Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: W0TQL/YDb2UAYh9ygN2gjr4mejp42tV8bHhOOiz7CRI=
Subject key identifier: 6D:D9:E4:D0:45:8D:6A:9E:9F:47:A6:E1:85:83:A8:CC:C4:20:75:F1
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 01991DD399C398DB1ECE22880D96D0FEC484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 07CB
Signing time: Sat 06 Sep 2025 07:00:30 +0000
Manifest this update: Sat 06 Sep 2025 07:00:30 +0000
Manifest next update: Sun 07 Sep 2025 07:00:30 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: 2OZaDNR5RZrhK02uUP20YBHOGhKUrLZJ6a/GqFoqg1s=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d3:99:c3:98:db:1e:ce:22:88:0d:96:d0:fe:c4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Sep 6 07:00:30 2025 GMT
Not After : Sep 7 07:00:30 2025 GMT
Subject: CN=6dd9e4d0458d6a9e9f47a6e18583a8ccc42075f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:60:c1:1e:d7:b0:97:78:5b:e8:6b:af:36:
7a:cb:0e:f0:53:f3:75:7b:01:3f:10:92:79:38:59:
20:c8:e5:85:c1:30:23:ea:9a:b7:8b:e1:62:95:4b:
dc:04:f9:00:d7:42:e0:c0:74:98:da:78:1c:c8:af:
ab:66:84:39:61:d7:1a:03:db:a7:5b:1a:87:45:20:
9c:25:b5:8f:e4:60:6e:0a:9b:71:aa:32:75:f1:21:
5a:c0:a6:67:d9:b5:e4:96:bb:fd:ae:a6:6c:df:98:
25:72:ce:93:23:c1:2c:7f:00:8c:7b:44:10:e0:85:
c3:78:e5:70:69:93:0c:32:7d:a6:d0:1a:fd:e9:d8:
e1:8a:c7:12:38:9e:74:88:36:ec:87:82:5a:e5:01:
88:44:54:13:46:5a:6f:a5:3c:31:fa:41:67:fa:fd:
64:4d:63:3e:6c:e2:6d:d0:f6:e0:c1:04:2b:e8:60:
4f:34:83:a4:58:04:33:a4:56:45:d3:eb:05:a9:33:
1a:b2:6f:05:95:d7:2a:90:55:ca:b2:54:49:24:0e:
a9:04:5b:35:28:4c:f4:fa:9f:6d:a9:9c:94:b5:81:
a8:81:08:8a:27:67:bb:79:40:8d:f3:e0:56:cf:de:
06:85:5d:0b:da:cc:87:91:63:b2:cd:3f:59:09:44:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:E4:D0:45:8D:6A:9E:9F:47:A6:E1:85:83:A8:CC:C4:20:75:F1
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3b:42:24:06:72:0c:76:fc:44:de:21:7f:48:37:dd:d6:fc:
a5:b1:c4:45:57:1e:53:34:05:75:11:e6:de:07:43:76:e7:07:
27:7e:4d:ea:18:ff:1c:4b:54:fc:81:c8:d1:41:55:89:78:28:
9e:56:bc:09:b3:a8:3e:e6:10:f6:ff:ba:e1:f5:50:5e:da:9b:
29:5b:a7:1b:51:9f:25:a1:c1:d0:26:ee:99:a9:92:60:f2:88:
87:fe:43:2e:9d:e6:24:5a:81:d7:15:ae:cd:1a:95:2e:dd:75:
84:64:d7:0d:c1:da:07:33:9d:f6:f0:18:f3:5d:72:8f:10:69:
03:c3:03:d7:ef:6c:09:bf:8c:b7:53:b9:20:f6:53:1a:bc:e6:
b2:8f:a7:dd:ed:ce:79:78:84:b1:aa:43:a6:b9:a4:58:19:ff:
ea:35:9f:50:be:08:c0:4e:c6:3c:51:5c:8d:f0:17:14:82:39:
f2:6d:60:4a:bb:f9:c3:16:1b:a1:47:5a:14:ad:81:ff:6d:46:
ec:93:a8:df:5c:6b:8c:d2:56:a0:9b:01:fd:23:09:a7:88:3c:
48:29:5f:34:45:cc:38:40:24:ae:df:ae:28:4c:b3:44:84:46:
e0:0b:9b:88:a2:95:f5:c5:76:d1:0f:90:3f:c0:a2:75:7a:c3:
f8:00:13:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkd05nDmNseziKIDZbQ/sSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjUwOTA2MDcwMDMwWhcNMjUwOTA3MDcwMDMwWjAzMTEwLwYDVQQD
Eyg2ZGQ5ZTRkMDQ1OGQ2YTllOWY0N2E2ZTE4NTgzYThjY2M0MjA3NWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9FgwR7XsJd4W+hrrzZ6yw7wU/N1
ewE/EJJ5OFkgyOWFwTAj6pq3i+FilUvcBPkA10LgwHSY2ngcyK+rZoQ5YdcaA9un
WxqHRSCcJbWP5GBuCptxqjJ18SFawKZn2bXklrv9rqZs35glcs6TI8EsfwCMe0QQ
4IXDeOVwaZMMMn2m0Br96djhiscSOJ50iDbsh4Ja5QGIRFQTRlpvpTwx+kFn+v1k
TWM+bOJt0PbgwQQr6GBPNIOkWAQzpFZF0+sFqTMasm8FldcqkFXKslRJJA6pBFs1
KEz0+p9tqZyUtYGogQiKJ2e7eUCN8+BWz94GhV0L2syHkWOyzT9ZCUQVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3Z5NBFjWqen0em4YWDqMzEIHXxMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTtCJAZy
DHb8RN4hf0g33db8pbHERVceUzQFdRHm3gdDducHJ35N6hj/HEtU/IHI0UFViXgo
nla8CbOoPuYQ9v+64fVQXtqbKVunG1GfJaHB0CbumamSYPKIh/5DLp3mJFqB1xWu
zRqVLt11hGTXDcHaBzOd9vAY811yjxBpA8MD1+9sCb+Mt1O5IPZTGrzmso+n3e3O
eXiEsapDprmkWBn/6jWfUL4IwE7GPFFcjfAXFII58m1gSrv5wxYboUdaFK2B/21G
7JOo31xrjNJWoJsB/SMJp4g8SClfNEXMOEAkrt+uKEyzRIRG4AubiKKV9cV20Q+Q
P8CidXrD+AATBA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:03:32 2025 by rpki-client