Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: qxSSPgzcwfDTBWLqq79qBAmRA8H7fpgJep6o6bUGWro=
Subject key identifier: 3F:86:F5:5C:62:A1:FA:C6:92:75:3D:9F:DC:3B:96:C4:A2:58:8E:9C
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 01976997D9BC719FF260862C62E1829DD6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 099E
Signing time: Fri 13 Jun 2025 14:00:48 +0000
Manifest this update: Fri 13 Jun 2025 14:00:48 +0000
Manifest next update: Sat 14 Jun 2025 14:00:48 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: um0XSzV6kpsG21Bih56fMiMThq4Ah0FS7I6UjWgXHSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d9:bc:71:9f:f2:60:86:2c:62:e1:82:9d:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Jun 13 14:00:48 2025 GMT
Not After : Jun 14 14:00:48 2025 GMT
Subject: CN=3f86f55c62a1fac692753d9fdc3b96c4a2588e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:64:ff:55:ec:e9:c8:2a:7e:00:d1:1e:0c:
66:e6:d6:23:6c:39:ec:5f:5a:7b:92:c9:0e:5e:a4:
dc:df:ee:23:d8:c3:26:74:c0:a1:42:4b:c1:ad:a2:
f5:dd:72:98:6f:70:46:3f:66:93:d1:2f:4d:1a:cf:
b5:e3:5c:b3:d0:8a:fb:5d:70:ad:6d:f5:ef:a1:d5:
64:18:89:fb:e6:c5:1d:da:00:24:16:40:65:6e:44:
e8:d2:bb:dd:a8:c8:0c:58:d8:77:f5:2f:9b:7c:ac:
34:f5:a3:17:e3:6b:d4:5d:91:97:af:b1:86:db:29:
8e:7b:5c:a9:36:d2:d5:7f:9e:a2:06:56:0e:d3:41:
bc:61:28:e1:b8:5d:02:51:fc:a3:c8:a7:be:b5:02:
fc:66:e1:1e:a6:2e:6c:a6:92:ff:04:9d:33:7f:f8:
be:be:cb:5d:ab:45:dd:c1:78:5e:a1:8b:6d:09:f3:
f4:e4:1a:e1:f2:10:55:96:5e:73:ae:f4:52:83:e9:
5e:91:c7:ef:01:77:81:06:db:20:de:1b:e4:21:f5:
b2:39:f0:a8:b1:bf:5c:ef:db:57:41:dc:23:62:0d:
29:dc:94:69:bf:33:fa:c1:8e:c9:a9:06:42:29:94:
fb:e9:9e:90:8b:d6:47:60:c2:93:2c:bd:b8:00:b2:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:F5:5C:62:A1:FA:C6:92:75:3D:9F:DC:3B:96:C4:A2:58:8E:9C
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:94:5e:52:31:52:12:62:f8:e4:43:70:f8:cd:d4:a6:c9:77:
7c:d5:40:72:36:b3:c2:4c:ae:ea:28:d4:8b:4a:df:f1:86:06:
d7:5f:d2:0f:13:41:2f:3a:10:12:b8:d5:d0:75:fb:68:0f:bf:
69:aa:3e:e0:ed:d5:8d:61:f9:57:ba:5c:7a:93:11:89:6c:a6:
7e:31:6f:ad:fc:6e:9d:73:85:8e:a1:b9:e4:47:6b:e1:7a:cb:
39:39:6f:4d:68:57:b6:97:5a:4c:33:71:6c:a7:b1:e4:ea:20:
a3:dc:70:d1:61:46:cd:1c:a5:80:38:c2:ec:5c:ad:ae:f5:eb:
e0:af:84:9d:86:0c:40:61:17:78:96:8b:82:ec:2a:79:c5:18:
99:70:12:06:ae:d2:d8:12:30:f6:a1:6a:09:a8:df:89:a2:d6:
2d:b8:10:7d:38:88:80:1e:aa:92:60:b3:63:c4:c2:6f:9b:39:
bb:20:18:a2:ad:27:09:04:e7:65:49:b4:8a:a2:14:fc:bd:9a:
55:2f:f5:38:29:d8:78:2d:72:9e:bc:58:3f:ac:7f:85:a4:b2:
e7:4a:98:61:4f:41:a7:6e:10:ae:a1:a5:8f:91:84:da:fa:5d:
f5:85:64:a2:a8:96:5f:28:06:90:7b:33:fd:2a:33:f5:b0:86:
da:c7:13:ef
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdpl9m8cZ/yYIYsYuGCnda4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGY2OThiNWY3NGExYzZkMWUwMDk4YjIyNTE5YmRjNTgz
MDA1NWEwHhcNMjUwNjEzMTQwMDQ4WhcNMjUwNjE0MTQwMDQ4WjAzMTEwLwYDVQQD
EygzZjg2ZjU1YzYyYTFmYWM2OTI3NTNkOWZkYzNiOTZjNGEyNTg4ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Fk/1Xs6cgqfgDRHgxm5tYjbDns
X1p7kskOXqTc3+4j2MMmdMChQkvBraL13XKYb3BGP2aT0S9NGs+141yz0Ir7XXCt
bfXvodVkGIn75sUd2gAkFkBlbkTo0rvdqMgMWNh39S+bfKw09aMX42vUXZGXr7GG
2ymOe1ypNtLVf56iBlYO00G8YSjhuF0CUfyjyKe+tQL8ZuEepi5sppL/BJ0zf/i+
vstdq0XdwXheoYttCfP05Brh8hBVll5zrvRSg+lekcfvAXeBBtsg3hvkIfWyOfCo
sb9c79tXQdwjYg0p3JRpvzP6wY7JqQZCKZT76Z6Qi9ZHYMKTLL24ALIhWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD+G9VxiofrGknU9n9w7lsSiWI6cMB8GA1UdIwQY
MBaAFPvfaYtfdKHG0eAJiyJRm9xYMAVaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05OXBpMTkwb2NiUjRBbUxJbEdiM0Znd0JWby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZGU5YzJkLTcwMjYtNDllYi05M2Q0
LTk4ZjJhMjE2YTdmOC8xLzEtOTlwaTE5MG9jYlI0QW1MSWxHYjNGZ3dCVm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk0L2RlOWMyZC03MDI2LTQ5ZWItOTNkNC05OGYyYTIxNmE3
ZjgvMS8xLTk5cGkxOTBvY2JSNEFtTElsR2IzRmd3QlZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZRe
UjFSEmL45ENw+M3Upsl3fNVAcjazwkyu6ijUi0rf8YYG11/SDxNBLzoQErjV0HX7
aA+/aao+4O3VjWH5V7pcepMRiWymfjFvrfxunXOFjqG55Edr4XrLOTlvTWhXtpda
TDNxbKex5Oogo9xw0WFGzRylgDjC7FytrvXr4K+EnYYMQGEXeJaLguwqecUYmXAS
Bq7S2BIw9qFqCajfiaLWLbgQfTiIgB6qkmCzY8TCb5s5uyAYoq0nCQTnZUm0iqIU
/L2aVS/1OCnYeC1ynrxYP6x/haSy50qYYU9Bp24QrqGlj5GE2vpd9YVkoqiWXygG
kHsz/Soz9bCG2scT7w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:55 2025 by rpki-client