Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: IbQacodlLzFLOxovOT3uOmWc83D+istKgemRPY0oNgw=
Subject key identifier: 98:2D:5B:23:D2:FD:F7:66:D7:DD:54:1D:78:42:02:80:5D:37:41:B0
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 0198D4737CB8CC9AF097242E73188AE0997D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 07A5
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: ChghgeZzmWzubyLuPJWqJ+ARBAViL4X7KnzvzUfRFfo=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7c:b8:cc:9a:f0:97:24:2e:73:18:8a:e0:99:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=982d5b23d2fdf766d7dd541d784202805d3741b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:a1:f4:9f:69:db:be:2b:bf:71:98:c9:66:
e2:51:a0:04:6f:77:0c:ab:14:86:3c:ac:83:a8:e5:
cd:c0:51:7d:71:ba:e2:4c:99:e9:60:4e:c2:6d:56:
06:1c:80:ab:f3:b1:12:89:f2:0a:32:2d:08:f9:3b:
0b:5a:bf:b4:41:e8:2d:e8:79:27:e8:df:a0:68:70:
d0:8a:15:52:f7:31:1c:79:b6:b1:31:99:ba:67:73:
5f:73:ea:8b:a6:bc:8d:f8:4b:1a:54:e7:1b:79:7e:
70:cc:ed:54:ba:50:ca:9e:3d:fe:5f:45:a5:c1:b5:
d5:d4:b7:9a:5d:47:fb:fd:c4:4c:dd:82:d6:fd:33:
d1:81:8c:96:70:a4:c9:e6:3c:f7:29:d1:b8:84:5d:
45:f5:31:ba:bd:73:a2:48:1c:28:c6:c9:63:17:e2:
9c:ca:00:8e:04:e7:a3:c3:08:48:6d:2d:7d:0b:04:
a6:24:c7:8b:8d:bf:e7:3c:02:6b:69:fa:d9:8f:eb:
fb:60:c4:a8:05:8a:f5:0b:84:42:94:45:ba:f9:9f:
ac:99:a0:52:24:50:ff:40:32:54:b0:c2:08:f9:f2:
62:0b:f5:12:e6:17:e1:b7:f5:a2:4d:2f:e2:1f:f1:
4b:15:b0:1d:57:c6:1b:1b:5c:7c:a0:da:a5:9a:19:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:5B:23:D2:FD:F7:66:D7:DD:54:1D:78:42:02:80:5D:37:41:B0
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0d:63:b7:0b:45:8b:bf:02:ed:27:2a:13:85:79:88:34:ee:
ae:d9:4b:9d:c0:e0:39:7a:51:ac:16:34:ba:6c:e3:39:e2:b2:
41:14:3a:90:19:7a:ef:ad:6c:f7:73:dc:07:85:bc:db:60:b7:
6b:86:8d:b7:2d:a1:bc:47:96:23:58:dd:28:33:23:2c:67:75:
d0:92:f4:b0:24:37:50:ea:a1:34:66:c3:63:46:cb:f6:8d:09:
53:42:03:cb:92:d4:09:3d:64:ea:e2:17:58:e4:33:cf:ab:5f:
70:0d:e7:8b:4f:73:f2:fe:d6:54:13:94:2d:bc:d0:04:63:f7:
d5:0e:54:e1:d4:b1:46:19:09:57:28:10:a2:64:00:2a:46:2e:
5e:db:f3:bf:e1:7e:74:fa:24:57:5c:3a:fe:ef:05:e0:be:85:
a2:69:12:ef:61:f5:d9:ee:ca:58:ef:29:20:d2:47:55:86:6c:
ff:87:f9:9b:6e:42:19:39:5f:6a:fc:63:09:50:b3:0e:59:cf:
4c:e8:84:c7:b0:e4:b2:8e:fd:c7:06:a7:64:94:83:76:77:84:
22:8b:0d:f1:dd:84:91:8b:4a:a6:09:8d:c1:87:ab:38:ff:5c:
9f:5f:b2:bd:89:24:8f:d0:e0:c7:23:ba:1d:5e:45:06:33:7a:
15:5b:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:44 2025 by rpki-client