
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: GGFzL96wHLVq9qYuTwAcDsy5cvOH622IlR5Qvayi3eM=
Subject key identifier: 67:73:4F:8E:77:36:46:FF:C5:BA:69:23:2D:EF:88:81:28:5E:9D:81
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 01974E573934BD06E0CE30E9D611C8DCAC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 112A
Signing time: Sun 08 Jun 2025 07:00:28 +0000
Manifest this update: Sun 08 Jun 2025 07:00:28 +0000
Manifest next update: Mon 09 Jun 2025 07:00:28 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: JJaZZRJqjGunl9njXxxENLw1VHcWgE9jqjs7YhcXzto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:39:34:bd:06:e0:ce:30:e9:d6:11:c8:dc:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Jun 8 07:00:28 2025 GMT
Not After : Jun 9 07:00:28 2025 GMT
Subject: CN=67734f8e773646ffc5ba69232def8881285e9d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:4e:c2:8f:12:ff:ef:09:fa:55:b7:d8:e6:
34:dd:97:89:f3:1e:cd:79:05:1c:13:52:ad:64:c1:
d9:62:2b:33:09:de:47:41:24:82:35:a2:93:b8:fb:
66:4d:f4:32:4c:ef:5c:ff:5f:2a:5a:c3:ac:85:e5:
db:4d:a6:51:93:c6:f2:9f:e5:39:00:9f:0b:2c:59:
5a:03:7e:b2:88:36:e3:99:3d:e8:ef:dc:53:e6:a3:
f1:3d:19:7f:39:e3:e1:da:77:0e:cd:f4:c8:e5:42:
b3:87:02:98:de:da:43:1e:cd:78:62:12:8f:02:44:
06:28:80:d7:23:d3:d6:90:b0:28:30:0c:9d:cb:f0:
db:d7:71:24:71:63:bc:9d:b7:bc:d9:20:7b:0d:09:
09:75:1b:e8:40:46:89:34:4b:79:aa:c1:07:9d:5e:
ca:61:59:ae:04:93:e3:df:ef:50:04:74:08:f3:ba:
83:60:41:fa:e6:b1:4d:ca:00:50:51:80:01:d1:e1:
e1:0b:6c:8a:b0:d7:a6:7d:74:fa:25:58:bc:01:25:
50:53:93:de:61:51:b7:f1:48:f0:b2:88:f8:39:c3:
3e:bd:9a:8c:07:9d:be:49:dc:10:11:47:67:71:82:
c7:e7:e8:a8:22:4c:e4:76:84:93:69:17:07:b1:ba:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:4F:8E:77:36:46:FF:C5:BA:69:23:2D:EF:88:81:28:5E:9D:81
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:89:6f:29:66:78:c4:17:b3:dc:f2:a9:b9:3e:e8:7a:40:fd:
72:2b:af:91:66:de:14:a4:95:13:99:e3:d5:f1:b1:fb:36:4f:
f6:b4:a5:2f:8c:c2:6f:b7:86:20:94:12:91:b4:27:6f:0e:59:
fa:72:69:72:bc:39:6e:d7:d9:68:ed:db:d5:d9:50:b8:4d:14:
10:b9:05:36:16:09:0d:5f:04:9f:7c:c9:de:f3:c4:cd:b7:f9:
5f:82:6f:32:e1:65:1d:52:41:36:b6:01:4c:2c:87:50:6d:43:
e3:e0:40:6c:aa:37:a3:ba:94:6c:75:7b:f4:64:0b:80:7a:40:
65:28:d6:5e:f6:af:a8:06:71:b2:c4:58:05:c0:2d:ef:ed:80:
d0:bb:2f:6a:c1:95:18:f9:cc:5b:4b:f7:b0:4e:c7:d7:9f:ba:
ad:75:9b:74:4e:36:22:f9:ec:83:42:83:1d:2b:63:15:48:ac:
41:94:52:e5:ad:53:58:14:7b:69:da:3d:fe:67:73:8c:ea:9a:
6e:dc:c6:6d:f2:03:70:47:e4:92:22:d2:ec:74:28:55:c9:6f:
87:b0:56:c7:de:5a:63:95:56:4b:23:5b:14:d0:ee:2c:0a:68:
af:7e:18:74:51:3b:92:06:07:53:a4:3f:94:0b:39:18:7a:db:
3c:7d:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:44:40 2025 by rpki-client