Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
File: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft (raw, json)
Hash identifier: 6VasezZAyeKrk6Xz8RUXjRtv6qgIG3eF+fm0kpmum9g=
Subject key identifier: B8:48:F4:72:1A:6E:C0:62:46:70:6C:2D:A4:5F:9B:76:CF:9A:3A:68
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 01976D3D93611FCD62AE83F44F85AD35CA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
Manifest number: 0483
Signing time: Sat 14 Jun 2025 07:00:41 +0000
Manifest this update: Sat 14 Jun 2025 07:00:41 +0000
Manifest next update: Sun 15 Jun 2025 07:00:41 +0000
Files and hashes: 1: VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa (hash: UNFy8NT1hW32lKijy2cCpAEH6HPMdcOUxJumaoALuL8=)
2: mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl (hash: xVhMsvoKIc/8HaH/g1rBZ56RDYzLW5Jt52Uv6sJs1ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:93:61:1f:cd:62:ae:83:f4:4f:85:ad:35:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Jun 14 07:00:41 2025 GMT
Not After : Jun 15 07:00:41 2025 GMT
Subject: CN=b848f4721a6ec06246706c2da45f9b76cf9a3a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:ef:25:39:43:4a:cc:e4:46:00:2a:ea:ab:
a8:28:75:31:fd:38:dd:cc:4c:63:6b:29:ab:cf:2e:
73:fe:ad:71:de:a6:66:1b:c8:13:55:88:f1:c0:af:
ee:d5:7d:5d:3d:25:a6:70:67:5c:10:94:ef:7a:84:
24:54:83:f6:46:ae:6a:aa:2e:7e:79:52:e7:da:e1:
9f:17:46:56:01:94:d7:48:c8:f0:20:5a:b2:2e:fb:
3a:c3:b2:fc:b6:98:a5:6d:4f:25:41:ae:58:d1:4a:
9a:79:d1:ca:5d:5f:b1:e3:cc:2f:86:1d:6b:22:89:
14:78:ca:89:d0:dc:46:a9:30:9f:d9:ce:6c:98:ef:
9a:dd:f0:31:75:28:26:45:0c:c7:0a:24:d1:c2:f2:
ae:7b:10:52:56:6f:0a:85:d1:cb:26:83:6b:6d:70:
7b:8c:8f:3e:56:d3:a6:44:99:60:ad:6d:9c:af:31:
b5:ff:20:5c:51:cf:00:b7:d3:a5:a0:8b:14:23:d8:
45:3d:1d:ce:2b:d6:df:dc:70:36:b9:15:d2:4c:10:
d7:77:49:13:0c:fd:31:bb:76:ee:dd:c8:bf:eb:1e:
9f:47:33:b1:d0:f2:2f:f0:c9:8e:dc:b1:be:c8:0b:
ee:fe:bc:34:cb:8f:83:0c:5c:a2:c7:5f:85:ab:d1:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:F4:72:1A:6E:C0:62:46:70:6C:2D:A4:5F:9B:76:CF:9A:3A:68
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dd:71:a6:b5:fb:9b:10:dd:a6:44:b5:d4:10:f1:54:2f:57:
36:4b:f6:ae:98:be:1e:2b:ac:3b:7f:7e:ea:f2:23:21:0b:ad:
f4:07:d1:e3:42:b5:f8:25:d1:92:56:35:b4:e7:3b:b7:1d:31:
c9:bd:49:d3:0b:c6:e0:6a:2b:b2:9f:6e:56:e5:62:c7:31:39:
a8:bc:ba:d8:a5:ec:01:eb:2f:6a:80:fb:05:5d:0d:70:fa:cd:
6b:c4:c3:ad:cd:21:03:53:73:9f:7d:e3:52:67:01:25:7c:10:
ac:59:5f:7c:42:9c:54:71:8d:4b:a8:27:71:19:4f:ca:8c:64:
ae:f2:55:f5:db:74:9e:18:b9:d7:81:89:48:47:53:70:82:df:
70:5e:f6:58:2e:a9:d6:ef:b8:3b:aa:74:37:ab:ad:9c:f5:8f:
59:15:e2:ae:b3:04:dd:3b:72:c8:66:32:1e:ff:ee:05:dd:e2:
49:df:07:82:df:9d:18:3e:36:86:c0:c3:02:bb:86:ac:a4:0d:
a3:b1:2d:13:b5:41:47:f6:8b:b3:4b:98:51:eb:18:11:58:c9:
f9:7e:96:ae:a2:b4:e8:81:7d:0e:b3:d9:3b:de:25:49:5f:03:
db:be:4e:be:67:70:67:e2:9c:62:b8:e8:ee:95:9f:b8:39:f0:
00:13:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:41 2025 by rpki-client