Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: FRb+dAkAKVi06HyoyZhyk8vttbrHZxbA12jsyoIq0v8=
Subject key identifier: 73:29:2B:98:AE:DC:92:E7:B9:A1:CC:8E:31:B6:4E:91:82:44:7C:61
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 01988356F6AF3FD17AF945499AD495214AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 085D
Signing time: Thu 07 Aug 2025 07:02:51 +0000
Manifest this update: Thu 07 Aug 2025 07:02:51 +0000
Manifest next update: Fri 08 Aug 2025 07:02:51 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: KUFjrFBnBO/Q7HruQKp95GyaGx4qfjWQpovwfm+inlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:f6:af:3f:d1:7a:f9:45:49:9a:d4:95:21:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Aug 7 07:02:51 2025 GMT
Not After : Aug 8 07:02:51 2025 GMT
Subject: CN=73292b98aedc92e7b9a1cc8e31b64e9182447c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:f4:41:a8:b5:30:af:f0:0d:bd:f6:91:fa:
17:30:86:15:a1:ec:41:c3:e9:de:f6:38:40:cb:a2:
f3:36:60:32:b4:3c:de:3e:7d:e1:25:00:88:be:71:
2e:5b:00:19:62:cc:dd:b0:c4:4b:95:0b:a6:5a:bc:
0e:4a:61:f1:ee:0b:f9:26:45:92:81:93:af:94:52:
8f:ca:27:41:0d:5b:62:9e:fb:85:22:3d:f8:a8:36:
20:29:19:0e:fe:71:58:5d:29:2b:33:ad:a7:4d:2e:
4d:d8:e0:17:73:68:0c:4f:44:43:7e:b0:59:7c:97:
de:87:f0:65:c4:08:c8:9b:19:3e:ca:a3:0e:ef:65:
e5:45:17:ec:7d:29:92:2c:7a:84:cc:a4:2c:ff:fe:
ef:d5:fc:98:ff:f6:2c:c1:ee:6e:8e:06:09:18:90:
90:f6:f0:d0:ce:d2:f8:df:3f:3b:60:29:9f:59:c7:
cd:66:b3:74:e0:4a:f9:60:65:a5:4b:d6:6d:f9:8a:
6d:35:bf:9c:fa:38:96:2f:cd:16:65:57:9b:79:51:
f0:96:6d:c3:f0:44:16:2b:c6:18:df:e8:4a:c2:9a:
ce:96:b5:40:4c:6d:cd:a6:82:f2:7f:7d:f9:75:c5:
1d:79:15:d5:6b:95:de:cf:a3:44:67:b4:2d:63:49:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:2B:98:AE:DC:92:E7:B9:A1:CC:8E:31:B6:4E:91:82:44:7C:61
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:21:41:b4:82:4e:7a:91:26:f4:41:ad:74:60:e9:52:f5:
5a:7f:0a:23:af:fe:3c:b9:8e:73:82:18:65:e9:c6:37:a9:e4:
ed:76:90:4a:4f:34:9f:74:c5:2e:69:f3:ca:03:ee:2f:5e:89:
77:60:e0:5f:cc:51:52:fc:24:26:3c:02:6b:b3:d2:e6:f5:d5:
92:fb:bb:97:39:3e:7b:39:95:65:d5:f1:ed:d0:2d:b9:7e:fe:
d9:37:e8:b2:13:ef:49:04:e9:d9:f1:bb:ce:2b:02:aa:4a:9e:
55:05:8a:c9:7a:cf:09:6b:73:a5:e0:44:5b:94:cf:1e:5c:17:
07:01:fe:6d:12:d7:40:ea:7a:32:c2:8e:89:99:dd:2e:55:7a:
1a:4d:3a:5c:24:b3:c6:b8:66:f3:d7:34:58:3a:1a:a2:2e:99:
2c:4e:fe:8e:d9:bc:99:e8:d7:3d:d1:ba:06:da:34:99:e7:ae:
2d:37:86:a1:8c:55:be:b1:ca:df:ac:3d:09:3d:66:91:32:62:
56:f4:a8:68:02:86:86:87:00:b8:d4:5c:19:22:87:28:a5:a5:
0a:3a:e0:a0:0c:2d:c2:1c:1d:a9:81:37:8f:ae:c1:2d:62:2f:
ee:53:46:8d:98:c3:04:34:76:d3:6e:c2:6d:e7:c7:5f:45:e0:
7a:4f:ef:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVvavP9F6+UVJmtSVIUqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWQ4MTJiZGY0YzVmYjA4ZWQ2MTIwZGNkMDYxOWFiZjM1
MzA1MjAwHhcNMjUwODA3MDcwMjUxWhcNMjUwODA4MDcwMjUxWjAzMTEwLwYDVQQD
Eyg3MzI5MmI5OGFlZGM5MmU3YjlhMWNjOGUzMWI2NGU5MTgyNDQ3YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+T0Qai1MK/wDb32kfoXMIYVoexB
w+ne9jhAy6LzNmAytDzePn3hJQCIvnEuWwAZYszdsMRLlQumWrwOSmHx7gv5JkWS
gZOvlFKPyidBDVtinvuFIj34qDYgKRkO/nFYXSkrM62nTS5N2OAXc2gMT0RDfrBZ
fJfeh/BlxAjImxk+yqMO72XlRRfsfSmSLHqEzKQs//7v1fyY//Yswe5ujgYJGJCQ
9vDQztL43z87YCmfWcfNZrN04Er5YGWlS9Zt+YptNb+c+jiWL80WZVebeVHwlm3D
8EQWK8YY3+hKwprOlrVATG3NpoLyf335dcUdeRXVa5Xez6NEZ7QtY0mATQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMpK5iu3JLnuaHMjjG2TpGCRHxhMB8GA1UdIwQY
MBaAFESdgSvfTF+wjtYSDc0GGavzUwUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEt
ZjE0NTFiYTg4NGI4LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEtZjE0NTFiYTg4NGI4
LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcchQbSC
TnqRJvRBrXRg6VL1Wn8KI6/+PLmOc4IYZenGN6nk7XaQSk80n3TFLmnzygPuL16J
d2DgX8xRUvwkJjwCa7PS5vXVkvu7lzk+ezmVZdXx7dAtuX7+2TfoshPvSQTp2fG7
zisCqkqeVQWKyXrPCWtzpeBEW5TPHlwXBwH+bRLXQOp6MsKOiZndLlV6Gk06XCSz
xrhm89c0WDoaoi6ZLE7+jtm8mejXPdG6Bto0meeuLTeGoYxVvrHK36w9CT1mkTJi
VvSoaAKGhocAuNRcGSKHKKWlCjrgoAwtwhwdqYE3j67BLWIv7lNGjZjDBDR2027C
befHX0Xgek/vNA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:20 2025 by rpki-client