6c:ce:ce:b2:cb:44:2d:bf:5f:c9:1d:b0:7c:44:66:4c:62:
26:93:be:aa:e3:42:9a:55:96:a9:dd:bb:89:85:85:9a:8e:85:
7b:b9:ae:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9Pp9DrJ3oLnLCRUoc8n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx
OGY1MTcwHhcNMjUwNjE0MTUwMDM4WhcNMjUwNjE1MTUwMDM4WjAzMTEwLwYDVQQD
Eyg0ZTU5NGYzMzdjN2Y1YTFhNjk1ZjhmMzlmM2Y5YjIzNGI5MDViY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos7bNkfef9ea2qbqlKRApUU/B6kk
aP6rEr81IkSYjd+ZRax53uNX70g/Y6suCbPHZ3e0kSIlQ66Oqbo0WsgdV4O3b7II
X1vKjK9TgEOgWeTVnKyqTzwnAlZ6lNtbm9Oye41A1XiBZbdRiit1PXzeV03fwZff
vgkCDxLcr7qzbF2F++ekFguz13TtB8wzZPD5SqOYOGke0zuhSAO3CEpqxItqLYA2
RFaG9fHwse+4/2IesXxELoJOrc+oI8+aociw7JvdBjN3ObXairFifgvbG45vSAGB
wjR7F5LTXnOJsJd4FEqHL1QgXneKYGu+uDbm/bXJksdvkQg3hGLvjVMNjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5ZTzN8f1oaaV+POfP5sjS5BbzbMB8GA1UdIwQY
MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt
ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm
LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIzoPaDB
g5jOcrdfU0qsC0iLZav7qxPs+XlcSAnWVfanCC/5T8TkSeAxCBbpPgyCkItIp5z6
geXMQirRmdQGLiRUdazuSTtF0wNm9f0NcKFGjFNV+tU0v2LnS2UrA0awsrrPI2bF
dsca85FAv2GoYswqXKlo9Jp1UMTUnFM6CVh4jyP7UDHDk7e6JokWvjPtz7f3xoXf
bWQT/MbgQ7YHFUDQdTZiksXV6GSVUzcbl8OjELlSTbxmvWBZFIsDS0wKaagKEXc+
DyVD5nHyaE8Dy0rQ98k/LlcWF2zOzrLLRC2/X8kdsHxEZkxiJpO+quNCmlWWqd27
iYWFmo6Fe7muGA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:29 2025 by rpki-client