Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: xR0RXkmAhDCuYu1KlmTEACK6s40vf2lvjVF6PGZDbq8=
Subject key identifier: 8D:8C:5A:D8:4D:58:9D:2D:32:96:68:80:E9:AE:A2:E0:D2:7D:34:91
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 01964D7EED9EF5615D658DCFA98EA02C2E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 10A5
Signing time: Sat 19 Apr 2025 10:01:26 +0000
Manifest this update: Sat 19 Apr 2025 10:01:26 +0000
Manifest next update: Sun 20 Apr 2025 10:01:26 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: 7VcuW4ChhHZPUjFhX5pBqbGkd1HOzIgqkSRfe1kaSrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:ed:9e:f5:61:5d:65:8d:cf:a9:8e:a0:2c:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Apr 19 10:01:26 2025 GMT
Not After : Apr 20 10:01:26 2025 GMT
Subject: CN=8d8c5ad84d589d2d32966880e9aea2e0d27d3491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:8c:e4:e1:2b:94:35:22:3c:dc:b9:8a:78:
a1:df:33:7c:d3:ed:7a:61:00:2e:19:a6:7e:32:cb:
7d:e1:65:bb:14:c6:96:54:3d:3a:de:fa:54:ae:6a:
64:a8:d1:e6:f2:17:9e:fe:3f:b6:fe:e6:ee:e8:c8:
af:bd:dd:f5:36:3a:7c:22:cf:2f:93:1e:d5:30:4a:
db:6d:dc:72:96:f7:ae:1b:70:74:80:08:3b:28:5f:
75:c8:ec:21:5a:ca:ad:b2:db:7c:6f:f2:31:8a:cc:
a7:fe:c2:fa:4d:54:3e:23:54:1d:b9:97:bc:35:f7:
6a:30:d6:56:4d:59:a7:30:51:8e:ce:9f:15:1a:57:
79:d0:bd:75:81:08:05:c5:28:3e:0d:00:48:3f:03:
e7:40:95:32:f2:a4:19:22:8d:2c:86:35:5a:f5:66:
84:6b:f6:6b:1a:7d:a7:03:23:54:81:8b:a6:b6:b9:
ce:63:32:cd:2f:30:cf:d5:46:ac:15:fc:d6:fc:cd:
68:53:5c:99:65:85:23:75:6b:2b:da:d8:dd:a8:b0:
12:90:fb:97:8a:6b:9b:9a:5e:f7:a8:02:62:bc:a9:
56:61:1b:db:be:f4:a1:39:00:c5:cf:f1:6a:c2:43:
5e:6e:ad:64:68:2c:37:58:b9:ed:0e:1e:91:2b:56:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:5A:D8:4D:58:9D:2D:32:96:68:80:E9:AE:A2:E0:D2:7D:34:91
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:ef:33:b4:36:ed:ff:7f:45:5c:c0:bd:1e:c0:28:fc:9c:
a8:32:70:23:b6:d7:41:e4:66:eb:14:30:a5:e6:90:6b:4a:60:
1b:79:96:c6:d6:da:38:a8:c9:78:d1:51:4f:54:f4:94:b9:bf:
70:be:bd:63:f8:ad:be:14:18:50:c9:db:6c:ec:55:60:f8:21:
0f:9e:ab:b1:12:0d:34:9a:b8:92:57:98:9e:af:c1:3f:bb:dc:
63:38:de:d5:e7:7d:74:28:75:16:77:35:f3:01:c6:7a:8f:b0:
92:56:73:e5:0a:2f:30:15:bd:a2:c0:35:ed:04:57:fa:c0:0e:
0b:5a:4f:12:cd:ba:ac:51:b1:dd:bf:80:bf:ca:4c:99:03:ed:
6b:cf:60:e0:cc:65:10:dc:04:57:87:ea:5b:96:ba:58:0f:9d:
2f:53:61:b3:76:f4:b3:bd:13:9d:78:b3:e9:bc:53:07:ae:f3:
e6:b6:62:a2:e8:32:12:66:ed:b2:a0:57:98:65:29:15:94:64:
a5:ca:fc:b1:56:82:59:0d:b0:77:f3:ec:ad:f0:a7:a8:bc:7a:
49:a1:06:5e:5e:f5:a9:98:e3:97:d1:6d:f3:1e:af:1a:70:03:
6e:29:43:42:25:56:1a:9c:37:e7:03:0a:a2:d2:43:df:1d:4d:
91:5a:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:37:47 2025 by rpki-client