Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: IqLqGlLu3IVNxPGQVEsc5mSE6YK6KFQJ4EoZnzEIHRM=
Subject key identifier: 3C:0C:E3:28:0E:6E:08:DD:31:74:B8:05:F2:53:36:9A:93:B3:AC:70
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 0198D473BC3D550BF66B4C59D86E299225FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0BCA
Signing time: Sat 23 Aug 2025 01:03:31 +0000
Manifest this update: Sat 23 Aug 2025 01:03:31 +0000
Manifest next update: Sun 24 Aug 2025 01:03:31 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: CvOWa5XqsNLTme+3zIFxlX851fP668xEzQlsj/wEj/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:bc:3d:55:0b:f6:6b:4c:59:d8:6e:29:92:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Aug 23 01:03:31 2025 GMT
Not After : Aug 24 01:03:31 2025 GMT
Subject: CN=3c0ce3280e6e08dd3174b805f253369a93b3ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:6f:86:73:2c:84:64:f8:80:b9:b9:94:2b:
fe:08:72:b8:e0:c9:71:c9:c0:c6:07:e0:9a:07:9f:
65:12:c6:60:85:72:6d:c2:0c:4f:95:cd:fb:ab:d2:
fd:2a:ea:85:72:04:b1:b2:04:9d:4f:72:8d:64:9a:
30:06:10:bb:b4:85:4b:f6:af:de:53:5b:de:e3:ca:
d7:0a:b5:91:bf:1e:c4:fc:ef:e2:0a:e7:25:ec:9d:
49:a7:2a:66:4b:52:3a:d1:5c:db:7f:26:a9:cf:72:
26:e1:3d:a2:80:03:35:fb:36:7d:86:de:c0:a4:b6:
b2:9d:7d:3b:c4:d3:d8:3e:cd:24:0a:bc:5f:29:ae:
bb:fa:be:f4:1c:ac:fb:3c:22:71:b2:b5:7b:1f:1e:
b6:80:02:76:fd:30:08:cb:ae:57:6d:49:ba:ac:67:
85:be:76:52:87:dd:d1:21:e0:18:a5:a0:4e:16:6d:
a0:da:5b:fc:da:c0:ea:78:50:61:26:d9:11:33:28:
c4:3e:b4:1e:72:5a:a2:03:aa:24:0e:c8:b8:4f:5c:
d9:4f:1d:3d:01:f1:80:f7:05:93:b6:61:ff:86:be:
d1:f8:37:be:24:f6:3b:85:84:aa:e5:06:cc:62:70:
e7:c0:21:8e:41:c6:38:63:17:28:3e:8f:7c:e6:78:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:E3:28:0E:6E:08:DD:31:74:B8:05:F2:53:36:9A:93:B3:AC:70
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:ed:3f:e3:f2:91:ad:17:14:37:b3:0a:07:9b:67:68:12:
71:94:58:a0:d5:ce:93:4a:f4:69:09:e7:86:e1:7b:32:69:ca:
d7:7b:f6:e6:29:00:ea:f3:ad:68:09:75:2b:e5:8e:05:75:06:
4a:02:67:98:44:e1:71:e6:e9:3b:dc:48:eb:c1:31:25:52:00:
ca:9d:5f:48:9e:a7:32:e3:51:3a:2f:b1:03:3b:32:3e:4b:39:
70:0f:a1:bc:75:7a:72:07:00:33:45:d2:f5:64:9e:96:53:7d:
bc:29:63:2b:e7:d4:88:2a:8d:54:17:bf:47:db:46:3d:bf:85:
ec:f4:40:e7:94:da:1f:5c:89:27:6f:bc:11:aa:59:ca:bc:bd:
ad:d9:4b:f6:0f:83:a8:81:52:58:e5:4e:b2:56:9f:63:4e:7c:
6d:ad:9b:20:a5:fb:21:2f:ce:67:0e:b5:a6:27:c3:c8:5b:e5:
1c:1f:2b:c6:d9:41:f1:10:75:34:85:45:4b:fb:45:d6:f5:0c:
d1:e6:8d:80:90:5c:17:7d:bf:b9:05:66:6c:8d:6a:c4:a8:4f:
ae:cb:15:e1:8d:0b:56:1a:4a:f4:e0:ae:10:2e:f9:82:2a:9b:
ba:73:3a:41:f7:44:d3:a0:63:52:35:8d:9b:13:3c:4f:64:21:
bb:82:6e:e3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjUc7w9VQv2a0xZ2G4pkiX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmU1MmQ4MzRlMjY4ZGM2OTg4MzAyOTJmZGU0YjYzYzdk
YTM5MmUwHhcNMjUwODIzMDEwMzMxWhcNMjUwODI0MDEwMzMxWjAzMTEwLwYDVQQD
EygzYzBjZTMyODBlNmUwOGRkMzE3NGI4MDVmMjUzMzY5YTkzYjNhYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tNvhnMshGT4gLm5lCv+CHK44Mlx
ycDGB+CaB59lEsZghXJtwgxPlc37q9L9KuqFcgSxsgSdT3KNZJowBhC7tIVL9q/e
U1ve48rXCrWRvx7E/O/iCucl7J1JpypmS1I60Vzbfyapz3Im4T2igAM1+zZ9ht7A
pLaynX07xNPYPs0kCrxfKa67+r70HKz7PCJxsrV7Hx62gAJ2/TAIy65XbUm6rGeF
vnZSh93RIeAYpaBOFm2g2lv82sDqeFBhJtkRMyjEPrQeclqiA6okDsi4T1zZTx09
AfGA9wWTtmH/hr7R+De+JPY7hYSq5QbMYnDnwCGOQcY4YxcoPo985niXHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDwM4ygObgjdMXS4BfJTNpqTs6xwMB8GA1UdIwQY
MBaAFPu+Utg04mjcaYgwKS/eS2PH2jkuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03NVMyRFRpYU54cGlEQXBMOTVMWThmYU9TNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0YjdhLTdlYjAtNDZhMi04YThh
LTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFwTDk1TFk4ZmFPUzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2Q4NGI3YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMx
ZjUvMS8xLTc1UzJEVGlhTnhwaURBcEw5NUxZOGZhT1M0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhHt
P+Pyka0XFDezCgebZ2gScZRYoNXOk0r0aQnnhuF7MmnK13v25ikA6vOtaAl1K+WO
BXUGSgJnmEThcebpO9xI68ExJVIAyp1fSJ6nMuNROi+xAzsyPks5cA+hvHV6cgcA
M0XS9WSellN9vCljK+fUiCqNVBe/R9tGPb+F7PRA55TaH1yJJ2+8EapZyry9rdlL
9g+DqIFSWOVOslafY058ba2bIKX7IS/OZw61pifDyFvlHB8rxtlB8RB1NIVFS/tF
1vUM0eaNgJBcF32/uQVmbI1qxKhPrssV4Y0LVhpK9OCuEC75giqbunM6QfdE06Bj
UjWNmxM8T2Qhu4Ju4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:09 2025 by rpki-client