Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: 0piZq7mbwWyXtQAg2WRi54rH5VwbqD4kAsfpjZcgXJ0=
Subject key identifier: 01:1A:8E:FB:34:A3:35:92:41:6C:DE:40:EA:DB:20:24:D2:12:1A:02
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 0197B6A1E385E320D02E8AB4E21FDA24A4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 07F3
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: LC12hXGSNwCWFiRK3DTK1yD/HDI6Ml0/86zA5qOsbFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e3:85:e3:20:d0:2e:8a:b4:e2:1f:da:24:a4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=011a8efb34a33592416cde40eadb2024d2121a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:74:a6:c3:5d:6c:ad:b3:66:b2:79:75:99:
b6:c3:71:1b:48:d8:96:c1:96:1e:1a:3f:f7:dd:8b:
c7:8e:82:77:46:ba:74:05:7c:77:81:61:e7:22:7c:
90:bc:b6:ed:cd:0f:74:41:1b:e1:14:74:80:fc:59:
04:ef:14:14:5a:1c:dd:ac:7d:46:ea:14:53:f4:f1:
4a:33:1d:fd:92:07:99:bc:9e:72:bc:5b:18:91:c9:
dc:e4:42:c2:eb:00:4d:a3:03:cd:67:a7:9f:ab:81:
b7:97:d5:ac:a8:63:a3:97:31:b6:6e:60:de:1b:08:
cd:cd:e4:79:a8:22:6b:0b:9d:e8:bc:d6:20:c4:a5:
ff:ea:27:53:e0:b7:46:92:7e:34:d8:c7:5b:b7:c2:
f7:c8:38:d6:0f:95:14:45:c0:45:de:53:a9:f4:31:
74:20:8a:20:bb:12:00:b4:29:86:ee:3f:be:a2:ee:
6f:49:ea:71:5b:86:4b:e6:1b:b6:c0:aa:02:19:5b:
a9:94:61:41:26:ff:71:89:e3:de:0b:f3:3a:50:ed:
38:02:13:30:9a:24:fb:67:e2:71:b2:b7:30:2a:98:
4e:3e:6f:8a:62:6f:98:0e:a4:fe:7c:de:8c:59:f0:
9b:be:73:5e:a4:1b:45:76:93:1e:76:78:27:9c:5c:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:8E:FB:34:A3:35:92:41:6C:DE:40:EA:DB:20:24:D2:12:1A:02
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:e9:4a:b1:f5:2c:52:3f:1e:bb:f5:38:89:06:10:4c:3c:
b4:7a:98:9f:15:a5:64:7a:63:f9:f7:41:fb:07:9b:48:27:3d:
59:c3:4b:2b:22:2e:b4:63:1e:76:08:e0:e1:9f:91:7a:cc:da:
8b:70:c2:36:5a:c8:ee:d8:05:79:3e:2a:70:a3:17:fd:1e:af:
7b:f9:c3:0d:0d:5a:f4:21:49:37:e9:a5:b1:45:f9:f7:c6:a2:
d0:54:0b:d0:24:c4:15:3f:e6:5a:eb:af:78:c0:af:ee:6d:ff:
5b:72:16:a1:9f:60:4b:63:a0:3d:5a:ae:a9:cf:65:d0:4d:6d:
8f:e1:e5:9a:00:72:00:d6:58:1a:22:e4:51:a6:e7:3e:0c:a5:
ab:63:02:c0:c0:50:bb:04:d4:e2:70:65:6b:0b:ae:8a:05:92:
be:79:2f:8d:8d:41:53:b2:26:92:47:c4:7d:52:4a:a4:0b:ec:
f9:94:09:a8:2f:6f:21:81:4c:b4:26:ad:fa:89:d8:c9:70:1b:
22:55:f7:8d:77:0d:62:61:bb:fa:ca:b7:b9:e1:78:ff:ba:75:
05:81:a7:7e:fc:8f:0e:f9:5a:65:55:9a:2a:51:9f:3a:2a:3e:
9b:2c:5d:78:15:4d:75:15:8f:e1:63:aa:27:be:38:51:ce:89:
01:24:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:27 2025 by rpki-client