Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: Is3o0g3B47phQTAqFvL4EYZANx/bqqFTRBsZ7ACUV8E=
Subject key identifier: FD:F7:9D:08:06:41:89:D2:80:16:ED:77:CE:D0:BB:3F:2E:E0:C2:47
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019A0B5D5E06CACE6976659794E0F222B99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0846
Signing time: Wed 22 Oct 2025 10:00:59 +0000
Manifest this update: Wed 22 Oct 2025 10:00:59 +0000
Manifest next update: Thu 23 Oct 2025 10:00:59 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: lad1Sv0Xzcz8XhLRHFWQEHUlBWkFTOhOk4kY7nRy6N8=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:5e:06:ca:ce:69:76:65:97:94:e0:f2:22:b9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Oct 22 10:00:59 2025 GMT
Not After : Oct 23 10:00:59 2025 GMT
Subject: CN=fdf79d08064189d28016ed77ced0bb3f2ee0c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:8b:36:af:79:13:5b:44:49:b7:f0:b1:2d:
e0:e8:9a:2b:9b:87:46:d6:20:ae:18:d5:c0:9f:ab:
43:01:65:df:d8:43:c8:0f:e4:1d:cb:c5:1b:67:d6:
b7:00:47:77:dc:ac:93:47:5d:1f:5b:64:2c:00:88:
42:00:5d:fe:8a:b0:46:d9:73:15:96:fb:fa:23:c5:
eb:d5:47:61:f9:42:db:67:f9:22:bc:3c:3b:b2:50:
1c:59:a3:57:f7:c1:f6:3d:0e:fb:20:5d:66:0b:04:
82:a1:79:1d:3b:a4:a8:a3:85:0c:5d:43:87:be:56:
26:e4:a6:09:67:1e:fe:e4:e0:d3:da:fa:91:77:09:
a4:7b:fe:c4:da:ec:34:ce:14:a4:71:36:36:e4:2c:
bc:2d:7c:98:8d:b7:0b:90:a0:16:a7:03:f6:7c:35:
6f:87:c4:17:70:69:fd:5d:00:4a:9e:79:14:8f:8a:
7e:3a:8b:9d:c6:6a:8a:9c:a9:10:0b:e9:0d:c2:96:
1e:e0:f8:b3:7a:5c:4b:3d:51:a3:c5:a3:43:7e:5c:
d3:8e:c5:cd:05:82:c6:8c:2c:eb:a1:31:17:a3:6f:
d5:bc:d4:50:a9:ac:ab:53:a4:02:de:55:20:75:da:
84:d1:2a:9a:17:df:1d:0a:d1:c7:1f:77:ac:fa:d9:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:9D:08:06:41:89:D2:80:16:ED:77:CE:D0:BB:3F:2E:E0:C2:47
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:3c:fa:9b:5e:da:28:ac:09:78:79:5f:74:d1:54:66:73:
d8:08:a2:8f:9a:67:04:d2:a0:f2:19:0f:26:11:50:70:44:64:
6c:5e:00:5c:7d:ed:0c:91:7f:22:74:1e:1b:8e:c4:f8:6f:68:
c6:a1:c8:15:28:88:9a:c1:b6:4f:6d:6b:7e:3c:7b:91:0b:24:
b5:af:31:8a:7f:15:4e:25:2d:6b:8c:72:78:d1:a6:30:8f:ac:
59:23:88:ac:99:12:e6:29:99:a2:58:ea:6a:38:05:5d:8d:68:
ee:bc:02:23:51:a0:8d:cd:42:08:b1:75:ee:8d:03:f9:70:6a:
8e:c7:19:c3:32:89:28:0a:36:ff:aa:97:41:cf:0c:b7:08:8d:
7c:78:da:71:4e:f2:4a:62:e3:3a:28:5a:c6:a6:5b:0f:04:8b:
d6:4e:7e:46:27:80:a8:dd:30:f4:26:19:ed:99:19:dd:d1:f0:
40:a6:e1:f6:af:be:42:0d:af:16:64:56:2d:2c:a2:ee:69:f1:
8a:e8:5e:58:d8:e7:f4:08:0b:c2:59:14:dd:9c:7b:24:49:a0:
2b:e5:6f:a8:80:aa:3f:b6:08:4c:8f:0b:ae:f9:44:a8:4c:4e:
f7:32:e3:e7:2f:0b:c9:6c:76:f6:bb:63:db:7b:3b:a1:5b:9d:
03:19:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:02:54 2025 by rpki-client