Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: qtm1J94W3MK7GPkp/HFpYeOXGzaizZ9SDRNfH2NxLf4=
Subject key identifier: B4:11:48:A8:DC:5B:E1:F6:F6:BC:03:A5:12:DA:F4:04:23:E2:0D:B1
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 01976D3D8707FF84C07334D0532350B176BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 113A
Signing time: Sat 14 Jun 2025 07:00:38 +0000
Manifest this update: Sat 14 Jun 2025 07:00:38 +0000
Manifest next update: Sun 15 Jun 2025 07:00:38 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: 7Un4esHyKRT+gY4W7e0vD47bo5ZGYCpxdh3p+UA1Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:87:07:ff:84:c0:73:34:d0:53:23:50:b1:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Jun 14 07:00:38 2025 GMT
Not After : Jun 15 07:00:38 2025 GMT
Subject: CN=b41148a8dc5be1f6f6bc03a512daf40423e20db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:1c:58:65:3a:f8:ac:92:01:1e:8d:99:6b:
29:70:c1:cc:0d:26:3e:7d:00:51:a5:ad:82:3c:a3:
33:df:5d:57:2f:64:1f:03:d3:94:a6:e6:e3:ba:db:
16:8f:52:53:31:7a:19:80:08:c1:60:4b:a7:5d:cd:
28:91:93:2a:31:18:b0:f1:91:ee:ae:0f:9f:5e:68:
29:bb:8b:ed:6c:a4:ee:08:e3:bb:22:35:62:0e:9e:
1f:94:0a:35:df:43:1a:d8:79:1b:a5:8f:d2:da:74:
08:e4:52:6a:fb:55:4f:65:4e:31:31:c7:8d:a0:28:
19:ac:8b:dd:7b:fd:77:b2:d1:3b:5b:a6:dc:f4:f7:
5c:01:13:02:bd:09:6e:2a:e5:28:8a:7e:05:ee:9c:
72:52:5e:42:bc:89:71:81:0f:b6:6e:8c:60:92:1f:
4d:b7:2e:ec:22:17:a9:2e:55:f9:01:8b:71:6e:b9:
85:8d:84:8e:1d:c3:35:cf:14:aa:22:4e:98:6f:5c:
d2:95:29:68:c1:93:a7:93:4c:df:50:7f:77:4f:a7:
9b:3f:45:3b:e8:5d:2f:a0:22:95:eb:c7:63:9f:be:
07:21:86:88:fe:99:92:c6:ff:55:b8:a6:4f:e6:24:
3f:40:ef:47:6a:e3:ba:e7:f5:b3:dd:ec:8e:dc:b5:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:48:A8:DC:5B:E1:F6:F6:BC:03:A5:12:DA:F4:04:23:E2:0D:B1
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1c:7f:e0:d0:d3:56:37:30:4d:75:07:dd:fb:6f:85:d7:f6:
8b:ad:72:7e:c1:4b:d6:8f:0d:30:04:c1:3f:66:61:3c:30:d5:
45:f7:aa:1f:0d:86:0a:66:f3:ff:ca:06:0c:6c:f8:0d:32:06:
0b:d2:23:cf:a8:9f:ff:fc:b0:05:86:ac:30:fa:ec:9d:c3:81:
89:17:4c:c1:06:b3:2c:4f:c5:a9:ee:ec:6f:16:3f:8c:ce:77:
ec:e0:2a:ea:fc:ed:1f:55:d0:69:71:00:aa:8f:12:2f:f9:ad:
e9:8c:26:4f:3a:bb:d9:fa:f2:19:c5:96:e5:18:59:f1:15:8d:
93:fe:a0:f2:58:e3:30:cb:53:e2:15:68:93:00:6b:4d:f8:24:
4d:6a:ea:46:90:2c:94:bf:3c:bb:73:30:da:2a:de:68:39:a0:
56:e7:17:33:04:2e:2f:ae:0d:c3:41:a9:1c:0b:32:ab:d8:2d:
71:e5:9c:ee:c8:15:e8:76:a7:93:d6:9a:ec:1a:7d:f1:89:95:
06:d9:53:96:dd:3d:46:d5:0a:e2:93:ef:ac:5f:90:39:ce:2c:
2d:d7:db:02:67:a8:17:d6:73:4a:50:b6:7a:3c:6e:b2:38:10:
1f:fb:b6:8b:c6:e6:98:b0:a6:21:65:38:38:6f:b9:77:74:fe:
b3:fa:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:10 2025 by rpki-client