Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: tyvJpPAh2iz7fC05Lfayw3Ghp5Ev20uD9IF7iOYd28o=
Subject key identifier: 4D:0F:23:B9:05:E2:E4:71:42:A1:62:D9:BA:13:73:50:63:F7:95:66
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 0196C7295110B5B680BC3F8E293038C2EA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0695
Signing time: Tue 13 May 2025 01:01:35 +0000
Manifest this update: Tue 13 May 2025 01:01:35 +0000
Manifest next update: Wed 14 May 2025 01:01:35 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: voqXyhKf4xGFII3RZwnBw7FRi7bxJdKJt5lpZo11Ow0=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:51:10:b5:b6:80:bc:3f:8e:29:30:38:c2:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: May 13 01:01:35 2025 GMT
Not After : May 14 01:01:35 2025 GMT
Subject: CN=4d0f23b905e2e47142a162d9ba13735063f79566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:c3:6a:89:f6:ae:25:be:d6:b5:1a:b8:fd:
64:66:27:ba:3a:c4:6b:62:d7:c3:fc:dc:b0:75:c3:
01:ca:8d:da:62:82:23:7c:2b:8d:a6:d7:ca:9f:03:
a4:45:87:7c:b9:25:75:33:30:27:67:89:47:cd:e0:
80:7d:db:6c:67:d4:91:dc:44:f5:93:19:9f:0f:11:
f8:cd:76:16:65:d8:21:e8:d8:36:42:b8:92:e2:bf:
42:7e:96:aa:57:de:2a:bc:98:c9:b8:02:ca:4b:d0:
48:96:dd:c2:ec:bb:03:9f:93:ae:72:b9:f3:67:93:
54:0c:2c:bd:40:db:79:fa:ad:15:39:84:98:56:58:
5d:c9:5f:bd:0f:01:59:94:59:3c:df:4a:24:5c:1a:
d1:0c:f7:e6:21:da:9c:02:33:0e:39:5c:c4:20:bd:
d7:6a:c1:09:55:af:82:4e:6f:77:2a:0f:16:2e:0e:
60:fc:56:16:eb:d0:94:4a:9e:0d:54:90:bb:7f:89:
35:05:94:95:77:b0:12:8c:e6:1d:a1:5e:d9:2d:2a:
05:c1:74:69:09:b6:1b:ef:08:72:c6:05:fe:62:ae:
08:cd:6e:66:95:c8:13:d0:ba:74:4b:32:5c:7c:72:
35:88:9b:3b:82:2f:ce:0c:14:52:ec:32:23:63:0b:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0F:23:B9:05:E2:E4:71:42:A1:62:D9:BA:13:73:50:63:F7:95:66
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:00:08:82:a7:c1:8c:e0:e6:be:28:8e:6a:22:72:5c:db:
5a:be:27:3d:0a:3b:30:e3:50:e1:c6:68:0e:65:7b:47:d2:8f:
83:95:73:80:b1:68:cc:08:9f:b1:af:fc:44:e6:09:19:b8:1a:
6a:79:4c:c9:40:2b:86:a3:c8:12:ad:27:34:82:16:f4:ec:6a:
de:9d:a2:84:25:64:f8:22:ab:40:5d:cb:d4:64:57:34:2a:c8:
c6:a8:79:28:35:31:a6:8c:7b:1d:59:8d:c8:b7:11:a8:33:7a:
09:9f:4b:f0:57:3e:19:70:d5:9a:d8:85:60:47:0d:ec:4a:ea:
c6:57:24:07:a2:16:82:f2:b6:88:e5:6d:71:2b:28:25:7c:35:
aa:f0:25:a5:e6:2e:79:79:c3:0a:b9:b8:d9:26:d4:b9:86:71:
f8:15:65:70:75:60:c9:97:83:40:e8:4e:95:25:c8:b4:e4:89:
ca:cf:38:7a:86:4a:c3:a7:8d:f7:12:e9:69:27:cc:37:d6:89:
60:31:c5:75:c0:9b:45:f6:32:65:05:90:4d:84:49:a1:cd:7a:
8e:07:39:7a:f3:e1:4e:34:0d:20:0a:8f:3f:40:06:a0:3a:dd:
75:d0:4b:8f:57:05:1c:41:42:2d:05:4d:72:d9:84:c7:18:04:
84:55:36:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKVEQtbaAvD+OKTA4wuo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjUwNTEzMDEwMTM1WhcNMjUwNTE0MDEwMTM1WjAzMTEwLwYDVQQD
Eyg0ZDBmMjNiOTA1ZTJlNDcxNDJhMTYyZDliYTEzNzM1MDYzZjc5NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAHDaon2riW+1rUauP1kZie6OsRr
YtfD/NywdcMByo3aYoIjfCuNptfKnwOkRYd8uSV1MzAnZ4lHzeCAfdtsZ9SR3ET1
kxmfDxH4zXYWZdgh6Ng2QriS4r9CfpaqV94qvJjJuALKS9BIlt3C7LsDn5Oucrnz
Z5NUDCy9QNt5+q0VOYSYVlhdyV+9DwFZlFk830okXBrRDPfmIdqcAjMOOVzEIL3X
asEJVa+CTm93Kg8WLg5g/FYW69CUSp4NVJC7f4k1BZSVd7ASjOYdoV7ZLSoFwXRp
CbYb7whyxgX+Yq4IzW5mlcgT0Lp0SzJcfHI1iJs7gi/ODBRS7DIjYwsp2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0PI7kF4uRxQqFi2boTc1Bj95VmMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRAACIKn
wYzg5r4ojmoiclzbWr4nPQo7MONQ4cZoDmV7R9KPg5VzgLFozAifsa/8ROYJGbga
anlMyUArhqPIEq0nNIIW9Oxq3p2ihCVk+CKrQF3L1GRXNCrIxqh5KDUxpox7HVmN
yLcRqDN6CZ9L8Fc+GXDVmtiFYEcN7ErqxlckB6IWgvK2iOVtcSsoJXw1qvAlpeYu
eXnDCrm42SbUuYZx+BVlcHVgyZeDQOhOlSXItOSJys84eoZKw6eN9xLpaSfMN9aJ
YDHFdcCbRfYyZQWQTYRJoc16jgc5evPhTjQNIAqPP0AGoDrdddBLj1cFHEFCLQVN
ctmExxgEhFU23w==
-----END CERTIFICATE-----
Generated at Tue May 13 10:23:09 2025 by rpki-client