Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File: 91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier: 70gLjbXlBXZNVy4/g0D9fQN8qVXAu16cfUZbkkT2170=
Subject key identifier: 72:F6:12:82:ED:4B:DD:68:DA:65:E7:4B:3C:49:A9:76:17:D9:A8:25
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 1DE29052702F5B1986DC3C0EAD06B386B66BEDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number: 0378
Signing time: Sat 06 Sep 2025 21:53:56 +0000
Manifest this update: Sat 06 Sep 2025 21:48:56 +0000
Manifest next update: Mon 08 Sep 2025 00:48:56 +0000
Files and hashes: 1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: Nwcl71cFlFuV1yJUziEVOJOdSrDnnY0x/8gfU58TAEY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 00:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e2:90:52:70:2f:5b:19:86:dc:3c:0e:ad:06:b3:86:b6:6b:ed:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Sep 6 21:48:56 2025 GMT
Not After : Sep 8 00:48:56 2025 GMT
Subject: CN=72F61282ED4BDD68DA65E74B3C49A97617D9A825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:be:0a:ee:e4:e5:21:66:39:30:22:65:e5:
d6:01:86:cb:53:bb:ea:5e:be:40:5f:2d:54:50:a8:
ed:48:91:fc:9e:c0:1d:1f:7e:f6:d3:ed:47:19:bb:
45:2f:72:5e:64:a3:d9:36:94:b9:1c:dc:9c:82:09:
06:0d:f0:38:f0:1c:a9:3d:da:cd:c7:79:dc:43:3f:
9a:97:25:1e:ec:66:7e:e9:0e:30:8d:04:49:46:e7:
e3:37:95:47:73:ff:ba:4d:2c:e6:23:d3:3f:c9:a3:
4a:e7:10:b7:70:b0:da:d2:3f:aa:d2:a8:bc:15:46:
a9:c7:bf:34:bf:47:d8:72:17:0c:1c:e2:04:ad:82:
65:2e:dc:a6:18:71:63:5e:0c:f2:76:d2:61:74:af:
f5:16:ef:17:c3:59:00:81:77:ce:98:83:a7:7b:02:
49:c7:37:14:82:15:f6:bf:8c:ec:75:8d:6d:74:de:
90:9b:54:a1:0d:2c:b1:bd:b0:07:14:67:8c:43:2c:
e1:07:e2:f9:8b:b2:8c:e3:e5:a3:2d:57:3e:96:b9:
2a:54:ed:2b:fb:b0:61:13:65:4e:59:0e:4d:9d:80:
cb:70:b4:03:d3:0a:e3:de:4a:0a:fb:71:75:a9:b5:
3a:11:c7:fa:f7:a1:b6:40:c3:e7:b5:97:0d:04:46:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:12:82:ED:4B:DD:68:DA:65:E7:4B:3C:49:A9:76:17:D9:A8:25
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:e8:de:0b:c6:a4:8e:de:58:b8:c4:66:ab:f6:72:f0:6a:
57:68:02:4e:b5:72:fe:a6:e6:82:f2:f5:e6:da:b1:ed:36:1f:
3f:16:bc:f9:ac:ab:8c:a4:13:ed:d3:b3:8d:bd:d6:60:66:52:
7d:60:ad:a3:d0:0a:7a:89:cf:22:04:36:d3:cc:e3:f1:5c:b1:
7d:2e:69:8a:b1:29:3e:f3:a6:ce:f5:a8:75:46:ad:ca:01:df:
f0:2a:28:13:b2:90:f4:31:b5:28:be:ee:75:f4:fd:bd:81:82:
51:cf:7c:56:2b:34:ce:1b:e5:f4:e4:23:80:b5:1e:ae:d4:f5:
16:20:9e:1f:70:c1:0e:b4:0c:b4:78:35:76:12:2c:f4:b4:1e:
ed:2f:3b:d6:95:06:5f:9c:98:6b:b1:02:f3:5e:ad:37:32:2f:
40:3b:97:a4:37:7f:8b:ce:4b:01:26:45:c7:19:62:9e:9f:e7:
b3:70:80:31:a2:70:08:65:a5:e3:d6:b7:df:b3:28:58:ce:b7:
19:19:b8:75:64:05:a3:f2:4f:fb:90:6c:43:d9:b0:f4:44:3d:
0c:eb:63:36:0d:ae:32:16:f8:7b:fe:31:78:87:69:bf:57:f4:
83:95:b3:80:fa:5d:2c:7c:d4:cd:94:85:73:a6:73:42:5b:2f:
bb:df:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:57 2025 by rpki-client