Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: AE+TYYLSa5FGEd8r61A/rH5qZmeFtE3B4ufPrz9ne7E=
Subject key identifier: 50:C9:FA:C6:A1:31:A1:C3:9B:95:C7:13:3B:A4:77:61:9B:CF:67:2C
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 0198D85151268AA7AD7BB78EB764EA735F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0E48
Signing time: Sat 23 Aug 2025 19:04:24 +0000
Manifest this update: Sat 23 Aug 2025 19:04:24 +0000
Manifest next update: Sun 24 Aug 2025 19:04:24 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: iyqyg2JdNCPpLc0d7YHsUPAZcSeoU5viNvrJSSFqd4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:51:26:8a:a7:ad:7b:b7:8e:b7:64:ea:73:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Aug 23 19:04:24 2025 GMT
Not After : Aug 24 19:04:24 2025 GMT
Subject: CN=50c9fac6a131a1c39b95c7133ba477619bcf672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:e3:1e:3b:fa:e3:f7:27:1b:4f:2f:d3:c0:
5f:2b:1e:3a:5e:09:bc:38:68:5e:ac:e0:b2:3d:d7:
69:32:15:ca:09:48:fd:de:d4:e3:1d:e0:f1:d9:d7:
dd:a7:9e:48:d6:72:75:62:76:e3:e0:06:71:ca:ee:
9b:b0:1a:c4:f9:35:0b:08:bc:24:69:96:68:b0:f6:
fe:6a:44:1d:7c:67:c7:15:44:0b:66:b5:f2:87:d1:
5d:6c:4a:35:47:66:5b:c3:2f:81:17:0d:58:2f:4b:
80:da:c6:b3:73:85:59:7f:68:32:d6:24:b8:49:ab:
a6:7e:02:3a:95:11:38:7f:a1:60:66:94:8d:94:8b:
7e:36:c8:8a:b0:f7:56:39:f5:30:c2:c3:77:cb:7b:
8d:fe:ea:a4:78:3b:a9:49:86:0e:11:22:59:88:30:
37:da:a3:cb:2d:f2:7c:76:4a:de:ca:f7:a5:0a:b6:
4a:d7:dd:9e:3e:ee:c9:f6:90:26:7f:c0:ef:63:fd:
c6:f3:2f:80:12:de:ca:5b:bc:2c:a7:05:1e:ca:c9:
0b:a7:6f:40:e8:9c:a6:bc:cb:bb:51:04:c2:37:3b:
20:73:7f:67:3e:a1:e0:9e:3c:3f:73:32:45:99:bd:
bb:8a:b9:a2:18:7b:c7:78:e0:e2:76:4d:00:d1:cc:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:FA:C6:A1:31:A1:C3:9B:95:C7:13:3B:A4:77:61:9B:CF:67:2C
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:a9:2d:df:df:7a:d7:4a:b4:63:89:6e:f7:ea:04:68:aa:
ea:32:e9:d6:ac:82:77:ee:29:c5:e6:9f:e8:b1:7f:a5:ca:76:
c0:fe:60:d9:56:52:04:07:18:8e:67:34:25:91:39:94:e0:cd:
56:30:f9:f0:52:86:45:32:fb:6b:77:d3:3e:b1:a8:ff:fa:99:
33:78:c5:08:d3:0d:3e:2f:14:ad:fb:0e:1b:b8:43:fa:23:d5:
e8:28:67:74:e9:f9:72:f7:b6:a6:8b:09:7d:2c:eb:89:73:a0:
2a:d2:be:6a:f5:e2:64:77:4d:4e:9a:d0:10:42:18:c8:28:c1:
40:23:a8:e1:15:a8:a9:51:d0:5f:e7:e5:f4:c4:80:ae:89:1e:
cd:08:ed:ae:54:c1:dd:d3:c1:7a:e7:c1:0a:4c:85:26:78:93:
62:f2:7b:44:06:1c:15:55:af:31:ec:d1:e7:fc:2a:00:23:61:
41:c1:c6:6e:de:e1:2c:55:46:e8:30:fc:a7:c4:11:f9:86:59:
a9:1f:87:f8:0f:c7:a1:cc:f7:e1:42:cf:77:ea:3a:90:aa:33:
ab:96:4c:06:90:52:07:9d:46:9f:7b:63:03:36:49:93:48:49:
e2:46:ea:36:c0:e6:eb:0e:d1:95:c2:97:01:0a:c1:58:38:7d:
aa:ec:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:34 2025 by rpki-client