Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: Pd5x7i6z6QCapWVLSb6wDnYBXzasM8MDDEIoHAl2+Kg=
Subject key identifier: 5E:7B:89:27:E7:2A:FD:81:67:00:E3:1E:BB:91:27:EB:AE:17:4B:99
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 01964FDA1DF6C10F153C6FFEB441D17CD709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 21:00:16 +0000
Manifest this update: Sat 19 Apr 2025 21:00:16 +0000
Manifest next update: Sun 20 Apr 2025 21:00:16 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: pDtLRNc/GPiId8s051QLMyKZnoy4to/mRoMSafXxlRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:1d:f6:c1:0f:15:3c:6f:fe:b4:41:d1:7c:d7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Apr 19 21:00:16 2025 GMT
Not After : Apr 20 21:00:16 2025 GMT
Subject: CN=5e7b8927e72afd816700e31ebb9127ebae174b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:bb:7b:a1:48:4d:1c:3d:91:39:f7:db:b2:
d8:c2:c9:0a:51:3a:40:e4:78:ae:d3:29:5b:9e:29:
fc:f0:64:12:7d:86:cc:15:eb:2f:fb:7c:a7:53:fc:
a4:ad:a0:19:20:ca:fa:c9:86:7f:e9:bd:65:83:70:
c8:0f:a2:50:b4:52:88:f0:76:65:9f:5c:ab:90:90:
79:da:86:99:bf:f5:54:19:f8:0c:09:1c:32:56:e7:
5a:c8:a1:01:bc:7d:43:32:e1:1f:be:c8:45:e6:cd:
a7:b4:e7:eb:c0:f8:29:dc:6d:a3:bb:6a:22:de:a1:
9c:3e:8e:64:06:7a:ad:d4:74:9a:65:e0:e6:9f:79:
72:25:cc:1c:51:61:38:58:b3:2d:aa:d4:61:7d:50:
cb:81:e3:41:0e:14:33:2d:6f:3d:23:88:54:eb:a9:
56:36:1d:93:64:8e:3c:95:0d:24:6a:a0:62:a5:83:
57:a6:28:b3:5a:be:63:bd:8c:15:b5:58:88:ef:8e:
45:09:d0:93:18:19:64:59:9a:07:68:f3:c3:20:0d:
42:dd:3c:e8:74:72:92:9a:fa:b8:27:f5:8a:e7:b8:
e4:ea:5e:1c:49:f8:0e:bc:7d:e3:f1:30:b0:d4:42:
ce:e2:b8:ee:47:f9:c0:c1:c6:f2:7b:6f:3a:90:8a:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:89:27:E7:2A:FD:81:67:00:E3:1E:BB:91:27:EB:AE:17:4B:99
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:33:e1:a6:70:a0:c3:60:ad:73:6f:cc:89:6c:e8:25:35:67:
ab:56:93:e1:fb:4a:1a:08:73:dd:6c:67:f9:1a:91:66:62:d1:
23:0c:4a:87:20:18:ad:95:43:71:1e:94:3c:ba:bc:fc:d7:3a:
ab:bc:49:3b:54:69:d8:51:ad:2a:16:cf:5e:4b:6c:fc:4e:1f:
a2:03:65:21:13:ce:54:09:f5:e7:6b:cf:68:58:0a:81:7b:e2:
ba:ff:e6:e9:ff:95:3c:89:db:ef:e5:1b:54:aa:b0:93:28:f7:
ad:1f:e2:5b:62:0b:ad:50:bb:81:ea:41:f0:75:6f:df:18:68:
3f:2b:8d:44:b7:64:37:df:55:70:87:8f:8b:64:f6:1f:20:f6:
7d:26:c9:ba:ac:ff:0f:74:62:2b:7b:fe:28:a0:31:ba:ad:30:
cc:07:69:2b:22:fa:dc:cd:c1:00:23:74:0b:9b:36:c7:a3:09:
88:17:49:24:0a:e3:02:23:90:61:b6:85:3e:d4:b0:3d:70:5d:
38:6c:94:c9:01:64:e6:07:20:66:29:b5:b5:09:dc:54:98:c4:
8e:7a:3d:b5:e1:e1:75:7b:17:f1:24:98:3f:5d:3c:ff:c2:3f:
59:29:89:76:a9:80:a2:57:95:f0:02:cd:6a:0f:3f:11:f1:66:
09:77:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:23 2025 by rpki-client