Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: Oy601A0cWG/yR7EmvfeK4OvtLwXgh0P6qRYMv+7qdn4=
Subject key identifier: A4:72:04:41:FC:2C:D7:97:2B:AE:83:81:67:BA:E5:E5:1C:EA:BC:EE
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 01988B104969CF2B3EC67EA4A3BA6C38D52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 077F
Signing time: Fri 08 Aug 2025 19:02:37 +0000
Manifest this update: Fri 08 Aug 2025 19:02:37 +0000
Manifest next update: Sat 09 Aug 2025 19:02:37 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: N6ourWsNbt+vxa3gzBCodCi4Xj6BimFFquEinsJh130=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:49:69:cf:2b:3e:c6:7e:a4:a3:ba:6c:38:d5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Aug 8 19:02:37 2025 GMT
Not After : Aug 9 19:02:37 2025 GMT
Subject: CN=a4720441fc2cd7972bae838167bae5e51ceabcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:b3:f6:ef:62:86:ac:15:b7:78:c7:74:55:
3b:a8:ea:c1:16:96:19:e9:9e:bf:3a:e4:96:2a:bc:
0b:ca:15:62:84:78:12:98:26:09:00:7c:47:87:98:
44:32:bc:d5:97:10:b9:a2:85:58:10:80:96:f3:b9:
1c:7d:cd:60:f0:c8:73:22:f6:6c:20:6d:75:6e:ec:
40:0d:93:fe:7f:2e:23:f7:ba:74:35:fe:60:41:99:
06:b7:1a:df:c7:16:29:8f:59:00:b2:d0:58:89:c9:
93:6c:ea:96:df:1d:4a:4c:6c:36:25:6b:34:42:20:
6c:c3:6e:14:63:dc:e1:47:7f:ac:6b:de:82:49:fe:
04:60:43:6d:d7:5b:61:9d:af:f5:18:ad:4a:70:df:
51:db:87:c4:7b:14:a1:80:f0:a4:b4:4d:a6:37:9e:
a3:69:ea:ee:2b:c7:cc:36:cd:35:51:98:46:30:2a:
1d:ac:76:72:56:93:78:4a:26:06:0e:48:9a:80:7b:
8c:a0:20:42:24:ba:1f:d7:ee:60:40:65:e0:8f:8d:
bf:5d:a7:cc:51:b5:99:91:96:46:0a:65:a7:7a:60:
a4:06:32:57:60:e6:39:bf:82:dc:8e:b5:04:84:d6:
d3:62:95:b9:86:06:be:fe:7e:14:1f:0a:41:37:90:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:04:41:FC:2C:D7:97:2B:AE:83:81:67:BA:E5:E5:1C:EA:BC:EE
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6c:f7:84:14:00:9e:6e:26:10:8a:01:bc:76:49:66:49:f4:
7c:af:f8:c3:09:21:ce:47:e9:ce:54:02:b6:80:fd:4b:82:16:
91:68:6d:9b:b6:5d:d0:c3:39:ef:56:cf:8c:43:74:03:bf:44:
0d:17:b6:d1:ea:41:b4:7d:55:cc:de:9b:2b:04:d2:d8:b3:a3:
9a:bf:47:4d:8f:bb:d1:28:d7:9e:3f:6a:4f:41:e8:58:35:31:
75:b6:aa:4d:0e:ba:0d:95:1f:b6:1f:55:d5:2b:8b:72:58:2a:
9b:10:52:be:24:6d:fd:50:0e:3a:4d:f4:b0:1d:f4:11:49:ca:
98:92:3c:da:5a:87:10:22:83:80:02:3c:5e:b6:6a:f5:ee:33:
a3:50:50:dc:02:ca:12:c8:92:10:62:68:23:80:20:f3:39:63:
66:c7:26:27:c5:98:e9:74:62:86:0a:3f:3a:8b:dd:da:5f:01:
dd:d6:4d:25:fb:b4:f1:23:37:7d:bf:76:3b:97:02:2e:89:55:
4b:81:72:19:ae:b9:61:bb:94:99:7e:cf:20:94:59:65:f7:b2:
84:fc:72:49:c7:9d:b1:29:af:4a:83:34:7b:da:00:27:dc:63:
2b:e2:9b:48:98:4c:63:3f:b8:be:d5:73:f8:3b:64:f6:af:35:
b7:f4:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:04:02 2025 by rpki-client