Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: WOhCSXI3jabaIgZhB4JMjdA5WLmgb6FAboTVwQs+pkY=
Subject key identifier: 05:86:9E:96:F0:34:4F:58:23:F6:D6:06:2D:F6:9C:0E:73:F9:48:52
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 0199FC2187068A6046BC5B768A06ED89DE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0AF3
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: +zcw071m6Ga0ekd+dfUfe3Pinpo8xFHiYDAQBbeIr2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:87:06:8a:60:46:bc:5b:76:8a:06:ed:89:de:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=05869e96f0344f5823f6d6062df69c0e73f94852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:88:e6:cc:60:68:da:8e:09:c1:1e:c3:d8:
95:e2:a6:3f:62:d0:38:7d:97:6d:5e:72:7d:bc:db:
db:1f:54:9f:88:aa:2f:a2:d2:6e:ca:17:4e:3c:30:
95:c4:a3:e0:c3:c7:bf:db:84:eb:64:2b:cb:8c:bb:
c2:95:26:4a:6e:48:ee:22:66:7f:72:3a:1e:89:b4:
e8:6a:95:22:13:5b:b4:94:5c:51:86:6d:47:34:47:
8b:30:e1:13:de:51:f8:a0:3a:aa:1a:3e:4e:98:fc:
72:54:4a:3b:93:4b:60:cd:86:66:10:c6:c2:e8:c5:
42:f9:5b:c0:e0:e2:ca:94:e2:b5:b1:2e:2c:a8:8e:
e3:69:9b:16:7b:5f:8d:a7:68:48:71:7b:b9:97:89:
1a:0d:03:36:05:89:f2:0a:26:3c:9f:b1:a0:66:7d:
77:90:f4:1e:21:82:dc:0e:7b:9e:f0:1d:26:25:65:
aa:b9:ef:71:98:f9:3d:c7:ec:05:02:d6:5e:67:4d:
d3:e3:9e:84:eb:fa:71:40:8b:21:e9:8b:9d:74:41:
9d:af:a5:2f:bf:a1:3c:29:65:fa:0e:24:e2:ef:84:
ac:df:5f:0d:07:30:fc:8e:96:fe:98:d3:73:35:e7:
84:f7:40:0e:6d:ec:22:db:07:e1:2d:69:f9:05:10:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:9E:96:F0:34:4F:58:23:F6:D6:06:2D:F6:9C:0E:73:F9:48:52
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:bf:73:11:2c:42:1e:da:9a:dd:ef:b2:10:9a:fb:c2:33:50:
25:12:f2:e3:5d:3a:b3:27:e9:48:6e:dd:c5:c8:7a:d0:ce:b4:
93:8f:7e:b1:52:ce:eb:eb:a5:1b:11:a8:e9:ed:0f:3b:23:a6:
39:15:05:a2:6f:0b:c8:ca:96:1b:d8:1f:a0:12:13:1d:28:11:
d3:c8:ab:24:a8:b9:60:9b:8f:99:af:e1:ce:59:df:62:61:14:
9a:b4:a7:a6:2e:9c:52:d4:d0:55:37:30:44:fe:98:1c:e7:ce:
79:1b:52:1c:d7:2f:93:aa:ef:ca:aa:d6:69:03:cb:b7:7c:ba:
a5:0b:62:94:ba:3e:a2:44:51:de:20:da:c1:fa:9c:d1:77:06:
1a:1f:19:69:a3:c5:08:f9:ea:e0:cb:eb:ab:87:72:79:02:64:
7b:0e:6b:25:0c:47:93:b7:2e:3b:cc:2d:da:94:32:52:d0:8c:
fe:34:55:f1:23:5a:d4:87:b8:93:cb:10:ab:f6:3e:37:04:a8:
26:ee:66:26:42:38:a4:54:e1:f4:67:40:b5:d1:91:bb:49:12:
df:1e:6f:34:0c:1a:5f:da:d8:e5:0c:4b:a3:82:d0:e3:f7:58:
47:2b:34:90:f9:57:68:f2:60:ad:ee:fc:7c:01:b2:0c:7f:f2:
7e:49:36:4d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8IYcGimBGvFt2igbtid6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGY2OThiNWY3NGExYzZkMWUwMDk4YjIyNTE5YmRjNTgz
MDA1NWEwHhcNMjUxMDE5MTEwMTE5WhcNMjUxMDIwMTEwMTE5WjAzMTEwLwYDVQQD
EygwNTg2OWU5NmYwMzQ0ZjU4MjNmNmQ2MDYyZGY2OWMwZTczZjk0ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqI5sxgaNqOCcEew9iV4qY/YtA4
fZdtXnJ9vNvbH1SfiKovotJuyhdOPDCVxKPgw8e/24TrZCvLjLvClSZKbkjuImZ/
cjoeibToapUiE1u0lFxRhm1HNEeLMOET3lH4oDqqGj5OmPxyVEo7k0tgzYZmEMbC
6MVC+VvA4OLKlOK1sS4sqI7jaZsWe1+Np2hIcXu5l4kaDQM2BYnyCiY8n7GgZn13
kPQeIYLcDnue8B0mJWWque9xmPk9x+wFAtZeZ03T456E6/pxQIsh6YuddEGdr6Uv
v6E8KWX6DiTi74Ss318NBzD8jpb+mNNzNeeE90AObewi2wfhLWn5BRDNrQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAWGnpbwNE9YI/bWBi32nA5z+UhSMB8GA1UdIwQY
MBaAFPvfaYtfdKHG0eAJiyJRm9xYMAVaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05OXBpMTkwb2NiUjRBbUxJbEdiM0Znd0JWby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZGU5YzJkLTcwMjYtNDllYi05M2Q0
LTk4ZjJhMjE2YTdmOC8xLzEtOTlwaTE5MG9jYlI0QW1MSWxHYjNGZ3dCVm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk0L2RlOWMyZC03MDI2LTQ5ZWItOTNkNC05OGYyYTIxNmE3
ZjgvMS8xLTk5cGkxOTBvY2JSNEFtTElsR2IzRmd3QlZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0L9z
ESxCHtqa3e+yEJr7wjNQJRLy4106syfpSG7dxch60M60k49+sVLO6+ulGxGo6e0P
OyOmORUFom8LyMqWG9gfoBITHSgR08irJKi5YJuPma/hzlnfYmEUmrSnpi6cUtTQ
VTcwRP6YHOfOeRtSHNcvk6rvyqrWaQPLt3y6pQtilLo+okRR3iDawfqc0XcGGh8Z
aaPFCPnq4Mvrq4dyeQJkew5rJQxHk7cuO8wt2pQyUtCM/jRV8SNa1Ie4k8sQq/Y+
NwSoJu5mJkI4pFTh9GdAtdGRu0kS3x5vNAwaX9rY5QxLo4LQ4/dYRys0kPlXaPJg
re78fAGyDH/yfkk2TQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:19 2025 by rpki-client