Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
File: ksrhHed02u8FJ0JGPOlU9SHG0nI.mft (raw, json)
Hash identifier: IWpYxgVko/5/yYmos5cLAc99uxiAjKKgtZQeHO6E42Q=
Subject key identifier: 84:B7:E7:8C:D9:FE:77:4C:83:BD:7B:C8:44:18:DE:77:47:34:9E:6D
Authority key identifier: 92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
Certificate issuer: /CN=92cae11de774daef052742463ce954f521c6d272
Certificate serial: 019894B7B4AD0EB0A96301EDBC6AC5A236EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
Manifest number: 1020
Signing time: Sun 10 Aug 2025 16:02:03 +0000
Manifest this update: Sun 10 Aug 2025 16:02:03 +0000
Manifest next update: Mon 11 Aug 2025 16:02:03 +0000
Files and hashes: 1: ksrhHed02u8FJ0JGPOlU9SHG0nI.crl (hash: ezW6JRElzRoPvFN/F323eD+oh7L1QgWpleEz/c7rr2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:b4:ad:0e:b0:a9:63:01:ed:bc:6a:c5:a2:36:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cae11de774daef052742463ce954f521c6d272
Validity
Not Before: Aug 10 16:02:03 2025 GMT
Not After : Aug 11 16:02:03 2025 GMT
Subject: CN=84b7e78cd9fe774c83bd7bc84418de7747349e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:b0:11:70:48:d5:55:ac:d9:7b:0b:ed:09:
fe:16:b4:d0:60:f4:8e:82:5d:30:6d:68:68:eb:89:
63:cf:66:14:bf:14:89:74:eb:7c:08:88:cb:53:8a:
40:98:da:1f:83:2e:18:93:43:98:04:22:39:1c:a7:
15:4c:49:2b:41:50:9b:76:5e:c4:ac:37:73:55:a3:
f6:0c:0a:19:76:6d:1b:ed:c7:6c:2c:d4:c5:0f:11:
08:d2:0a:f6:6b:de:af:fb:7d:c3:da:4e:02:1e:28:
66:c3:93:d0:92:cb:ed:bc:b2:06:23:89:96:61:01:
00:85:20:9d:16:92:a8:2f:a7:75:90:3a:d5:a4:32:
c7:53:4b:94:30:a5:f9:09:77:6d:66:1d:b5:c2:85:
71:1c:eb:9e:8d:ca:0a:5a:f5:24:91:86:cb:2f:81:
4f:15:78:c7:b9:8d:a8:2e:da:8e:ea:10:72:fc:80:
c2:3d:9e:fc:64:9d:5c:91:6c:2d:11:68:1f:bc:eb:
e5:63:fd:30:a7:4a:0f:d2:16:8f:7f:9c:2b:e1:d2:
b6:97:8e:b2:f2:f7:7b:18:18:8f:55:e2:47:b3:fe:
51:e3:42:98:60:31:09:01:f9:b9:92:fd:86:41:a0:
65:ae:04:b7:3d:a0:31:d3:ec:a0:83:69:bc:63:78:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:E7:8C:D9:FE:77:4C:83:BD:7B:C8:44:18:DE:77:47:34:9E:6D
X509v3 Authority Key Identifier:
keyid:92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:90:96:16:16:3b:c5:f0:d9:39:60:bd:4b:65:30:12:ee:92:
03:f4:23:78:d1:5f:bb:26:43:f7:09:53:b9:73:96:84:17:c1:
a8:d6:79:84:36:8c:dd:a5:e9:d8:dc:e8:92:13:83:17:7f:91:
85:f7:5a:63:57:c9:7e:e7:59:a3:5d:0a:f5:7e:92:b3:ce:61:
7c:63:81:81:ef:c3:0a:3d:97:12:4c:d6:b1:1f:06:b7:dd:dd:
74:7f:8a:22:5c:ab:0a:6a:ae:69:34:a0:f6:6b:50:8d:a5:d4:
1c:6d:44:b7:e4:1d:49:97:a2:a3:22:1b:bb:d0:30:4e:61:bb:
ad:bb:50:58:18:d9:92:88:ff:b3:90:2c:8a:0c:5f:48:50:ba:
02:f7:ef:9b:6e:fe:56:b1:b1:26:29:f6:ed:e5:91:a5:b9:9a:
8c:dc:c4:8e:23:88:9c:d6:92:2e:65:2d:d7:75:ed:c4:bd:59:
e6:21:b6:cf:e6:39:71:34:ee:b8:6a:d6:a4:ab:3c:8c:b3:ef:
ea:a6:cf:6b:4c:d9:e4:05:ad:9a:51:d3:85:2c:68:94:d8:14:
81:4e:41:26:08:06:1e:3b:75:3e:85:84:0c:36:c2:79:c3:cf:
ea:3a:27:5d:59:4c:8a:0a:d9:57:bb:db:73:36:95:e1:c2:d3:
60:c3:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:35 2025 by rpki-client