Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: 29zjsxO45dklHK2uwSEiQv8TiwR2YYixqkxkamwMjUI=
Subject key identifier: DC:E5:91:A9:D1:B5:7B:62:6D:BE:CE:AC:55:BA:A4:97:B6:E1:63:E2
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 0199FDD8CE0BE3AC7A59572FA6031692BA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 128E
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: NoA8zlstt/aOqh75Q1bSFBKI398Xh66PaMgTXscod/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ce:0b:e3:ac:7a:59:57:2f:a6:03:16:92:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=dce591a9d1b57b626dbeceac55baa497b6e163e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:52:25:2c:5d:15:ea:f1:48:a3:27:59:a5:
6b:fa:af:4a:f5:e7:d9:ab:04:e6:d5:0c:29:21:7d:
c2:e9:b0:08:e1:7f:1f:ab:62:68:9e:56:00:1d:65:
c8:cc:b5:67:33:2a:63:76:11:70:1a:b3:d5:4f:a2:
ec:bd:83:4c:b6:4e:0b:2e:aa:55:35:df:a8:40:2d:
da:27:e4:ac:5a:a6:0e:2f:7c:2e:07:f4:af:a8:10:
6e:46:75:d6:78:9e:c5:68:5b:90:7b:b1:db:45:99:
22:58:35:20:b8:c4:5b:b8:d0:6d:3e:10:d6:0f:e0:
a0:b7:92:25:1f:00:d3:3e:e8:5c:cd:7f:dc:ba:9d:
b1:b5:17:af:e0:66:42:de:cf:94:cb:7e:b5:f5:ed:
79:d4:9e:34:bf:c5:a3:05:0b:09:b8:e2:8d:68:eb:
77:4b:c9:ad:00:a2:d7:ef:69:96:fd:c0:73:ff:1a:
4a:cc:6c:ba:98:92:09:e4:d8:7a:d9:34:14:27:53:
db:0a:ae:40:ac:a6:da:fa:3f:69:4e:94:16:a4:46:
4e:b1:61:c5:c3:dc:6e:66:83:2e:f7:ea:07:d1:ce:
d0:dd:c6:4c:cb:fe:12:71:43:ec:31:5d:f3:bd:56:
45:5f:47:5a:be:c6:69:e8:19:b4:58:b3:4b:b9:2c:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:91:A9:D1:B5:7B:62:6D:BE:CE:AC:55:BA:A4:97:B6:E1:63:E2
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:86:b4:68:bb:36:57:a5:be:e6:dc:fc:69:37:98:6f:fe:
42:55:fa:15:eb:f9:da:31:b5:7e:65:0e:82:0a:7d:60:41:64:
06:00:ea:4d:ed:84:aa:d8:ef:26:b9:d5:4f:0c:7e:80:9e:0c:
40:84:16:02:13:c1:62:b2:73:3b:65:02:70:94:4d:de:f6:ba:
55:70:32:3f:1e:1b:21:0e:82:b8:2b:d5:82:e1:10:16:a4:d4:
c6:e7:06:10:87:1e:b6:17:58:1d:eb:12:30:9b:e2:dd:48:87:
48:cd:cc:7e:74:19:f4:8a:7c:f4:bc:9f:53:d8:e1:1d:02:b5:
c1:52:5d:83:32:63:1d:05:40:09:33:b1:e3:25:4e:84:2e:c3:
05:1a:e4:a4:32:8e:48:65:86:a3:48:11:d7:3f:20:b0:49:f2:
96:d7:83:bc:dc:90:c4:a8:a7:4e:b8:7b:7a:57:d7:d6:b5:cc:
98:e4:f3:b4:64:c3:93:1b:93:9a:eb:53:84:2f:fc:73:32:07:
4d:70:40:df:6e:b6:a0:02:9f:71:2b:ea:95:41:e2:91:69:62:
e4:cf:4a:e0:6b:08:8f:b0:c4:d4:12:1d:21:46:71:78:90:47:
e7:4b:b6:78:72:bd:fa:58:b1:a9:ef:a3:fa:8b:a9:82:30:c2:
50:d3:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:06 2025 by rpki-client