Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: +4jBi+hE1Cb76wL+wpwn3+e4TJ3S2IdhCDN4CeUI/hI=
Subject key identifier: CE:E2:B8:B5:F7:06:7D:50:D0:24:D5:C3:57:40:47:BD:96:54:46:95
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019A50E3389DF58006348D88196E76CE7466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 086A
Signing time: Tue 04 Nov 2025 22:00:59 +0000
Manifest this update: Tue 04 Nov 2025 22:00:59 +0000
Manifest next update: Wed 05 Nov 2025 22:00:59 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: bYNow61VCPLgPQXSI/BG/m6lpvjM8efj5Iz6HqIfIRk=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:38:9d:f5:80:06:34:8d:88:19:6e:76:ce:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Nov 4 22:00:59 2025 GMT
Not After : Nov 5 22:00:59 2025 GMT
Subject: CN=cee2b8b5f7067d50d024d5c3574047bd96544695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:eb:64:ce:05:05:7f:c8:63:76:c5:af:a9:
b1:c8:89:24:b9:95:4d:03:ec:4d:05:d9:76:49:14:
64:19:03:dd:d4:82:92:5d:65:25:77:d7:76:db:e0:
59:37:bd:e7:57:69:fb:56:dd:6d:2d:5a:5a:3a:5f:
ad:08:27:60:6c:6d:09:da:51:86:be:66:30:76:2c:
d4:77:46:e7:35:91:35:95:81:da:c7:c8:88:6e:6c:
1e:72:f5:19:69:c5:20:d8:d1:37:05:fd:95:1d:3a:
01:8f:24:fc:c9:d8:96:ac:8e:e0:aa:e7:1e:1f:fb:
61:2e:b9:4f:ac:cb:3c:3d:18:8a:60:3b:00:f5:f1:
80:09:ff:d6:5c:92:86:a3:46:cc:01:ff:2f:6f:11:
80:e2:88:2a:43:04:bc:8e:90:78:f9:49:cf:1c:10:
63:e0:58:de:6f:a9:42:c2:25:8b:2b:31:97:e1:f9:
50:6b:ed:9e:a2:48:f6:11:8d:7b:5c:e0:5f:e6:2d:
d6:c8:7c:6e:88:5b:fe:ba:11:7c:67:d3:c2:af:41:
9f:e6:99:d4:02:25:92:09:cd:5a:73:19:00:27:81:
a0:db:9e:44:ae:62:d8:ff:8f:69:bb:8f:9d:cc:ab:
2c:db:44:89:f5:d1:c2:0c:10:83:62:8f:61:47:03:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:B8:B5:F7:06:7D:50:D0:24:D5:C3:57:40:47:BD:96:54:46:95
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:98:f7:bb:09:3e:8d:f1:93:5f:6a:1a:56:fb:a9:4f:5a:06:
de:46:22:30:20:8c:10:a7:6d:ea:33:2f:02:1d:2b:20:ef:ec:
a2:ba:64:ae:14:50:31:dd:cb:e5:d6:48:c6:33:2d:ed:e0:f9:
31:02:01:9e:fb:17:2d:90:e2:87:5f:bd:d2:0b:3e:84:01:5c:
c3:f3:f7:1e:ee:92:ea:e0:65:17:6b:cf:8e:1d:8c:d0:52:b9:
90:95:c9:e2:44:8b:11:78:9b:25:83:86:fa:97:1c:e7:26:f1:
00:cb:fc:d8:11:55:84:bd:de:6a:a1:8e:68:0f:8b:ae:bf:10:
47:6c:9d:bf:92:8c:47:b3:74:27:e0:ee:5a:93:4f:6f:4a:70:
4c:e9:e3:9e:54:25:2c:c3:f9:7f:71:4f:ff:5b:4a:ef:e6:76:
22:b0:46:b0:20:1e:5d:b5:44:e4:63:d4:7a:75:ed:2a:04:3d:
10:b9:22:95:a4:75:df:57:00:23:45:94:34:aa:c2:02:61:59:
24:36:81:11:fa:9b:10:cf:dd:b3:94:f9:07:36:65:c3:07:4b:
5b:86:50:a0:ed:35:ba:65:f0:87:d2:c7:06:55:ec:5a:27:43:
11:3a:e2:e0:68:88:3c:2b:8e:1a:ab:5d:16:59:da:88:ad:0d:
26:ab:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:29:06 2025 by rpki-client