Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier: pAoOG4jzVF7ufRMioYw+cAr2adHFsi3im+LmiP5M43E=
Subject key identifier: 9D:FF:EB:47:66:03:8A:5A:1B:26:9E:82:7A:1E:11:89:62:08:C6:5E
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 0196AFC4C6048620FE949B8EAEF0E33A0E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number: 0B02
Signing time: Thu 08 May 2025 12:00:30 +0000
Manifest this update: Thu 08 May 2025 12:00:30 +0000
Manifest next update: Fri 09 May 2025 12:00:30 +0000
Files and hashes: 1: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: RGVSTuQflnkdKKVH4gwIoEo2So7CXcm7cgoVAmw9I6Y=)
2: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (hash: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:c6:04:86:20:fe:94:9b:8e:ae:f0:e3:3a:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: May 8 12:00:30 2025 GMT
Not After : May 9 12:00:30 2025 GMT
Subject: CN=9dffeb4766038a5a1b269e827a1e11896208c65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:99:e4:94:e7:59:35:70:af:41:ae:ce:ff:
ea:f8:17:6d:9c:51:8b:b9:03:37:29:8e:bc:01:4f:
09:25:14:7f:b4:1a:dc:51:79:48:08:f4:9d:4a:b3:
e5:bc:c5:07:02:6f:2c:fa:d2:f8:39:af:5e:4c:68:
0b:9d:b7:66:b8:75:67:ec:35:94:b7:ea:98:c6:6d:
03:8e:89:05:9c:b7:f1:b8:e5:0b:60:7a:e0:97:6d:
38:37:d7:a0:c4:34:d3:cb:ee:0b:83:8c:c8:36:f5:
49:42:be:12:42:96:d1:45:9a:00:f3:3c:7e:3a:19:
73:72:77:39:23:77:fb:c0:cf:27:04:f7:6a:a1:58:
0b:d2:c0:db:e0:0c:d1:b1:91:13:a2:08:1f:0d:47:
a5:c7:d2:6b:95:ca:35:34:a2:bd:30:29:a0:31:44:
e5:6e:42:e3:be:d5:75:7a:af:ec:7d:53:4a:ab:a5:
92:fb:36:1e:c1:cd:c4:ce:f8:58:84:6c:ef:b7:dc:
67:e3:74:22:09:9e:49:3b:48:71:23:f1:bc:2d:7b:
19:55:c0:0b:82:e1:09:3f:09:4c:1f:d9:1e:bb:6c:
17:0b:7c:36:86:c9:76:1d:f5:57:53:82:39:fb:25:
d0:41:af:3e:60:55:24:36:2c:de:8f:8a:10:50:3b:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:EB:47:66:03:8A:5A:1B:26:9E:82:7A:1E:11:89:62:08:C6:5E
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9c:f8:be:d2:70:bb:97:a0:4d:37:93:43:98:7d:73:7f:6b:
2a:2f:12:88:20:6d:9a:a2:c7:14:e1:43:31:ab:ec:a3:99:47:
38:e1:ee:66:7f:38:b6:fe:ce:8b:5d:57:7d:f0:37:44:04:f7:
08:35:66:25:20:40:49:70:02:9f:17:57:c7:be:e5:1e:31:7e:
f5:64:d7:32:4e:d3:ce:9c:bf:1a:85:1e:4d:38:f1:c2:09:c1:
df:a9:47:07:71:a0:3b:d2:70:7b:bb:8f:7e:ee:08:4a:23:1d:
63:54:cb:0d:1a:ff:de:7c:ec:e4:64:d6:52:1e:5c:37:63:4d:
22:fe:50:07:69:2f:e1:63:d8:4a:75:fb:83:3f:b2:e2:7e:53:
35:7b:c6:80:5c:3a:be:bc:cf:34:b8:7a:c5:c9:47:3b:a1:f5:
7e:c3:58:41:1e:75:6d:5a:b8:91:c5:dc:e4:61:ab:0c:47:f7:
b3:17:6f:8d:c1:14:44:7d:27:ff:7c:67:12:23:7a:85:07:ed:
fe:55:63:6b:50:50:34:2c:db:ef:e8:10:43:08:21:e1:de:73:
ac:28:38:82:8c:8f:7c:34:f1:ae:27:68:bc:e2:4c:6d:33:06:
72:36:6f:07:75:28:7d:a0:75:8b:24:3c:96:4b:c2:3e:3f:f2:
76:5d:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:01:34 2025 by rpki-client