Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: 01qXxjVJmLNi/bLLII8FKlFOpftSevMYtDukAipU9ag=
Subject key identifier: 3C:30:BF:71:DD:9B:90:E7:68:CA:18:11:CD:2F:0F:33:B9:96:AE:57
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 01987BD24807D167C707731559FC2DCA635C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0A2C
Signing time: Tue 05 Aug 2025 20:00:35 +0000
Manifest this update: Tue 05 Aug 2025 20:00:35 +0000
Manifest next update: Wed 06 Aug 2025 20:00:35 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: upiahzXGTpamtG8/O3IgEf2A70DNjesJdZcTi/1pVz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:48:07:d1:67:c7:07:73:15:59:fc:2d:ca:63:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Aug 5 20:00:35 2025 GMT
Not After : Aug 6 20:00:35 2025 GMT
Subject: CN=3c30bf71dd9b90e768ca1811cd2f0f33b996ae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:0f:42:e9:3e:01:d0:31:93:23:71:1f:fc:
b6:e2:21:4b:f1:0d:c7:27:0a:0f:4f:fd:64:d4:0e:
52:e3:81:f2:66:e6:28:68:5d:5e:22:e4:26:68:96:
99:b7:ff:51:ac:c4:de:13:51:28:88:87:19:88:44:
8f:1b:83:21:3c:ae:b6:6b:e4:96:4e:e3:cb:e6:4c:
20:d9:55:c8:e7:8f:73:bf:c7:49:33:77:41:cb:f0:
1d:45:f6:40:13:ae:d7:81:ce:c5:87:bc:38:0d:27:
e7:df:c5:b4:87:81:ea:38:92:60:f1:68:b0:b7:cc:
44:6a:49:67:c8:03:74:60:47:01:4d:ed:81:cb:e2:
92:58:d9:98:61:5b:0f:ef:78:fc:fc:c3:7a:95:f3:
0b:e4:4c:f6:99:50:f2:c7:d1:1c:ca:a0:7b:b2:e1:
f3:66:52:4d:12:58:bf:a9:10:22:b1:e8:bd:43:05:
76:84:eb:fc:73:91:87:2e:0a:4d:c7:48:ed:41:bb:
95:bf:8d:fd:f9:e3:56:71:04:c0:f7:58:22:1c:b0:
7b:18:0d:b5:f5:77:17:d0:94:56:b8:ff:2a:a6:d7:
fc:cc:23:77:ed:4b:e4:b3:3c:ce:49:d0:71:5e:9e:
a1:ab:57:91:83:0f:a1:64:d8:c7:ae:2e:5f:34:a4:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:BF:71:DD:9B:90:E7:68:CA:18:11:CD:2F:0F:33:B9:96:AE:57
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c5:f0:9d:77:dc:9d:71:a7:9e:e7:1e:f0:02:40:59:04:50:
bd:9f:00:cc:9f:83:20:f7:46:2f:44:f6:79:58:0d:55:ae:60:
37:b1:95:e3:db:a3:cb:35:ef:47:e5:bd:e6:80:b0:02:ef:6f:
33:cb:5f:b2:3c:8c:63:23:a6:be:31:cc:fb:37:e6:9e:1b:a1:
f1:24:76:7e:7a:7e:43:56:78:75:c9:b6:ed:6d:b4:cb:00:79:
fc:f1:b9:1b:c1:37:ed:7c:b3:03:14:8c:96:8d:ca:b0:e6:1f:
c1:ca:61:33:27:ee:1e:9e:03:c7:50:a7:86:9f:90:9a:2d:0c:
d5:e5:14:7b:d1:0b:e1:f3:a1:d3:df:0c:be:d9:45:24:2d:9e:
e1:79:75:44:cb:81:c1:76:3e:33:c7:a9:71:26:c2:74:25:c1:
8f:4f:a4:4e:1a:87:28:69:da:2b:4f:dd:5b:6f:40:fc:1a:f7:
cb:61:28:7f:d7:b8:45:b2:d0:e2:90:89:20:1e:00:91:0e:87:
de:24:4f:ac:f6:ff:bb:3d:fd:80:c5:d8:2c:7b:c2:d3:c6:56:
4a:7d:79:56:c9:1a:38:cc:3b:f1:bf:88:0b:28:8f:84:a8:f9:
53:9a:05:36:9f:b1:e6:86:12:ef:ed:29:b0:c0:3d:cf:33:d9:
29:46:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:16 2025 by rpki-client