Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: kSAJIlaiKZZfBEANpQu8EacV/JnVCKU65L+kleY6OWI=
Subject key identifier: 6D:12:D8:51:EA:27:56:8D:68:D5:82:BC:0D:4F:C9:BC:67:1A:A5:67
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 0198D65FD933D9A399BF057532D5DE48FED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 11F5
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: QghJsCN7WS88yiBTQG/RmH7i1xM/W3aLHfoR0JgIqsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d9:33:d9:a3:99:bf:05:75:32:d5:de:48:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=6d12d851ea27568d68d582bc0d4fc9bc671aa567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:91:65:b6:aa:a2:05:ad:38:91:1a:4f:25:
52:0f:09:9b:df:d9:20:83:b3:5c:6c:98:1b:fc:cb:
d8:1a:df:e9:1d:1d:51:2e:29:84:d7:c7:45:53:b8:
f8:a5:ad:e6:ea:55:0a:c0:b7:49:eb:d5:5c:0d:69:
bb:e5:47:e3:f4:ec:af:e3:b4:36:17:67:d1:28:60:
bc:fc:ab:9d:48:95:95:50:26:f2:e9:9f:0b:b1:6a:
fa:a0:bd:50:4a:f2:56:ed:de:84:71:45:a6:bf:53:
47:c2:01:b7:29:30:2a:85:0e:04:c8:8a:92:7d:f1:
0c:e0:5d:dc:b4:57:60:30:15:31:63:36:fd:80:b8:
93:99:c4:b6:69:2e:d3:f8:76:85:9a:5b:bd:dc:cf:
a9:4d:90:47:22:28:43:96:61:c4:7c:87:89:df:88:
47:4f:d1:7a:94:5c:13:46:a8:b7:7d:ee:43:88:49:
9c:9d:16:8c:6a:c0:2f:4b:2a:bd:bd:2a:b8:de:41:
04:ae:17:3e:3b:2d:eb:5b:58:d8:97:48:57:29:04:
d0:df:e4:6e:5c:02:e3:1e:92:01:a5:3e:87:6b:85:
2e:2b:0a:ad:51:eb:07:37:6a:7f:41:e4:d1:d8:f8:
d4:1f:7b:e9:8b:60:98:0b:81:03:9c:77:07:bb:b6:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:D8:51:EA:27:56:8D:68:D5:82:BC:0D:4F:C9:BC:67:1A:A5:67
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:d9:af:e5:8b:26:bc:ca:09:47:f7:04:ce:29:1c:e3:20:3d:
cb:09:8f:de:74:ff:e4:8b:98:49:21:85:7f:f9:07:cc:56:b8:
97:87:8b:13:2c:ea:cb:11:8f:22:a7:b1:5e:af:06:6f:c2:5f:
7a:25:fa:67:29:02:23:e4:4f:b9:b2:96:41:6b:8c:44:9f:6e:
42:db:0f:60:97:a2:40:75:c6:04:9c:ea:0c:42:28:0a:05:16:
d4:1a:a1:a5:8c:cd:48:96:32:dc:9d:bc:f3:71:52:b1:19:e4:
a1:8a:cc:eb:41:f6:5c:32:05:f5:fe:6b:e0:d6:c1:1d:02:8c:
51:e5:d0:4a:35:7d:4b:43:4e:41:26:95:57:45:da:10:c9:b3:
00:f3:34:6f:a3:64:b3:38:f7:ba:60:40:1f:5e:63:6e:c0:28:
4f:0d:54:3f:b5:fa:d3:d8:75:a1:23:f3:23:72:57:ae:98:46:
86:29:65:39:ed:cc:ae:78:b9:97:d3:e9:c8:18:cb:88:3e:fc:
02:f9:df:d9:9c:3d:de:1d:d4:42:b5:a9:9c:c7:af:5e:39:8e:
b4:2a:e1:30:a2:e9:6d:9d:18:9b:9c:5c:76:85:0f:ae:4c:b5:
b6:48:ad:44:43:4f:79:69:64:56:9f:3a:13:2d:dc:01:e2:3d:
4c:80:7b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9kz2aOZvwV1MtXeSP7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYTFmYmEyYWIyY2QxMDExNDhhOTU5ZTdmOGMwOGY3YTQx
YmMzYzUwHhcNMjUwODIzMTAwMTAyWhcNMjUwODI0MTAwMTAyWjAzMTEwLwYDVQQD
Eyg2ZDEyZDg1MWVhMjc1NjhkNjhkNTgyYmMwZDRmYzliYzY3MWFhNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAyRZbaqogWtOJEaTyVSDwmb39kg
g7NcbJgb/MvYGt/pHR1RLimE18dFU7j4pa3m6lUKwLdJ69VcDWm75Ufj9Oyv47Q2
F2fRKGC8/KudSJWVUCby6Z8LsWr6oL1QSvJW7d6EcUWmv1NHwgG3KTAqhQ4EyIqS
ffEM4F3ctFdgMBUxYzb9gLiTmcS2aS7T+HaFmlu93M+pTZBHIihDlmHEfIeJ34hH
T9F6lFwTRqi3fe5DiEmcnRaMasAvSyq9vSq43kEErhc+Oy3rW1jYl0hXKQTQ3+Ru
XALjHpIBpT6Ha4UuKwqtUesHN2p/QeTR2PjUH3vpi2CYC4EDnHcHu7aisQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0S2FHqJ1aNaNWCvA1PybxnGqVnMB8GA1UdIwQY
MBaAFJKh+6KrLNEBFIqVnn+MCPekG8PFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYt
ZGM5YzNhZTdlMzBiLzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYtZGM5YzNhZTdlMzBi
LzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Nmv5Ysm
vMoJR/cEzikc4yA9ywmP3nT/5IuYSSGFf/kHzFa4l4eLEyzqyxGPIqexXq8Gb8Jf
eiX6ZykCI+RPubKWQWuMRJ9uQtsPYJeiQHXGBJzqDEIoCgUW1BqhpYzNSJYy3J28
83FSsRnkoYrM60H2XDIF9f5r4NbBHQKMUeXQSjV9S0NOQSaVV0XaEMmzAPM0b6Nk
szj3umBAH15jbsAoTw1UP7X609h1oSPzI3JXrphGhillOe3Mrni5l9PpyBjLiD78
Avnf2Zw93h3UQrWpnMevXjmOtCrhMKLpbZ0Ym5xcdoUPrky1tkitRENPeWlkVp86
Ey3cAeI9TIB7SA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:34 2025 by rpki-client