Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: UeZSP+TEkCZSor+cK9h4srm0KT5jYN0/vw62AwLLfVM=
Subject key identifier: 50:87:24:0E:D4:D2:91:BC:EA:1C:79:A5:D6:79:C3:B3:EA:0B:CE:F9
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 0197B8FD25D93BD4AC36345AEA053C0DB153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 1547
Signing time: Sun 29 Jun 2025 00:01:27 +0000
Manifest this update: Sun 29 Jun 2025 00:01:27 +0000
Manifest next update: Mon 30 Jun 2025 00:01:27 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: EmkDFESmwX1oqceVR4sx36RnyK/uKpv4smpWra5uPYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:25:d9:3b:d4:ac:36:34:5a:ea:05:3c:0d:b1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Jun 29 00:01:27 2025 GMT
Not After : Jun 30 00:01:27 2025 GMT
Subject: CN=5087240ed4d291bcea1c79a5d679c3b3ea0bcef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:29:d6:7f:1a:41:97:2c:5e:69:dc:87:07:
ab:e9:33:57:02:3f:54:5f:80:6e:a4:8c:26:47:43:
ec:c3:a8:36:07:b1:83:f8:0e:2c:40:d6:ed:a8:88:
e6:88:fa:bf:6d:ba:72:3e:bd:39:75:13:1f:3e:8b:
77:5d:cb:d6:43:6c:9d:09:01:e9:ef:4f:58:b8:18:
8b:f1:9b:3d:a6:4a:8f:5d:10:95:31:de:39:db:4f:
55:04:06:00:74:7b:c4:04:f1:29:1e:28:bb:76:cc:
3d:80:f6:4d:2a:86:7a:1c:89:b4:e7:40:bf:78:53:
70:05:2b:b1:2f:ce:fa:7e:9a:48:cc:08:2b:76:ca:
62:2a:33:73:22:61:6f:6b:65:8e:82:52:3c:89:24:
a6:1f:71:11:98:1c:5c:56:f2:ce:0e:91:65:3b:eb:
c7:a6:99:45:b3:4e:d2:9f:d5:c9:51:f7:d7:7a:35:
25:42:61:2c:38:5b:fc:39:56:1f:56:84:f7:ce:44:
14:27:05:d2:73:ed:2d:19:6c:ce:bb:d4:c4:6e:21:
9c:12:30:e3:9e:f3:58:21:f4:a8:d8:e4:d0:0a:46:
db:40:a5:ef:ec:89:11:27:66:f4:b4:aa:82:b6:33:
fd:9d:c0:48:9e:67:c4:56:15:79:90:ab:8a:ce:71:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:24:0E:D4:D2:91:BC:EA:1C:79:A5:D6:79:C3:B3:EA:0B:CE:F9
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:8d:75:d9:80:7e:f0:27:8d:72:71:0a:26:d4:a2:61:2b:
df:b7:3a:66:df:b4:5a:f5:40:99:04:01:bb:b9:7c:94:99:17:
26:5d:2b:bd:ba:73:cc:ca:89:4d:f9:5e:05:5b:8f:69:cb:d8:
a4:9b:92:29:9b:24:f2:f6:29:49:fa:23:b5:fd:31:07:46:84:
d9:71:14:8e:d8:5a:8b:9b:00:84:2f:13:5c:40:dd:39:95:f5:
f4:3f:2a:d6:0c:52:c3:b1:39:61:45:02:d4:ff:2b:32:8d:09:
f5:e3:1f:f5:31:c8:26:64:6a:cb:63:a8:f8:4e:8e:23:04:7e:
78:6e:3d:a6:01:4a:65:48:59:e7:ac:4f:b9:e3:56:4a:b9:34:
be:ca:3a:c1:9e:28:bc:f0:5c:57:b4:82:1e:64:6a:7f:dc:0f:
f0:4b:6e:22:d6:89:a2:66:e5:6b:93:1f:5d:25:f6:7d:cc:68:
a8:c9:a2:bb:ae:dd:4b:7f:66:98:48:40:a6:04:0e:fa:69:d1:
92:99:fa:26:31:06:9f:77:32:79:3c:c4:3e:88:8a:5a:7d:5a:
af:8e:d2:b2:53:80:65:fe:00:be:91:89:5e:dd:0d:47:f3:45:
a3:d2:90:b3:bf:f3:bb:0e:49:7a:44:25:3f:6c:64:48:75:da:
61:45:ac:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/SXZO9SsNjRa6gU8DbFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMDE1ZjAzNzM1NTVhM2Y1NjUxZjY5OGNhOTNiZjQ5MmQ4
YjQzZGQwHhcNMjUwNjI5MDAwMTI3WhcNMjUwNjMwMDAwMTI3WjAzMTEwLwYDVQQD
Eyg1MDg3MjQwZWQ0ZDI5MWJjZWExYzc5YTVkNjc5YzNiM2VhMGJjZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dwp1n8aQZcsXmnchwer6TNXAj9U
X4BupIwmR0Psw6g2B7GD+A4sQNbtqIjmiPq/bbpyPr05dRMfPot3XcvWQ2ydCQHp
709YuBiL8Zs9pkqPXRCVMd45209VBAYAdHvEBPEpHii7dsw9gPZNKoZ6HIm050C/
eFNwBSuxL876fppIzAgrdspiKjNzImFva2WOglI8iSSmH3ERmBxcVvLODpFlO+vH
pplFs07Sn9XJUffXejUlQmEsOFv8OVYfVoT3zkQUJwXSc+0tGWzOu9TEbiGcEjDj
nvNYIfSo2OTQCkbbQKXv7IkRJ2b0tKqCtjP9ncBInmfEVhV5kKuKznHKoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCHJA7U0pG86hx5pdZ5w7PqC875MB8GA1UdIwQY
MBaAFJEBXwNzVVo/VlH2mMqTv0kti0PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NmJlODAtYTcwZi00YzNkLWFkZDct
MjhhOGExNTJmMmY2LzEva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NmJlODAtYTcwZi00YzNkLWFkZDctMjhhOGExNTJmMmY2
LzEva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8aNddmA
fvAnjXJxCibUomEr37c6Zt+0WvVAmQQBu7l8lJkXJl0rvbpzzMqJTfleBVuPacvY
pJuSKZsk8vYpSfojtf0xB0aE2XEUjthai5sAhC8TXEDdOZX19D8q1gxSw7E5YUUC
1P8rMo0J9eMf9THIJmRqy2Oo+E6OIwR+eG49pgFKZUhZ56xPueNWSrk0vso6wZ4o
vPBcV7SCHmRqf9wP8EtuItaJombla5MfXSX2fcxoqMmiu67dS39mmEhApgQO+mnR
kpn6JjEGn3cyeTzEPoiKWn1ar47SslOAZf4AvpGJXt0NR/NFo9KQs7/zuw5JekQl
P2xkSHXaYUWstQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:59:40 2025 by rpki-client