Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: FFlUfZ0TXg5LFaikOeS8axTsIwKKOBPk/2BBDFPvCVs=
Subject key identifier: 0A:3F:4A:A7:B4:25:88:90:F6:73:6C:A0:35:BF:D5:22:FD:1D:B7:B2
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 01974AB1B356F1E8A9A2D358523773A209FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 098E
Signing time: Sat 07 Jun 2025 14:00:49 +0000
Manifest this update: Sat 07 Jun 2025 14:00:49 +0000
Manifest next update: Sun 08 Jun 2025 14:00:49 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: X8qeYmzUS55lWQe5NFd7hfZTINN48wVCgRCipEtS0FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:b3:56:f1:e8:a9:a2:d3:58:52:37:73:a2:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Jun 7 14:00:49 2025 GMT
Not After : Jun 8 14:00:49 2025 GMT
Subject: CN=0a3f4aa7b4258890f6736ca035bfd522fd1db7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:6d:17:3f:3f:51:4b:79:ef:84:37:8a:45:
d8:d9:29:3c:f9:6d:3c:6a:59:f7:dd:af:d4:be:77:
1f:56:83:d6:7a:85:94:2a:cc:43:7d:3f:8c:12:89:
95:8a:5f:e9:29:ad:c4:1a:15:cd:a6:24:2a:e0:f4:
21:ca:04:48:5a:ef:1b:69:cb:87:d9:dd:5d:dc:f2:
79:9a:d9:21:44:9b:f3:87:f9:ab:52:05:fa:39:f1:
e8:ca:58:06:83:e2:db:2d:8d:37:7a:1c:7e:23:0d:
f3:60:73:b0:fd:b0:ad:4c:92:e9:4e:c7:26:7b:ca:
17:6a:98:02:75:23:89:98:d8:f4:b3:c3:8d:23:2e:
31:98:a8:43:05:69:58:54:f4:cf:87:4f:06:83:b4:
96:16:b3:86:3b:b4:fe:69:b1:18:a0:ea:4f:d4:d9:
4d:9b:e6:7a:51:e3:71:95:37:21:99:77:51:a7:04:
a2:28:18:5a:e8:1f:5f:85:12:a5:a5:2b:3c:91:20:
3e:bb:57:81:6b:e3:b0:76:de:de:5a:84:5f:d8:26:
5a:b5:a9:df:8c:fe:ea:0c:ee:a4:ab:29:15:9c:3d:
f0:32:84:d0:29:9b:b2:8a:de:f4:39:ca:ec:27:15:
1e:45:77:66:1f:19:7c:1c:35:b9:1c:af:4a:28:ef:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:4A:A7:B4:25:88:90:F6:73:6C:A0:35:BF:D5:22:FD:1D:B7:B2
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:be:80:d1:c8:49:71:6e:d6:38:bb:12:7d:83:f6:5e:15:14:
1a:4a:55:0a:eb:61:34:06:02:9f:cd:63:d5:a0:05:67:df:a4:
dd:9c:5b:64:1b:5d:70:68:50:1e:81:80:c5:03:ef:e5:13:a9:
86:d6:cb:23:41:2f:4d:60:af:21:59:b7:62:5a:b5:87:f1:cc:
ae:b6:72:f4:bf:c5:e0:c7:35:67:cf:dc:f2:94:e7:ff:a5:0b:
4f:4a:55:93:b4:b6:37:30:7a:d4:70:28:80:4f:85:1f:83:0d:
19:fd:e0:bb:9b:1a:83:b3:29:12:61:4e:5a:6f:cc:d2:52:6d:
c7:a5:31:21:f5:b4:75:6d:e4:0d:67:0b:74:79:a4:c5:2a:28:
2e:a1:c0:71:2f:7f:09:cd:f3:50:36:2f:16:0f:04:b3:d3:6f:
14:48:10:58:16:5b:85:08:3e:d0:d9:5c:54:bf:74:f0:3d:eb:
61:0b:fd:69:c2:3c:5c:0d:ca:1c:05:cd:d8:e9:d6:b7:a5:12:
e5:d7:c4:13:b4:13:26:b0:15:3c:13:00:d4:2c:5a:a1:3f:eb:
fd:c4:ef:5c:20:3d:1f:ba:4a:a9:9d:fd:b4:49:91:08:ca:6c:
7f:8d:32:e5:2a:35:18:3c:fb:f3:76:64:fe:55:ad:cd:d0:06:
4e:ba:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:31:23 2025 by rpki-client