Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: HAMlAvQWlLRQkPZ4qCyaUxv8xmFVDDOib978r0nhAmM=
Subject key identifier: 39:A7:AD:81:20:F2:CC:E0:8F:B4:D2:D4:A1:F2:4A:45:19:66:87:C5
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 019A2C3130D39DC98DEC2C3B09773649AE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 12A6
Signing time: Tue 28 Oct 2025 19:00:12 +0000
Manifest this update: Tue 28 Oct 2025 19:00:12 +0000
Manifest next update: Wed 29 Oct 2025 19:00:12 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: gST6ewzxEE8sHPijPyz9JDKZciKp3B/QAzHGNpBrdPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:30:d3:9d:c9:8d:ec:2c:3b:09:77:36:49:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Oct 28 19:00:12 2025 GMT
Not After : Oct 29 19:00:12 2025 GMT
Subject: CN=39a7ad8120f2cce08fb4d2d4a1f24a45196687c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:0a:9a:80:ca:64:9e:c3:db:2d:8a:7c:40:
37:3f:ab:66:6d:6c:e3:1d:19:55:ed:6c:4a:88:49:
6f:69:b0:93:c9:d8:33:4e:a9:4f:ae:86:93:27:13:
2b:8b:5a:39:61:d6:35:98:9c:91:67:be:fe:f5:db:
03:67:99:ed:cf:62:16:47:8b:6a:c9:4c:e1:e2:da:
5c:11:f2:2a:36:46:20:27:8d:47:6b:0d:68:3d:49:
42:3e:a3:6f:50:06:ee:9d:86:95:cd:7a:1c:c5:99:
c6:6e:44:db:46:ab:ba:ee:cd:67:dd:b0:74:20:60:
f4:f0:ac:ac:9b:9c:34:d8:74:e2:86:5a:81:d1:0e:
96:2d:f5:ac:27:19:9e:40:aa:38:2b:f5:16:25:97:
c9:19:a7:d5:2d:cf:9d:58:de:df:34:5e:90:25:1b:
fc:61:06:89:45:53:40:c4:f5:bc:56:4b:68:a0:f0:
16:05:61:29:28:c5:38:47:0e:55:0c:6d:1c:7a:69:
09:88:c0:d9:b5:eb:ac:cd:dc:9a:15:f6:30:d5:1b:
77:01:8a:e4:34:9a:78:49:ad:ff:d7:91:07:b6:ae:
d3:ab:9d:8d:b1:ef:c4:c0:5d:f4:51:7c:6b:3a:53:
e4:0f:54:de:e5:7f:6c:98:d4:21:59:77:ef:4b:9f:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:AD:81:20:F2:CC:E0:8F:B4:D2:D4:A1:F2:4A:45:19:66:87:C5
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a8:8e:e0:aa:1c:54:c0:77:65:c6:92:45:4f:86:72:e3:32:
26:1a:08:45:10:3b:fa:ed:52:57:21:bf:7b:eb:ed:37:19:22:
1c:2a:e4:64:03:9e:2a:3e:62:58:8b:c3:44:12:d1:cf:4e:3d:
c2:1f:5f:1b:cc:7c:2d:7f:85:e3:31:79:52:fe:7a:cf:6d:b6:
69:16:22:0d:97:69:08:c0:cd:57:c2:30:7f:36:af:2d:89:ed:
fd:80:33:1b:d8:8f:f9:bb:07:94:d1:39:8c:cd:62:c8:a9:ca:
ed:c9:74:f2:5d:6e:e1:5b:87:60:63:bc:5c:7c:fa:07:8d:16:
f7:f0:bc:51:3e:eb:a6:a8:ce:83:75:bf:1c:2f:99:c6:5d:a1:
49:8c:8b:4f:c9:51:a1:97:ea:73:e5:d1:98:cc:15:58:c3:0f:
3b:9a:37:3d:f0:09:c2:fd:36:48:ff:1e:cc:33:de:3d:aa:67:
66:28:b1:af:43:7c:2e:4b:39:61:d9:a3:c8:48:8d:2e:31:f0:
7e:61:de:98:c3:c5:98:05:a8:80:0f:5e:33:a0:ee:ca:38:ac:
02:af:39:09:1b:7c:f1:7d:2d:8e:fb:54:62:3f:90:52:42:c2:
24:c7:79:26:ba:0d:00:39:43:16:68:e9:70:b2:a8:0e:42:0e:
11:0c:7f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosMTDTncmN7Cw7CXc2Sa6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYTFmYmEyYWIyY2QxMDExNDhhOTU5ZTdmOGMwOGY3YTQx
YmMzYzUwHhcNMjUxMDI4MTkwMDEyWhcNMjUxMDI5MTkwMDEyWjAzMTEwLwYDVQQD
EygzOWE3YWQ4MTIwZjJjY2UwOGZiNGQyZDRhMWYyNGE0NTE5NjY4N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv8KmoDKZJ7D2y2KfEA3P6tmbWzj
HRlV7WxKiElvabCTydgzTqlProaTJxMri1o5YdY1mJyRZ77+9dsDZ5ntz2IWR4tq
yUzh4tpcEfIqNkYgJ41Haw1oPUlCPqNvUAbunYaVzXocxZnGbkTbRqu67s1n3bB0
IGD08Kysm5w02HTihlqB0Q6WLfWsJxmeQKo4K/UWJZfJGafVLc+dWN7fNF6QJRv8
YQaJRVNAxPW8VktooPAWBWEpKMU4Rw5VDG0cemkJiMDZteuszdyaFfYw1Rt3AYrk
NJp4Sa3/15EHtq7Tq52Nse/EwF30UXxrOlPkD1Te5X9smNQhWXfvS59/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmnrYEg8szgj7TS1KHySkUZZofFMB8GA1UdIwQY
MBaAFJKh+6KrLNEBFIqVnn+MCPekG8PFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYt
ZGM5YzNhZTdlMzBiLzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZDgyNjgtZjI5Zi00M2I1LTlhNWYtZGM5YzNhZTdlMzBi
LzEva3FIN29xc3MwUUVVaXBXZWY0d0k5NlFidzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyaiO4Koc
VMB3ZcaSRU+GcuMyJhoIRRA7+u1SVyG/e+vtNxkiHCrkZAOeKj5iWIvDRBLRz049
wh9fG8x8LX+F4zF5Uv56z222aRYiDZdpCMDNV8IwfzavLYnt/YAzG9iP+bsHlNE5
jM1iyKnK7cl08l1u4VuHYGO8XHz6B40W9/C8UT7rpqjOg3W/HC+Zxl2hSYyLT8lR
oZfqc+XRmMwVWMMPO5o3PfAJwv02SP8ezDPePapnZiixr0N8Lks5YdmjyEiNLjHw
fmHemMPFmAWogA9eM6DuyjisAq85CRt88X0tjvtUYj+QUkLCJMd5JroNADlDFmjp
cLKoDkIOEQx/aA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 23:34:57 2025 by rpki-client