Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: jkroVg7IGowR1ZE+JnGmOn9X4TC5BiYx+296hHChbzg=
Subject key identifier: AD:96:EA:F9:AD:64:51:37:37:AB:CE:01:18:21:F2:21:10:CA:F0:CC
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 019916880FEF015A639108808C45171FE304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 15FC
Signing time: Thu 04 Sep 2025 21:00:39 +0000
Manifest this update: Thu 04 Sep 2025 21:00:39 +0000
Manifest next update: Fri 05 Sep 2025 21:00:39 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: ASzx6g7OTxgmwyK7ci6hANc7c8vh0IlVjB+7xNth7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:0f:ef:01:5a:63:91:08:80:8c:45:17:1f:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Sep 4 21:00:39 2025 GMT
Not After : Sep 5 21:00:39 2025 GMT
Subject: CN=ad96eaf9ad64513737abce011821f22110caf0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:b6:14:c5:8b:a0:21:e9:50:40:36:7f:c2:
4d:40:b9:1d:05:7b:8c:2b:db:16:07:9f:a6:00:3d:
b3:9e:15:8a:7d:db:ea:72:31:59:38:cb:37:8d:ae:
4e:b0:ce:e4:de:28:5e:25:29:11:8d:27:95:ae:98:
b8:94:80:f1:8a:db:15:de:88:9c:4f:54:cb:b6:02:
a1:e3:d2:ec:26:2f:d9:c9:72:0a:97:df:48:19:76:
5c:8e:8e:09:be:84:93:2d:81:d4:b7:9a:6c:cf:f3:
d3:12:1d:fb:bb:60:26:3d:41:f0:04:40:35:cf:15:
c6:66:3c:9a:2a:db:40:f4:f1:f8:ed:1f:3f:3c:9f:
b6:88:55:8b:fc:7f:d9:9c:fb:8b:a4:1b:62:e4:f2:
f9:d2:54:71:84:83:dd:b1:f0:52:40:24:62:e0:dc:
bc:bc:a0:5d:a7:f2:0f:6b:f6:c2:03:08:7b:f1:2e:
d6:2b:fc:9f:de:c6:99:ff:47:3e:b8:41:df:67:78:
19:69:01:13:7f:fa:93:b1:12:00:20:0c:0e:b8:e8:
b5:28:84:ac:a4:bb:bc:60:33:bd:ab:55:47:3d:d3:
f6:2f:2b:fa:7c:9c:7e:87:6e:3d:59:a7:df:ca:a4:
85:7b:fc:0a:7f:2d:30:f5:23:6a:49:34:6f:56:b5:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:EA:F9:AD:64:51:37:37:AB:CE:01:18:21:F2:21:10:CA:F0:CC
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2a:f0:50:88:ce:1a:1e:f3:d2:a0:83:fd:82:7f:ad:9e:fb:
dc:ed:a0:9c:37:8b:51:ed:04:17:0a:44:62:83:39:21:3a:be:
27:09:67:47:e5:cb:43:5b:2d:ce:1e:32:9d:f3:c7:d7:e0:81:
07:9d:64:01:0a:a1:d3:20:3d:99:9e:f5:1e:40:29:7f:42:94:
9b:9e:5a:64:6a:65:07:16:0e:9a:c4:7e:ec:eb:74:58:64:fc:
be:7f:c2:ca:65:e6:87:6b:d5:4c:c1:69:0e:51:f3:b2:fc:13:
82:5f:1e:b8:c5:b9:92:92:13:bc:a5:6f:32:50:cb:61:9b:f4:
62:f0:d1:9b:3f:2b:f7:98:b7:d8:1d:64:4b:52:83:cf:4e:08:
19:46:55:ea:a5:9f:e8:7e:06:e7:22:7a:c2:2f:c6:62:d6:0f:
c8:62:8f:8b:73:8b:64:7d:ba:1a:46:67:6b:84:49:2e:81:e0:
ca:da:9b:88:c4:62:b8:97:e9:ba:e0:74:18:29:fc:48:6c:fd:
b5:55:59:64:8b:0c:d6:ed:c5:c3:90:79:c0:90:1c:56:f5:d3:
61:4c:91:fb:58:fc:71:c2:3d:bf:bc:fd:6e:03:b3:61:54:6d:
db:d0:a5:bf:6f:75:e3:a1:b9:41:a7:20:1d:b4:5d:c2:45:cc:
61:bb:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:51 2025 by rpki-client