Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: s4CFN/RtULodS3wwtwPX7+Cm5ERZvVfW3LNkkyvhKaI=
Subject key identifier: 86:C4:B4:06:0E:74:C8:59:22:FD:14:69:00:85:A3:9C:42:43:AE:88
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 0196C1CB4F367D5EBBC63866F1441905AED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 14C7
Signing time: Mon 12 May 2025 00:00:48 +0000
Manifest this update: Mon 12 May 2025 00:00:48 +0000
Manifest next update: Tue 13 May 2025 00:00:48 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: HLW7/PJis0JEKgzNhtN3WLbJrd2Jb06hgpa2DUTe00g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:4f:36:7d:5e:bb:c6:38:66:f1:44:19:05:ae:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: May 12 00:00:48 2025 GMT
Not After : May 13 00:00:48 2025 GMT
Subject: CN=86c4b4060e74c85922fd14690085a39c4243ae88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:4f:15:13:22:ef:bd:4d:08:62:4f:37:cd:
41:00:ba:3f:cb:98:33:6b:c9:35:e3:b8:36:0d:67:
3a:12:93:45:cc:39:62:3b:e6:45:12:40:6a:a5:46:
42:60:4e:a3:91:6a:de:be:ac:3d:3c:ee:49:35:12:
c7:2c:3f:fc:05:b0:61:7a:af:33:8c:a2:ad:54:77:
5d:12:67:d2:8a:69:3e:33:30:09:15:93:14:2b:f3:
50:b4:cf:e1:79:a7:24:10:df:b2:39:15:9b:d2:65:
17:ae:78:ec:e3:ff:9d:53:5d:09:ef:c4:05:c3:cc:
13:f3:c9:cc:40:6a:2b:06:1e:10:67:4b:34:84:e2:
70:69:99:62:6d:97:4f:8a:8d:72:b5:57:1c:9b:48:
93:a9:55:02:c7:44:1a:a4:98:18:9e:cd:f2:7c:d2:
1e:31:6c:c7:ec:39:51:ea:9d:2d:d8:bb:57:3c:24:
6b:f3:86:73:56:bd:ae:6d:93:b4:b4:b7:f7:69:f4:
99:23:36:30:42:09:5b:ed:df:b7:3f:41:00:5f:de:
16:5d:6d:74:b6:db:22:80:f4:da:a0:53:4e:f6:6b:
30:d3:58:51:71:79:a8:35:7a:ff:61:65:d6:bf:8b:
d3:b3:ac:32:98:e4:43:2d:d6:95:bc:be:e6:42:8d:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:B4:06:0E:74:C8:59:22:FD:14:69:00:85:A3:9C:42:43:AE:88
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:71:5c:57:ae:02:2b:cc:83:0d:ce:af:56:c9:28:78:3f:25:
67:dd:74:a2:b7:f2:6d:4b:f8:39:bf:35:64:9f:f8:02:85:af:
b2:f9:91:dc:7b:d6:eb:fa:9c:9c:65:21:b8:f2:01:52:50:3b:
92:56:0a:e2:1a:e5:1d:6f:c0:73:0f:19:b6:dc:26:5f:70:e3:
89:8a:68:ca:ba:8e:fe:44:4f:06:db:10:b5:76:30:99:ce:c4:
53:32:19:b4:2d:9f:76:d7:8b:a0:d4:f1:0e:e8:dd:05:ef:0a:
0e:37:da:d6:d2:ef:d7:ef:9d:99:11:c1:e1:4a:3c:ee:cf:ec:
22:96:5d:26:be:00:39:1f:6e:45:84:e5:51:fd:81:ea:e5:28:
72:94:6a:79:f7:26:0d:dd:7a:d9:b1:1b:ec:e6:e3:71:27:ad:
a8:c9:1a:6b:35:9c:89:05:1f:b0:a8:0b:28:2b:0b:9f:0a:cb:
0a:1b:f3:62:5a:46:51:94:72:0d:1a:2f:99:86:a0:93:bb:18:
a3:e4:91:a0:a5:97:ad:56:5f:ea:a5:cf:4b:64:89:24:d1:57:
28:ac:b8:5c:55:08:35:34:d3:63:62:2a:99:01:a2:de:db:22:
56:21:f2:15:f8:eb:59:6f:d4:5e:1a:1d:16:2f:ed:4c:f4:fa:
c4:96:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:38:59 2025 by rpki-client