Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: YYrR+mbB2iZFPwMyz69r7dg9ssG5cJ8OVrJOHYkJpDs=
Subject key identifier: EC:BA:7C:F8:E3:4B:6E:FE:4C:F7:2E:80:8E:AB:9D:4A:5C:58:CD:56
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 019874506796ED5D094CDB321318F0D6FC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 09:01:23 +0000
Manifest this update: Mon 04 Aug 2025 09:01:23 +0000
Manifest next update: Tue 05 Aug 2025 09:01:23 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: V/QLDP+XQvwR5B6YVikGBENGLDXJ6BrFUMkzLwp3m7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:67:96:ed:5d:09:4c:db:32:13:18:f0:d6:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Aug 4 09:01:23 2025 GMT
Not After : Aug 5 09:01:23 2025 GMT
Subject: CN=ecba7cf8e34b6efe4cf72e808eab9d4a5c58cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:a8:62:14:c6:a9:ed:17:71:f0:3c:2e:46:
51:18:2d:f0:bf:c4:c0:e0:5a:99:ac:58:82:7e:33:
23:da:28:39:b5:f8:01:00:64:c8:90:89:5b:2a:58:
00:d2:9e:e3:90:5a:fc:5b:dd:c3:04:7a:0e:71:69:
70:08:8c:29:96:00:c3:2e:81:cb:85:f6:97:af:12:
58:70:06:37:96:9f:ae:b7:62:87:2b:4a:4d:2c:64:
49:bc:73:2a:90:fb:b2:de:57:73:c3:3d:61:97:83:
25:7d:30:b3:b0:a0:b9:8d:96:28:3f:ac:95:0a:b2:
5d:11:3b:32:51:4f:8c:24:42:06:d8:3e:5f:38:9e:
67:30:29:5b:e8:35:96:f1:58:36:4f:3f:fc:6e:c6:
32:4d:76:b7:0e:f4:48:29:b8:e8:14:ef:ba:0b:88:
20:cf:02:ec:c2:eb:4e:c5:2e:b0:75:27:6b:54:50:
71:bc:7a:c0:79:d5:4c:27:ee:92:5d:6e:60:0e:6f:
f4:7b:e2:4a:34:e0:78:43:6c:3c:0a:96:6a:5a:7a:
a7:83:df:60:30:e7:f6:16:af:9f:8c:64:39:f5:5d:
cb:43:b3:8c:c1:ec:b4:4a:c4:3e:1d:5a:dd:d3:93:
f4:b2:56:8d:49:12:02:ea:0c:b5:45:8b:05:d6:b4:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:7C:F8:E3:4B:6E:FE:4C:F7:2E:80:8E:AB:9D:4A:5C:58:CD:56
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f6:cd:2c:88:4c:c0:15:24:fa:e2:ec:18:f1:e2:95:69:92:
78:e8:33:94:fe:db:33:1b:ac:5d:c7:b4:0e:52:5b:ee:9f:be:
6f:4e:8a:47:b9:37:4d:ba:c5:a5:48:99:d3:ba:ad:8d:6b:d5:
b1:79:96:2b:e7:e9:58:8e:6a:2d:19:2f:6b:3a:02:f8:60:db:
15:eb:c2:e4:62:93:34:86:f2:56:3f:6c:56:c0:bd:00:d1:b2:
ea:69:ab:08:94:f5:21:bd:2f:68:22:b3:61:fe:f2:5e:d1:80:
2b:03:d0:f1:2a:06:4e:1c:aa:32:87:5b:13:85:ca:f8:83:86:
b0:24:18:5b:a2:43:d8:34:9e:fa:58:2e:9b:9f:14:a8:da:7b:
76:bb:e4:f1:ba:c1:f1:2a:21:99:7f:5d:34:e6:84:4e:17:43:
c5:20:c9:a1:07:26:fa:0a:44:86:9c:78:2f:19:12:63:91:d5:
5d:fb:fe:1c:e8:d6:50:c3:bb:13:19:71:ea:1a:d3:49:c9:30:
3b:bc:05:50:a8:ae:99:89:91:67:12:37:85:4e:5b:b9:a9:68:
7e:82:32:6f:80:cc:64:f7:4f:15:b1:ec:7b:25:09:df:fe:0f:
4a:25:6c:0e:0a:0d:e3:21:43:df:66:1a:f7:4a:d5:49:55:4f:
57:1e:11:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UGeW7V0JTNsyExjw1vx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMDE1ZjAzNzM1NTVhM2Y1NjUxZjY5OGNhOTNiZjQ5MmQ4
YjQzZGQwHhcNMjUwODA0MDkwMTIzWhcNMjUwODA1MDkwMTIzWjAzMTEwLwYDVQQD
EyhlY2JhN2NmOGUzNGI2ZWZlNGNmNzJlODA4ZWFiOWQ0YTVjNThjZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiqoYhTGqe0XcfA8LkZRGC3wv8TA
4FqZrFiCfjMj2ig5tfgBAGTIkIlbKlgA0p7jkFr8W93DBHoOcWlwCIwplgDDLoHL
hfaXrxJYcAY3lp+ut2KHK0pNLGRJvHMqkPuy3ldzwz1hl4MlfTCzsKC5jZYoP6yV
CrJdETsyUU+MJEIG2D5fOJ5nMClb6DWW8Vg2Tz/8bsYyTXa3DvRIKbjoFO+6C4gg
zwLswutOxS6wdSdrVFBxvHrAedVMJ+6SXW5gDm/0e+JKNOB4Q2w8CpZqWnqng99g
MOf2Fq+fjGQ59V3LQ7OMwey0SsQ+HVrd05P0slaNSRIC6gy1RYsF1rQewQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy6fPjjS27+TPcugI6rnUpcWM1WMB8GA1UdIwQY
MBaAFJEBXwNzVVo/VlH2mMqTv0kti0PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NmJlODAtYTcwZi00YzNkLWFkZDct
MjhhOGExNTJmMmY2LzEva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NmJlODAtYTcwZi00YzNkLWFkZDctMjhhOGExNTJmMmY2
LzEva1FGZkEzTlZXajlXVWZhWXlwT19TUzJMUTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPbNLIhM
wBUk+uLsGPHilWmSeOgzlP7bMxusXce0DlJb7p++b06KR7k3TbrFpUiZ07qtjWvV
sXmWK+fpWI5qLRkvazoC+GDbFevC5GKTNIbyVj9sVsC9ANGy6mmrCJT1Ib0vaCKz
Yf7yXtGAKwPQ8SoGThyqModbE4XK+IOGsCQYW6JD2DSe+lgum58UqNp7drvk8brB
8SohmX9dNOaEThdDxSDJoQcm+gpEhpx4LxkSY5HVXfv+HOjWUMO7Exlx6hrTSckw
O7wFUKiumYmRZxI3hU5bualofoIyb4DMZPdPFbHseyUJ3/4PSiVsDgoN4yFD32Ya
90rVSVVPVx4RAg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:37 2025 by rpki-client