
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: yaNA3bYKhVrDIEHG8sHjlj6/66BanhNRNAQDOWBoYJM=
Subject key identifier: CB:69:BF:5A:A3:2E:71:F6:5E:6F:D3:8A:E3:8D:28:5D:52:5A:1A:1F
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01987D8BAD70CEDB85A33C5B7B1C4F2F343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0911
Signing time: Wed 06 Aug 2025 04:02:42 +0000
Manifest this update: Wed 06 Aug 2025 04:02:42 +0000
Manifest next update: Thu 07 Aug 2025 04:02:42 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: iCDcD3M9u4wKaco4J4Tb07DvFhUDCagFF05FLHkQpxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:ad:70:ce:db:85:a3:3c:5b:7b:1c:4f:2f:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Aug 6 04:02:42 2025 GMT
Not After : Aug 7 04:02:42 2025 GMT
Subject: CN=cb69bf5aa32e71f65e6fd38ae38d285d525a1a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:f1:ce:4c:8d:f0:0c:f5:f4:5f:b1:5e:4d:
8a:b3:4c:dd:28:88:34:82:d2:25:c2:c5:8a:67:8e:
c9:d9:89:88:84:db:d2:6a:87:56:57:d9:ca:53:f7:
7a:d0:ff:56:8b:55:04:52:98:51:0f:94:b9:4f:31:
9a:5e:b6:d0:20:88:8a:2b:68:21:ba:07:5d:16:ed:
0e:35:3b:51:93:c3:33:e8:b0:78:c1:42:48:3e:6e:
f7:8a:33:d1:8e:9b:2a:2e:b7:16:cf:50:7a:88:6a:
e7:e5:86:88:d3:cb:d4:d5:66:2c:83:1c:e9:8c:fd:
5c:ed:be:bc:80:8c:d4:e2:65:97:ec:b8:f5:c0:70:
50:8c:c0:39:eb:a0:94:17:18:d4:18:0e:ab:f6:af:
05:7c:47:a0:9e:f5:bf:21:f9:f4:55:37:49:d9:91:
08:58:1e:8c:8a:e4:b8:22:15:41:ea:39:1a:91:68:
55:d4:59:d9:96:bd:40:b9:5b:d9:25:a9:67:c0:d6:
0e:16:a1:29:b4:33:01:c2:7e:37:ed:5b:7e:22:a2:
d6:33:4d:b1:d8:84:24:f8:2d:46:3f:50:27:27:e7:
4a:e6:7f:98:3f:6a:b9:1c:47:b0:c3:85:f8:34:90:
44:9f:4c:99:0d:85:15:d4:df:54:3f:33:96:56:6b:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:BF:5A:A3:2E:71:F6:5E:6F:D3:8A:E3:8D:28:5D:52:5A:1A:1F
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2f:bb:35:24:89:7c:94:c8:c7:8c:dd:ae:df:c0:43:a6:2f:
3e:0c:44:e0:48:e5:3c:04:12:31:c5:ea:d1:72:0c:ec:2b:c5:
22:a3:a0:46:94:78:29:36:9f:53:48:29:ef:e9:42:ff:89:3a:
79:7b:c1:24:6b:6b:bf:e0:6b:1b:3a:90:a6:9d:d6:f1:2d:96:
7a:5e:1f:f9:67:86:01:66:11:a9:45:54:9f:c4:5f:02:b9:28:
82:55:d5:2f:35:15:18:1d:d9:34:37:39:df:e0:a8:b1:21:42:
f2:1b:70:89:c3:70:b3:b6:f5:38:3d:be:22:dc:ab:44:a5:b9:
23:24:b6:48:f3:6a:a4:22:32:4f:87:38:f0:31:b8:a9:8c:d4:
8d:be:5a:5f:bf:21:43:4a:4e:d2:79:03:79:ad:ba:6f:fb:40:
14:9b:e0:a5:24:52:48:13:55:48:66:53:7f:68:7a:32:a6:be:
97:11:d2:c3:16:3a:a6:13:60:14:b8:f1:4f:19:8c:21:ac:51:
89:da:7d:d8:b6:fc:6d:ae:70:0d:22:b3:85:c8:8e:4c:39:d4:
58:e6:2a:d7:ec:23:93:c3:ea:10:06:fb:c4:99:1d:f8:be:3d:
bb:61:ed:80:ae:99:d4:75:97:08:9f:c0:10:44:c7:59:cc:6b:
15:2b:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:21 2025 by rpki-client