Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: 0i3KlcXeSu1/dCFdBTXON8Y/q6AFxoEcQCdAt3XZhm4=
Subject key identifier: B8:5D:22:7F:0D:3B:47:94:E6:87:58:A3:73:78:C5:97:D5:EE:B0:C9
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 0197CBDF52B81EE13FBF90A21669B930CAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 071C
Signing time: Wed 02 Jul 2025 16:01:39 +0000
Manifest this update: Wed 02 Jul 2025 16:01:39 +0000
Manifest next update: Thu 03 Jul 2025 16:01:39 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: rz+jmQusXxQ4B/kWX7JHGdiX59jwuPGrgpDxucyNh6s=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:52:b8:1e:e1:3f:bf:90:a2:16:69:b9:30:ca:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Jul 2 16:01:39 2025 GMT
Not After : Jul 3 16:01:39 2025 GMT
Subject: CN=b85d227f0d3b4794e68758a37378c597d5eeb0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:5f:aa:71:5b:97:ac:5d:83:2f:40:81:19:
b9:95:20:cd:06:74:37:9b:ff:f1:de:51:99:c6:9c:
9f:3a:cf:3f:02:7b:04:54:ab:bf:e2:d1:32:7f:e6:
7a:fb:f8:2f:20:95:d5:61:e6:b8:1c:32:a9:5e:7e:
a3:a9:8e:1b:6b:2b:ae:3a:7b:eb:21:b0:3a:2c:0f:
1e:c8:92:6c:d0:7e:98:1a:14:5d:b9:ec:0b:03:f2:
ef:a3:32:88:27:0c:b1:32:e0:6e:40:2d:45:b5:fb:
f4:59:c4:e3:b5:1d:b0:33:93:2b:53:d4:a4:ba:94:
37:88:9d:cf:ee:db:81:8a:4e:44:62:a9:7c:58:81:
38:44:e8:f8:c2:37:47:55:8a:b2:e8:88:5e:d4:54:
03:22:a5:1b:62:ab:c3:d6:76:fd:8f:0b:45:2e:ed:
11:d9:0a:30:26:3c:23:6a:4f:3a:55:fc:af:78:2c:
41:58:49:6e:71:4b:fc:f3:e4:38:d4:29:e2:e1:1c:
8d:4c:60:25:59:2c:ca:ab:3c:06:ac:f7:bf:43:6d:
12:c6:0e:0a:0d:2c:3b:b7:ca:44:96:0a:c1:79:74:
6e:cd:6e:31:15:91:70:0e:ed:7d:b8:13:59:7b:ca:
72:19:b3:ff:83:59:24:92:09:dd:a5:9f:e2:d5:b5:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:22:7F:0D:3B:47:94:E6:87:58:A3:73:78:C5:97:D5:EE:B0:C9
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c7:dd:bc:7b:d1:01:39:ee:fc:02:5d:05:a6:d1:c2:95:d5:
11:81:d3:07:c6:4f:3a:69:f1:a1:d0:f6:f7:92:99:7e:26:9b:
6c:1f:39:9f:75:31:c8:c5:8f:ac:94:cb:25:c9:14:ed:43:62:
3c:e9:54:4f:01:59:db:d7:91:94:d4:56:23:bd:c7:f1:1a:7a:
83:5e:4f:8e:fc:66:a5:ef:d4:33:f9:03:76:04:35:ba:25:b6:
06:f6:5e:89:dd:33:64:07:55:69:c9:57:22:68:2e:ad:c6:52:
c5:1a:3d:d5:d7:ac:21:ab:32:67:3b:25:b5:14:fd:42:75:b2:
7d:80:85:b2:d3:f9:22:af:e0:39:eb:dc:ce:c6:f0:e0:3e:d5:
5e:60:f9:7e:4d:7a:1a:34:b1:55:14:89:af:e6:6f:f6:96:56:
30:22:e7:03:d3:2b:90:23:f4:6e:1e:cd:93:9e:c1:e1:ed:f2:
f7:be:8c:d2:bd:96:76:ab:98:63:42:dd:73:6e:fb:0b:91:a7:
8c:3a:7a:46:68:e7:f1:6d:97:a3:fa:95:f2:ef:64:6c:72:d3:
04:f9:58:8f:b1:62:a0:d4:bd:85:09:2c:ec:47:cf:f5:47:e9:
8b:94:4e:ad:c1:8e:9f:25:d6:37:73:df:27:69:16:a6:31:a0:
8a:ce:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:45:51 2025 by rpki-client