Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: U22LFMzNtEybVDW0IQXBB/xFk4RIcQ0b1afr4QeLPms=
Subject key identifier: 1D:78:1C:13:53:E4:23:EC:8C:BC:BD:CB:0F:D5:79:59:51:13:9C:B4
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 019892C8C30E741C4D79AC385B83367A0096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 11D2
Signing time: Sun 10 Aug 2025 07:01:27 +0000
Manifest this update: Sun 10 Aug 2025 07:01:27 +0000
Manifest next update: Mon 11 Aug 2025 07:01:27 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: qRphfvA7nXXbCxLx/eH8PfBXUx1hC2itHCFHxQ2SpSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:c3:0e:74:1c:4d:79:ac:38:5b:83:36:7a:00:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Aug 10 07:01:27 2025 GMT
Not After : Aug 11 07:01:27 2025 GMT
Subject: CN=1d781c1353e423ec8cbcbdcb0fd5795951139cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:3c:5f:c4:e2:e8:05:01:46:44:fe:3c:c6:
f9:5c:5e:8f:9c:77:f1:af:35:67:13:c1:04:3b:c3:
0e:d3:4a:17:6c:34:0a:f9:d1:04:dc:71:c7:56:c7:
14:b5:91:24:69:6c:8d:13:0f:e2:e5:d8:55:69:17:
a8:fc:27:db:d1:f6:30:df:b7:60:14:94:c6:9d:4b:
15:82:4d:8f:59:70:55:8c:e6:85:95:ca:66:4c:16:
7a:02:e3:63:a0:50:d7:be:da:fd:bf:45:63:0d:9d:
f2:1f:fd:2b:4c:1c:0c:f1:55:85:f9:e2:83:ed:72:
9e:fb:53:b0:d5:06:ce:45:2f:28:2f:9e:0e:51:c6:
6e:86:ac:af:80:06:0f:7f:b4:a2:2a:1b:2b:ba:e3:
4f:e7:19:40:2a:13:36:ef:3a:b0:41:c1:ef:4e:4e:
97:7c:7c:ea:27:8c:30:25:52:cb:db:9c:d6:ed:8f:
c2:a7:ad:ce:cd:f2:17:96:36:82:9e:95:1d:be:7f:
0f:91:0b:07:d9:55:04:a2:d9:80:cc:93:41:09:92:
bb:4e:0b:ac:6c:02:5d:c1:27:0b:95:ad:1e:e0:e6:
61:23:96:ae:6f:fb:8e:ca:0f:7c:c0:e0:1b:1f:61:
ff:e5:59:71:13:fb:38:0d:d8:f1:16:ec:14:ba:d1:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:1C:13:53:E4:23:EC:8C:BC:BD:CB:0F:D5:79:59:51:13:9C:B4
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d7:1a:d5:d7:fc:46:be:65:79:75:1f:06:86:3d:b4:bf:29:
8f:1f:23:83:92:56:b8:1e:05:e0:e4:40:f5:94:8e:71:e3:4b:
9a:e2:ee:cc:a3:24:4d:88:3c:08:a4:b6:76:54:ef:f2:fc:f4:
b3:69:e0:3e:36:24:47:6c:74:6c:f3:e1:fe:59:47:8a:4b:af:
19:24:37:73:e3:09:68:65:0c:bb:51:95:f3:30:aa:9b:01:52:
87:1f:e7:f6:b9:df:ff:0b:b6:28:d6:22:84:67:d1:4f:76:50:
88:33:92:d1:ec:50:84:0c:18:c1:b3:8a:ab:c3:50:6d:03:f2:
fe:2a:d0:6e:48:cf:24:54:1f:82:00:3e:2d:c9:5e:24:a7:ac:
0d:27:5e:9a:39:85:96:7d:4b:00:17:e3:f2:88:79:24:d4:61:
c4:5e:a9:2c:16:d7:f0:d5:84:4d:d7:21:ba:d6:96:a2:29:6e:
ab:61:84:7b:82:4a:68:c1:24:56:b3:72:d9:d5:41:9f:bd:ca:
b1:89:bc:1b:22:79:42:00:62:0e:84:67:47:58:51:23:b1:ac:
0a:5b:6c:c5:b5:0b:0e:19:f2:8f:16:8b:6f:57:58:39:ce:bd:
0d:c6:4e:d2:7f:ed:d6:8b:9d:a5:ed:cb:9e:39:bc:08:09:0f:
f8:64:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:16 2025 by rpki-client