
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: oW0YrMTXN8wV6xj0X0eeKzY2pEW9Djedu7If0ZrIwFE=
Subject key identifier: 75:0D:98:53:65:AA:5C:B5:FC:B0:28:9C:93:D3:84:61:89:77:F8:2F
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 0197C425AF4FA1B7CF4A2509463AF343803B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 1167
Signing time: Tue 01 Jul 2025 04:01:33 +0000
Manifest this update: Tue 01 Jul 2025 04:01:33 +0000
Manifest next update: Wed 02 Jul 2025 04:01:33 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: nHkMU645guYldTM2tHDmzuOQH+UoP4czrsHqklIqT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:af:4f:a1:b7:cf:4a:25:09:46:3a:f3:43:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Jul 1 04:01:33 2025 GMT
Not After : Jul 2 04:01:33 2025 GMT
Subject: CN=750d985365aa5cb5fcb0289c93d384618977f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:6e:2a:15:46:05:e7:27:8d:26:a8:4e:1c:
5a:42:ca:80:95:98:53:0a:fd:39:8b:9d:ae:6a:fe:
a3:be:68:5a:c9:30:96:40:27:98:be:91:ae:65:b0:
21:99:8d:29:20:c3:af:b8:8a:bd:ff:44:1c:4c:44:
6b:b2:8f:c6:31:b4:c3:ea:ff:38:17:4f:a3:e5:ca:
80:af:12:95:2f:fc:05:12:1e:bb:71:e9:a1:22:ae:
e2:f5:09:9a:cf:b7:51:d8:1a:94:73:85:d8:b6:49:
2f:31:3c:cd:34:01:29:05:2c:9b:17:2a:0e:a3:26:
f6:d7:d4:4b:8e:48:9e:4e:4f:c3:d5:4a:99:79:1d:
87:5d:c0:cd:0a:d2:3f:28:84:6d:70:85:51:1a:c8:
dc:92:6e:f8:81:80:56:6a:e6:f7:16:43:a3:a7:8a:
a1:b6:25:76:04:d3:f8:71:07:3c:ef:ec:36:cc:bb:
8d:ca:45:52:c6:80:3d:30:61:d6:9f:34:27:7e:a4:
81:84:48:a1:1e:50:5d:94:13:35:86:c5:62:a0:20:
fc:26:e8:63:73:b6:9b:e9:1b:0d:11:7b:50:fa:b6:
17:d4:08:34:7a:ea:75:3c:c3:75:cc:67:f1:e1:4c:
a8:7d:b1:7f:e9:0c:08:cc:5c:47:08:19:66:e9:8a:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:98:53:65:AA:5C:B5:FC:B0:28:9C:93:D3:84:61:89:77:F8:2F
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f6:a6:bb:9d:b7:fa:6a:84:20:d5:a5:37:ad:e8:cc:1f:47:
80:37:bd:5f:17:4e:70:9c:d8:f0:85:53:89:73:23:59:6c:8b:
ea:0d:e2:65:84:b3:17:fa:77:ae:13:b5:e5:06:8a:53:9d:f1:
b9:f3:0a:75:d7:d3:05:ed:cc:68:89:11:ea:ba:4d:67:8e:a0:
81:48:c3:a2:fd:97:46:2a:ec:8b:2f:9f:bb:66:6d:85:1a:af:
26:4e:69:ec:82:ef:38:8c:ef:15:8d:e2:54:bc:97:78:d7:e6:
12:90:b0:44:c9:cc:a7:91:34:85:94:81:b4:04:56:d4:d3:91:
4b:83:35:03:17:ff:34:a8:99:1c:00:c0:54:8c:7a:94:f3:f3:
59:47:cd:0b:ec:5e:bc:b3:32:52:08:25:89:dd:51:2f:76:00:
cc:4a:8d:2a:6f:07:74:16:f0:b3:e3:94:68:9d:5a:66:3f:b5:
de:bf:c7:35:9c:c3:85:80:a6:d2:f8:1a:11:58:ff:82:cc:9c:
84:2d:cf:3a:39:93:76:a5:d1:ba:d6:6d:64:aa:2f:1a:7e:cf:
f3:4f:ce:b8:73:39:d7:60:c0:d9:23:f2:f5:d1:48:b0:e9:80:
1e:4e:9f:0b:3b:5a:ef:ca:21:25:83:6d:0e:20:1f:c6:6a:b4:
df:f0:1f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJa9PobfPSiUJRjrzQ4A7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYTFmYmEyYWIyY2QxMDExNDhhOTU5ZTdmOGMwOGY3YTQx
YmMzYzUwHhcNMjUwNzAxMDQwMTMzWhcNMjUwNzAyMDQwMTMzWjAzMTEwLwYDVQQD
Eyg3NTBkOTg1MzY1YWE1Y2I1ZmNiMDI4OWM5M2QzODQ2MTg5NzdmODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvChuKhVGBecnjSaoThxaQsqAlZhT
Cv05i52uav6jvmhayTCWQCeYvpGuZbAhmY0pIMOvuIq9/0QcTERrso/GMbTD6v84
F0+j5cqArxKVL/wFEh67cemhIq7i9Qmaz7dR2BqUc4XYtkkvMTzNNAEpBSybFyoO
oyb219RLjkieTk/D1UqZeR2HXcDNCtI/KIRtcIVRGsjckm74gYBWaub3FkOjp4qh
tiV2BNP4cQc87+w2zLuNykVSxoA9MGHWnzQnfqSBhEihHlBdlBM1hsVioCD8Juhj
c7ab6RsNEXtQ+rYX1Ag0eup1PMN1zGfx4UyofbF/6QwIzFxHCBlm6YoV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUNmFNlqly1/LAonJPThGGJd/gvMB8GA1UdIwQY
MBaAFJKh+6KrLNEBFIqVnn+MCPekG8PFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYt
ZGM5YzNhZTdlMzBiLzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYtZGM5YzNhZTdlMzBi
LzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Pamu523
+mqEINWlN63ozB9HgDe9XxdOcJzY8IVTiXMjWWyL6g3iZYSzF/p3rhO15QaKU53x
ufMKddfTBe3MaIkR6rpNZ46ggUjDov2XRirsiy+fu2ZthRqvJk5p7ILvOIzvFY3i
VLyXeNfmEpCwRMnMp5E0hZSBtARW1NORS4M1Axf/NKiZHADAVIx6lPPzWUfNC+xe
vLMyUgglid1RL3YAzEqNKm8HdBbws+OUaJ1aZj+13r/HNZzDhYCm0vgaEVj/gsyc
hC3POjmTdqXRutZtZKovGn7P80/OuHM512DA2SPy9dFIsOmAHk6fCzta78ohJYNt
DiAfxmq03/Af/A==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:34:42 2025 by rpki-client