Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: 788o9Zx+LucwK5Uqm06/FOFR7ASFRwBBbHY59crfDyU=
Subject key identifier: 76:24:90:BE:86:EF:2F:D7:4E:F2:F3:C1:80:20:1E:0B:FF:6B:08:73
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 0198D4A82B5C45EEB488BF98C9BFC1EC9D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0A5A
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: fJLBu7fM3Hs3p6Lh2e5UTGyR1rMs/48W1L4avIIhQDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2b:5c:45:ee:b4:88:bf:98:c9:bf:c1:ec:9d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=762490be86ef2fd74ef2f3c180201e0bff6b0873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:bd:03:9c:6e:42:97:b6:13:60:22:46:04:
60:63:99:6f:fc:7e:56:88:d5:5d:ba:a9:c4:be:96:
12:43:90:54:ed:fa:f5:46:3d:ca:d9:43:0e:e7:7a:
fb:f4:3d:5d:5f:81:a5:33:96:2a:23:6c:ce:33:b4:
6f:ca:f3:19:c5:7b:5f:57:69:20:a9:fb:8f:a6:37:
44:a8:63:27:c1:41:33:fe:b9:0f:70:05:93:93:0b:
a1:66:8c:96:b9:54:1e:fa:0c:66:3e:94:91:48:05:
b1:57:93:cd:ca:22:25:9b:a9:a1:64:fb:06:11:7b:
3b:e2:31:12:6c:93:c3:ad:31:cd:92:ed:79:35:5f:
c9:cd:4b:1d:2a:1d:d0:1e:51:bd:45:85:ce:6d:d4:
1f:dc:94:63:3a:b6:fa:10:8b:42:b2:14:f6:67:f8:
d1:d3:04:6b:a7:c3:d6:89:2d:f5:08:b6:48:38:25:
dd:37:7e:68:fa:ba:fc:04:60:c1:27:fc:fb:01:61:
41:22:e4:7c:d4:d9:89:0c:9b:f1:29:e7:e3:3a:d7:
b9:d6:84:1b:69:15:47:79:24:18:4b:e3:7d:1a:c0:
62:c0:24:f9:6e:52:ca:77:f2:d7:43:9a:a1:f4:0c:
8b:50:f8:a5:ce:ce:5a:6d:a9:96:5c:33:71:6a:5c:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:90:BE:86:EF:2F:D7:4E:F2:F3:C1:80:20:1E:0B:FF:6B:08:73
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:b7:fd:bf:df:b2:57:61:14:5f:f8:95:60:2c:43:0c:8c:
08:9c:23:d2:1e:88:07:e5:d6:8e:56:28:b3:b0:d0:fa:34:9a:
7a:28:2b:b5:82:d4:00:42:15:5a:e3:da:14:07:99:cf:52:8e:
3f:1a:5e:4f:26:c5:43:1d:83:e4:03:18:00:70:89:5b:14:ff:
d8:0c:57:91:31:58:f6:f3:dc:9a:db:26:46:04:c0:b0:40:4e:
59:da:e5:93:48:4d:13:4e:6f:a8:5f:d9:5d:93:0f:11:2a:4a:
87:44:9d:b4:f4:9a:3b:e2:6f:43:dc:37:ad:d1:55:17:49:41:
78:ab:97:1a:00:1b:13:17:f0:36:de:51:94:80:09:83:f9:b8:
35:d4:65:e0:6b:d3:36:07:f9:50:d6:49:8c:ff:e3:0d:18:d9:
35:7a:3d:36:12:7c:13:a2:03:2f:48:97:9f:d1:5a:cb:79:59:
0b:aa:c0:cc:7e:b8:1d:85:ed:7c:9b:51:10:0a:53:60:13:17:
2a:35:83:27:15:71:f3:a2:5c:2b:34:bd:c4:69:d7:e0:cb:26:
72:01:25:18:1d:72:ec:98:c9:fe:f5:d4:d3:49:8b:bc:4d:7e:
27:e2:cd:ef:d9:85:bc:ca:b7:ea:28:84:f1:f4:15:5c:42:98:
21:54:10:26
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjUqCtcRe60iL+Yyb/B7J17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGY2OThiNWY3NGExYzZkMWUwMDk4YjIyNTE5YmRjNTgz
MDA1NWEwHhcNMjUwODIzMDIwMDQ3WhcNMjUwODI0MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg3NjI0OTBiZTg2ZWYyZmQ3NGVmMmYzYzE4MDIwMWUwYmZmNmIwODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF29A5xuQpe2E2AiRgRgY5lv/H5W
iNVduqnEvpYSQ5BU7fr1Rj3K2UMO53r79D1dX4GlM5YqI2zOM7RvyvMZxXtfV2kg
qfuPpjdEqGMnwUEz/rkPcAWTkwuhZoyWuVQe+gxmPpSRSAWxV5PNyiIlm6mhZPsG
EXs74jESbJPDrTHNku15NV/JzUsdKh3QHlG9RYXObdQf3JRjOrb6EItCshT2Z/jR
0wRrp8PWiS31CLZIOCXdN35o+rr8BGDBJ/z7AWFBIuR81NmJDJvxKefjOte51oQb
aRVHeSQYS+N9GsBiwCT5blLKd/LXQ5qh9AyLUPilzs5abamWXDNxaly+KQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHYkkL6G7y/XTvLzwYAgHgv/awhzMB8GA1UdIwQY
MBaAFPvfaYtfdKHG0eAJiyJRm9xYMAVaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05OXBpMTkwb2NiUjRBbUxJbEdiM0Znd0JWby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZGU5YzJkLTcwMjYtNDllYi05M2Q0
LTk4ZjJhMjE2YTdmOC8xLzEtOTlwaTE5MG9jYlI0QW1MSWxHYjNGZ3dCVm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk0L2RlOWMyZC03MDI2LTQ5ZWItOTNkNC05OGYyYTIxNmE3
ZjgvMS8xLTk5cGkxOTBvY2JSNEFtTElsR2IzRmd3QlZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp+3
/b/fsldhFF/4lWAsQwyMCJwj0h6IB+XWjlYos7DQ+jSaeigrtYLUAEIVWuPaFAeZ
z1KOPxpeTybFQx2D5AMYAHCJWxT/2AxXkTFY9vPcmtsmRgTAsEBOWdrlk0hNE05v
qF/ZXZMPESpKh0SdtPSaO+JvQ9w3rdFVF0lBeKuXGgAbExfwNt5RlIAJg/m4NdRl
4GvTNgf5UNZJjP/jDRjZNXo9NhJ8E6IDL0iXn9Fay3lZC6rAzH64HYXtfJtREApT
YBMXKjWDJxVx86JcKzS9xGnX4MsmcgElGB1y7JjJ/vXU00mLvE1+J+LN79mFvMq3
6iiE8fQVXEKYIVQQJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:16 2025 by rpki-client