
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: LajT2f5vSqqxbhvT2CV+xWG1dy0HmpVn5TCtq1nHXWg=
Subject key identifier: 2F:5F:FF:AA:D2:62:CD:79:78:53:3F:1F:DC:F7:9E:E7:71:2A:7D:62
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 0199FC213943D94237FBF955CC9003B2CBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: amQj88mWDXn1tHVd6YdBapRqMXDw21b9vAqhvD1CEtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:39:43:d9:42:37:fb:f9:55:cc:90:03:b2:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=2f5fffaad262cd7978533f1fdcf79ee7712a7d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:18:0f:72:85:8b:1e:35:9b:de:17:63:90:
5a:88:73:2c:a1:19:fd:f7:30:5c:b1:f4:5b:99:18:
de:4b:58:16:4c:7a:7b:f2:d3:6e:0e:56:94:7b:25:
d9:69:93:8f:ea:ca:ca:35:3e:53:f8:0d:2a:ea:e4:
a1:f2:ff:84:75:73:e9:27:48:20:1a:0a:b8:3c:40:
db:af:c2:ca:3b:dc:12:63:d6:67:0e:05:d0:9b:14:
45:33:b4:ae:4c:d0:b3:9b:99:9b:f0:19:94:af:84:
5e:24:6f:a1:d0:d1:46:6b:e2:5a:1b:83:3c:05:5c:
90:5b:d9:1b:9f:39:1f:f2:96:db:58:1b:b2:bf:c5:
08:db:8c:60:4b:d9:51:92:89:b2:27:f3:dc:97:e7:
45:8d:48:de:65:b7:9d:4c:6e:d5:8c:4f:74:c7:1e:
0b:f2:e4:e6:f1:ab:4e:04:40:bb:cf:fa:a3:1c:b5:
6d:3f:5a:3c:4e:91:0f:58:03:d5:d5:47:88:25:3b:
28:21:15:67:6c:7c:24:4d:2a:36:44:01:52:55:fc:
35:aa:64:8c:7d:9f:5b:9b:dd:6d:4a:d1:9b:ad:05:
d3:3e:4a:ec:3d:e7:b3:d2:f1:f5:5d:38:3f:83:bb:
2d:a1:a3:0a:e2:5d:1e:34:d7:da:48:22:03:c3:47:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:FF:AA:D2:62:CD:79:78:53:3F:1F:DC:F7:9E:E7:71:2A:7D:62
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:a5:f5:08:5b:ef:c6:91:62:01:c8:70:05:8b:ad:98:4f:
ae:70:18:8a:dd:d2:69:4c:1a:5c:9e:f9:44:06:7d:d0:2f:86:
5d:d1:dc:72:1c:08:ef:68:fd:a5:80:aa:ab:af:47:8e:e1:5f:
ee:19:62:99:df:24:8e:37:d8:0f:3e:f9:fc:65:fd:8f:ea:f1:
74:0c:c0:aa:f5:8c:8f:a6:5a:b2:19:83:5c:47:1c:40:b2:9a:
cb:b5:ef:98:f9:6c:9f:dc:a1:86:08:83:79:d1:7c:4e:be:e0:
8d:23:c3:85:2b:57:65:62:13:4e:b2:97:14:b3:1e:44:3b:00:
e3:42:4c:a9:51:2f:a2:9e:b9:bd:8c:e6:59:dd:8e:f6:9e:d6:
1e:5d:5a:94:8c:16:c0:af:9d:3f:9c:fd:42:eb:e5:42:34:7f:
60:b3:42:89:11:c4:ab:21:f1:5e:84:d3:be:3f:ae:db:96:f1:
6c:64:3a:33:22:a9:51:64:46:89:56:31:a2:63:18:1b:6e:9d:
cd:7d:44:0d:fa:6a:64:0c:48:71:c0:a2:fa:dc:cd:31:78:bd:
bc:2a:4e:64:9e:fc:19:e9:e8:80:f6:a1:0a:1e:9f:92:78:d1:
d3:c6:7e:a1:3c:31:65:7f:58:70:be:5a:d9:4d:a4:fa:2b:12:
bd:7f:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:07 2025 by rpki-client