Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: 4rL+vMa9qsHJyvLFZWWqoNVUuO2STOVg853gyS+dMdw=
Subject key identifier: B4:D8:BF:CF:EE:94:02:31:15:EE:FA:1E:B4:52:B1:B3:2C:6C:28:9A
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 0196857F95CEC482983EEE043DB490144ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0673
Signing time: Wed 30 Apr 2025 07:00:53 +0000
Manifest this update: Wed 30 Apr 2025 07:00:53 +0000
Manifest next update: Thu 01 May 2025 07:00:53 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: CJmgtOhD0IHDcQ/Y9v1heOfbc21PK6NxSvgpu8VuKFU=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:95:ce:c4:82:98:3e:ee:04:3d:b4:90:14:4e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Apr 30 07:00:53 2025 GMT
Not After : May 1 07:00:53 2025 GMT
Subject: CN=b4d8bfcfee94023115eefa1eb452b1b32c6c289a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:97:20:04:ec:e2:b1:4c:a8:e1:11:02:cb:
2c:27:35:fe:27:90:2a:78:29:ee:92:ba:15:8d:44:
04:65:27:1b:cf:17:58:5d:fb:58:81:80:68:4c:3a:
e5:ca:67:72:92:98:5d:cd:b9:0d:15:26:8d:29:7c:
97:cf:8a:9f:1f:bf:e3:84:f1:b8:87:ea:5e:c8:70:
35:9e:d1:45:ed:4a:89:99:58:a3:9f:6a:1d:a8:37:
37:ff:5d:65:91:ce:38:52:89:48:44:a3:3c:88:c2:
10:4d:f8:af:c2:08:bc:1d:90:64:97:4e:84:61:fe:
29:41:67:99:0c:1c:96:aa:28:c3:60:71:e5:a0:bc:
5f:1f:c0:bb:21:8f:31:b9:87:e6:5e:0b:9e:6f:cb:
7e:da:43:91:37:e6:85:bd:1f:6c:61:1f:06:24:95:
ee:0e:f8:5b:10:c1:48:2d:00:5b:3f:f1:7a:71:5f:
59:66:12:29:1d:47:c9:59:1e:cd:dc:90:e2:02:75:
5c:2c:c0:8c:70:23:88:ab:62:c4:15:c0:16:21:77:
a5:d4:9d:41:7d:26:7a:99:3e:c6:e6:cd:2f:9a:4b:
9a:ef:c2:a5:28:93:62:b9:8d:7e:67:d1:36:31:59:
53:64:1c:56:1f:19:c5:61:90:ba:59:42:c2:48:05:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:BF:CF:EE:94:02:31:15:EE:FA:1E:B4:52:B1:B3:2C:6C:28:9A
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:77:2c:6f:ec:19:45:1d:aa:c2:cc:cf:c7:2a:37:84:77:b4:
3b:0f:0c:1b:ce:ea:d1:44:e2:a9:2b:c9:41:21:22:e8:82:57:
22:8e:14:7e:6c:ff:0c:70:46:d9:2d:72:05:3f:7e:eb:e8:ec:
7d:16:37:1d:7e:66:82:2e:a0:2a:4f:1e:93:5c:bd:0f:85:ed:
e8:51:9b:8d:91:9c:6a:fa:33:bc:44:83:9b:5b:48:76:bc:4f:
e5:7f:87:c1:d4:fc:9c:ef:6c:c4:ea:51:66:74:99:ea:f2:8d:
93:22:56:2d:8d:9e:e0:e0:70:d7:a6:53:65:85:77:7d:5a:93:
ba:63:a3:bb:4b:04:2d:f4:73:06:21:17:d2:f7:12:83:9b:5d:
a6:2b:c3:80:d1:3e:9a:82:15:d4:73:d8:9b:31:5a:0b:00:f5:
0b:4c:dc:b7:44:96:14:6d:c9:7e:f5:f9:6b:61:55:07:8f:aa:
f6:fa:72:79:d1:fb:a1:3b:ef:82:34:7a:4e:f3:00:4e:f1:a0:
d9:3a:d7:91:88:d6:f1:ee:19:6d:c4:70:2d:5a:ed:33:f0:85:
84:5a:2a:42:96:5f:4e:a7:36:34:12:41:0a:0e:f0:bc:4d:c1:
2b:6f:85:aa:51:40:24:45:24:3e:0a:ba:37:8f:05:2c:6b:18:
99:0b:c0:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFf5XOxIKYPu4EPbSQFE7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjUwNDMwMDcwMDUzWhcNMjUwNTAxMDcwMDUzWjAzMTEwLwYDVQQD
EyhiNGQ4YmZjZmVlOTQwMjMxMTVlZWZhMWViNDUyYjFiMzJjNmMyODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfmXIATs4rFMqOERAsssJzX+J5Aq
eCnukroVjUQEZScbzxdYXftYgYBoTDrlymdykphdzbkNFSaNKXyXz4qfH7/jhPG4
h+peyHA1ntFF7UqJmVijn2odqDc3/11lkc44UolIRKM8iMIQTfivwgi8HZBkl06E
Yf4pQWeZDByWqijDYHHloLxfH8C7IY8xuYfmXgueb8t+2kORN+aFvR9sYR8GJJXu
DvhbEMFILQBbP/F6cV9ZZhIpHUfJWR7N3JDiAnVcLMCMcCOIq2LEFcAWIXel1J1B
fSZ6mT7G5s0vmkua78KlKJNiuY1+Z9E2MVlTZBxWHxnFYZC6WULCSAWPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTYv8/ulAIxFe76HrRSsbMsbCiaMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3csb+wZ
RR2qwszPxyo3hHe0Ow8MG87q0UTiqSvJQSEi6IJXIo4Ufmz/DHBG2S1yBT9+6+js
fRY3HX5mgi6gKk8ek1y9D4Xt6FGbjZGcavozvESDm1tIdrxP5X+HwdT8nO9sxOpR
ZnSZ6vKNkyJWLY2e4OBw16ZTZYV3fVqTumOju0sELfRzBiEX0vcSg5tdpivDgNE+
moIV1HPYmzFaCwD1C0zct0SWFG3JfvX5a2FVB4+q9vpyedH7oTvvgjR6TvMATvGg
2TrXkYjW8e4ZbcRwLVrtM/CFhFoqQpZfTqc2NBJBCg7wvE3BK2+FqlFAJEUkPgq6
N48FLGsYmQvAsQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:46 2025 by rpki-client