Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: ve4YpdFmRCHF6u84LJ23O7//Md4JR+K7KwH1uLkhRyk=
Subject key identifier: 8A:70:B2:EC:56:00:F7:4E:2A:2E:48:F1:C9:1E:31:3C:A6:6A:5B:BD
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 0198D6CDA57A4D9468151F5910A2BAD52BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: +XqSdgPDlUvYoZofYklVrigR1WPhIfOwGtWEO8UDgAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a5:7a:4d:94:68:15:1f:59:10:a2:ba:d5:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=8a70b2ec5600f74e2a2e48f1c91e313ca66a5bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:38:f3:33:5b:22:d6:a9:1b:e2:c2:5f:5d:
51:0e:52:7c:aa:72:47:35:d5:a0:07:ee:50:a1:25:
02:b7:62:e0:3f:7a:1c:45:66:66:87:a7:59:2f:ab:
1f:ab:42:d6:a4:27:b8:dd:38:bf:3b:ce:58:c6:6a:
81:3f:b4:05:f9:f6:ba:c7:fd:b9:88:ee:d4:c0:13:
ea:2c:8b:6e:9f:88:33:0a:ac:a4:93:2f:16:fd:64:
dc:3d:c0:1d:d2:38:02:28:8d:f6:79:8b:c2:e9:34:
e6:dd:1c:07:21:63:10:2b:e8:af:11:88:76:3b:4f:
12:b3:a9:50:9f:74:82:57:3d:37:00:85:ef:f9:51:
46:19:02:f8:38:37:35:46:30:34:b0:73:27:62:2d:
ac:99:90:fe:25:72:ec:a8:27:80:1d:3d:1e:9d:5b:
de:38:73:e9:0e:21:57:53:c3:14:a2:5f:86:a8:b5:
2d:ed:61:a8:b3:cf:1a:29:bf:38:04:1e:06:c9:49:
0b:e4:5d:06:0b:a8:66:4a:d1:ab:a9:e3:0e:c8:37:
0c:4b:e2:d6:6e:e3:88:45:53:bc:06:c9:9a:30:78:
e0:f1:c0:fd:d7:e9:ba:a7:1d:88:80:a3:40:a9:db:
1f:9c:c3:e4:39:7e:7f:27:3e:d1:a1:1e:b3:5e:62:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:B2:EC:56:00:F7:4E:2A:2E:48:F1:C9:1E:31:3C:A6:6A:5B:BD
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:32:ae:fb:bd:2a:a9:74:60:85:ae:c5:19:7f:97:8f:5f:
5a:02:30:84:43:c4:2b:b3:11:48:fa:be:71:bc:01:c7:e9:de:
0c:5f:ae:2a:82:18:6c:0a:7c:2a:39:d7:e6:48:a5:0c:94:10:
ed:1e:ce:0c:1e:cf:b2:d9:ef:17:44:50:36:16:38:cf:b1:c9:
fe:0e:e3:32:4b:74:3d:bf:42:5e:a1:d2:07:b8:7c:7c:97:8b:
26:8f:fd:e8:7c:15:c7:5e:85:2e:8f:33:f5:15:d0:21:52:c5:
23:23:ff:94:1c:a5:a3:41:3f:c7:03:63:e5:09:d4:e2:ca:b6:
d6:62:12:00:42:b3:fb:09:9d:61:b5:df:6a:40:ff:40:4d:31:
db:27:0c:fb:ed:f4:19:60:31:02:ad:e3:5f:48:c2:15:38:d1:
b5:a9:bb:e7:e1:6c:e8:f4:9d:c8:3f:6a:cf:46:91:62:64:32:
1c:cd:15:df:65:09:c3:73:2e:be:86:82:eb:f2:6a:2f:79:05:
4a:99:92:68:a7:a2:c6:a4:fa:ee:3a:39:6e:ff:8e:d5:9a:9f:
ad:a2:08:cd:5b:54:28:f2:09:e8:7a:46:c2:3a:11:0e:34:9f:
84:c6:af:2b:12:75:b0:75:2a:e7:92:47:a6:78:87:21:1a:f2:
66:c2:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:42 2025 by rpki-client