Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: ibw/eZuyXyEgEwdAOBG+gJV75MCQolOqFw3twxJlrPg=
Subject key identifier: 56:0D:43:A0:C3:ED:C2:1D:C8:3C:C6:C5:0E:48:5B:6D:1D:99:15:12
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 0198D54EBC300DCCBB87D79D09D428DF7E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: hDCq3/pb8K+2BIVZju6vvnaP2xQ8aS274MZapr7DJzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bc:30:0d:cc:bb:87:d7:9d:09:d4:28:df:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=560d43a0c3edc21dc83cc6c50e485b6d1d991512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:2a:63:55:d1:d1:cf:cf:75:ef:9a:d3:0a:
a4:4c:47:e0:69:50:0b:aa:3d:0d:20:b1:8e:03:3a:
ab:99:39:9a:27:e7:ab:a1:10:6c:9e:70:1d:eb:1b:
86:47:34:a1:63:73:56:97:5b:8a:5f:09:c4:62:a5:
a5:74:0b:72:34:c6:79:f4:6f:95:14:88:41:e1:83:
37:82:66:7f:94:0f:1d:f4:7a:e6:1a:ea:e9:df:58:
ff:e8:90:4d:bb:9d:4b:dd:bb:b8:1f:20:05:53:de:
85:f1:c2:e6:b9:6f:2e:95:e5:d1:76:46:80:81:f3:
14:7d:88:44:5e:99:b5:a6:9f:12:95:5a:7f:72:99:
f2:6b:3d:c0:be:04:13:35:47:09:6f:1e:14:b7:48:
5d:4b:ed:44:0e:c9:2b:64:2a:0b:73:e5:87:69:70:
03:c5:37:f4:4a:cd:72:c7:8e:6b:fa:c0:ee:cb:f4:
80:6f:6b:02:62:03:fb:eb:42:47:85:06:c7:14:bf:
e5:4f:70:44:c7:7e:c1:22:08:f7:b2:65:46:5e:cc:
50:8b:fa:22:aa:09:38:a8:d3:55:57:e5:d6:47:56:
96:70:6b:5b:23:b8:cc:06:15:cf:f9:0d:b8:27:9f:
0c:0e:8e:22:e8:37:20:b0:02:91:00:33:6a:78:09:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:43:A0:C3:ED:C2:1D:C8:3C:C6:C5:0E:48:5B:6D:1D:99:15:12
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:88:e3:4f:5d:0a:0c:44:f4:fa:6c:b5:63:95:59:8d:dd:2c:
d6:8d:ff:eb:f3:44:f6:17:60:22:d2:19:1c:2c:a4:29:5e:7d:
20:de:e4:be:cc:7a:0e:97:c2:ca:e7:03:ab:c2:36:11:e2:b7:
d6:17:e0:8c:a6:a4:9e:bd:4c:de:1e:05:bb:64:7b:a3:9f:12:
98:ea:b1:74:3d:28:0b:ab:a8:b5:c1:d5:5e:08:04:2f:a3:e7:
37:2f:0a:6d:2b:b0:96:5c:c5:25:da:ba:79:39:f1:23:e6:65:
9c:0a:02:a6:44:29:f8:43:fb:e1:a4:ee:d5:2b:7a:d5:06:1d:
31:f2:d1:c6:ac:70:6f:25:f5:32:8c:46:c0:7f:72:14:ea:56:
5b:67:a1:4e:a3:de:39:25:3d:94:a7:43:f5:e6:9b:f0:da:74:
0e:2e:11:28:54:f5:d4:53:d8:40:66:db:83:51:5f:a7:55:2f:
83:c9:2a:a2:6c:03:d5:97:6d:a7:d8:96:5b:6a:55:01:8a:63:
48:6f:1f:5e:1a:af:fb:74:f8:43:95:1c:4d:1b:d6:93:95:c6:
91:6a:90:b1:88:13:f1:d5:5d:d5:1b:09:68:b9:e4:12:ea:34:
ae:fc:a5:46:3a:94:6d:2c:ca:1b:52:3f:3f:a3:a7:8c:af:50:
82:a9:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:39 2025 by rpki-client