Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: AbCGaBXDm4NvWac898WgLxspuy/T7K/mjtDRLlSfsQw=
Subject key identifier: 01:B1:48:1A:2D:B3:0A:12:A3:7E:72:EA:39:A7:CE:08:3D:54:A8:4E
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019922FAE09A768DC50648D7F81CD84886A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:30 +0000
Manifest this update: Sun 07 Sep 2025 07:01:30 +0000
Manifest next update: Mon 08 Sep 2025 07:01:30 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 9vi4BAAlDERKPewswRoPGb9Mh0vqjC+8IvoTwScHg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e0:9a:76:8d:c5:06:48:d7:f8:1c:d8:48:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Sep 7 07:01:30 2025 GMT
Not After : Sep 8 07:01:30 2025 GMT
Subject: CN=01b1481a2db30a12a37e72ea39a7ce083d54a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:b1:d6:3d:e8:65:03:55:ac:60:b0:24:a2:
ee:f1:0d:f7:87:67:49:40:7e:de:33:3f:78:c7:70:
89:98:81:74:a6:02:09:79:e6:a7:1a:c5:be:be:89:
8c:dd:45:a8:a9:29:19:af:e8:1c:b9:93:1a:98:89:
68:f4:0b:1b:3c:b7:35:0c:3e:0e:2b:af:2e:d9:0a:
85:32:ec:1b:85:ef:a8:d0:12:44:93:9d:5e:8d:ef:
46:bb:43:a2:82:c3:0d:98:a4:02:8e:17:fb:0a:61:
1d:48:fa:98:45:e8:24:bd:4a:a5:d2:53:71:21:17:
19:d5:61:72:cc:60:10:96:f6:cc:f9:48:8c:04:78:
37:29:5e:56:6e:c5:67:0c:10:a6:fa:2d:3d:b4:57:
d7:f6:00:d1:b4:47:0c:ed:cc:06:37:20:fb:a7:5c:
27:15:ff:7d:b8:37:1b:85:d8:9a:fc:65:64:32:65:
14:c7:43:d0:e3:c2:9b:7a:ae:ed:0c:c1:c5:b2:a7:
bc:39:6a:78:48:23:68:7d:5c:d1:14:92:c0:90:13:
7a:d8:be:d9:f2:6e:22:ab:61:66:25:60:39:00:ab:
94:b2:22:32:a4:3b:74:53:6e:d3:af:90:e3:69:f0:
d1:f7:89:82:32:be:1f:87:c5:9f:d4:77:31:db:69:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:48:1A:2D:B3:0A:12:A3:7E:72:EA:39:A7:CE:08:3D:54:A8:4E
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:ec:1f:f9:04:08:68:48:3d:49:8d:8e:32:0d:0a:92:af:
ba:55:ab:01:eb:f2:47:bf:87:2c:52:81:18:17:20:d1:c8:d6:
e6:af:28:c9:a7:f5:9f:e9:33:19:55:a7:15:62:1c:d2:d4:81:
0c:95:e4:bc:0a:07:a8:42:e9:36:81:53:9d:d1:60:ca:4c:17:
28:21:0a:9b:9e:be:0e:20:b3:91:1d:73:e9:33:71:63:b3:88:
35:e7:18:91:f4:ee:b6:6d:b0:6d:de:d4:d0:c4:cf:2d:bb:61:
94:12:5f:24:1e:6d:43:cd:87:19:22:c3:f8:03:04:78:a0:ee:
fd:1e:6b:1a:4c:1b:00:a6:b5:55:ab:7d:72:34:14:80:d0:35:
92:83:2b:db:3c:7b:dc:5f:39:15:3a:2a:93:80:4e:0f:3e:16:
c5:d7:de:23:da:1e:d7:95:27:16:86:17:d0:c9:78:67:81:7b:
03:1c:35:30:60:14:31:22:28:92:a1:57:92:60:74:0e:6e:b7:
08:66:c9:0d:71:41:d7:31:8d:40:cf:bd:26:6d:bc:76:a8:2b:
66:79:34:06:3c:81:36:8b:17:0a:0c:ec:92:e3:62:a4:07:56:
87:01:e8:e2:23:8f:3e:02:1b:d4:68:77:96:55:b7:2f:dc:c2:
07:57:b7:46
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZki+uCado3FBkjX+BzYSIaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj
YTMxOWEwHhcNMjUwOTA3MDcwMTMwWhcNMjUwOTA4MDcwMTMwWjAzMTEwLwYDVQQD
EygwMWIxNDgxYTJkYjMwYTEyYTM3ZTcyZWEzOWE3Y2UwODNkNTRhODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Gx1j3oZQNVrGCwJKLu8Q33h2dJ
QH7eMz94x3CJmIF0pgIJeeanGsW+vomM3UWoqSkZr+gcuZMamIlo9AsbPLc1DD4O
K68u2QqFMuwbhe+o0BJEk51eje9Gu0OigsMNmKQCjhf7CmEdSPqYRegkvUql0lNx
IRcZ1WFyzGAQlvbM+UiMBHg3KV5WbsVnDBCm+i09tFfX9gDRtEcM7cwGNyD7p1wn
Ff99uDcbhdia/GVkMmUUx0PQ48Kbeq7tDMHFsqe8OWp4SCNofVzRFJLAkBN62L7Z
8m4iq2FmJWA5AKuUsiIypDt0U27Tr5DjafDR94mCMr4fh8Wf1Hcx22nRvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAGxSBotswoSo35y6jmnzgg9VKhOMB8GA1UdIwQY
MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2
LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz
ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWjs
H/kECGhIPUmNjjINCpKvulWrAevyR7+HLFKBGBcg0cjW5q8oyaf1n+kzGVWnFWIc
0tSBDJXkvAoHqELpNoFTndFgykwXKCEKm56+DiCzkR1z6TNxY7OINecYkfTutm2w
bd7U0MTPLbthlBJfJB5tQ82HGSLD+AMEeKDu/R5rGkwbAKa1Vat9cjQUgNA1koMr
2zx73F85FToqk4BODz4WxdfeI9oe15UnFoYX0Ml4Z4F7Axw1MGAUMSIokqFXkmB0
Dm63CGbJDXFB1zGNQM+9Jm28dqgrZnk0BjyBNosXCgzskuNipAdWhwHo4iOPPgIb
1Gh3llW3L9zCB1e3Rg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:26 2025 by rpki-client