Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: GIcJkYd3qJ+s1iedyRGp7ylG9zTK5hCu+00ceAZedOo=
Subject key identifier: 11:AF:BF:C1:86:B4:87:02:BC:BB:2B:7C:41:29:55:FA:86:62:8C:3E
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 0196C53ABB52E3907480C77200538ECB4097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 0776
Signing time: Mon 12 May 2025 16:01:22 +0000
Manifest this update: Mon 12 May 2025 16:01:22 +0000
Manifest next update: Tue 13 May 2025 16:01:22 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: JBECx8grls0EAZvPlZ5ulRTSkgciJZ7Nj5ssDcX5Hi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:bb:52:e3:90:74:80:c7:72:00:53:8e:cb:40:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: May 12 16:01:22 2025 GMT
Not After : May 13 16:01:22 2025 GMT
Subject: CN=11afbfc186b48702bcbb2b7c412955fa86628c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:74:48:35:cc:b4:5d:03:f0:05:a9:31:5b:
82:38:7b:f0:71:cd:92:16:cd:11:d0:2b:9b:54:f6:
51:2c:68:3a:58:1a:a4:06:95:ad:20:17:a9:45:1d:
f2:d2:ae:dd:97:c5:f0:d3:35:9c:66:d0:af:ff:28:
cf:ca:d6:e2:fa:7e:e0:27:00:23:3a:28:af:44:7a:
f5:3a:91:49:f9:04:b9:b5:da:14:2e:18:6d:d3:1e:
a5:f2:45:c3:32:4a:c6:1b:48:dd:99:a2:cc:80:0e:
7b:b8:c5:53:00:9c:b5:e2:a5:f4:fd:b2:22:2d:1f:
80:26:96:84:33:c9:29:be:58:9c:e4:c3:10:52:21:
2b:b0:4b:52:b3:74:28:15:28:99:31:8e:9d:16:ed:
e3:88:2e:dd:a4:ed:a3:97:b1:5e:a6:ca:40:a4:18:
fd:e7:07:f2:ab:b1:6c:3d:59:7c:f1:b0:5e:39:32:
07:9b:85:ac:f9:95:c3:48:42:54:f8:b3:19:ca:1d:
bb:a8:ca:38:d0:bd:47:cd:85:6d:c3:05:af:97:9f:
0d:2a:bf:50:92:57:49:34:bb:f2:1a:01:10:36:91:
36:14:01:0b:88:d7:52:ba:64:88:37:25:4b:e6:bf:
8f:9e:d4:4c:16:bb:dd:7e:19:e9:c0:64:9a:41:fc:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:BF:C1:86:B4:87:02:BC:BB:2B:7C:41:29:55:FA:86:62:8C:3E
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:43:89:35:27:d5:69:c1:d1:a9:73:42:ed:bd:cf:fd:bc:65:
62:ec:28:5c:ad:56:90:82:23:c1:41:f6:a5:b3:37:18:98:dc:
13:16:92:70:6e:7f:81:63:49:49:ae:b3:0c:97:e3:ad:1d:06:
31:d5:c6:46:c8:a1:1c:56:e9:8d:b3:1b:82:39:a3:77:97:67:
ff:34:5a:26:b8:75:d5:7c:ef:ac:8a:a7:48:d5:e3:c0:07:29:
87:29:6a:ff:71:b5:72:fa:33:2d:38:df:85:53:e7:75:3b:8b:
7d:49:ad:e0:27:77:40:94:aa:04:1e:1c:9c:77:df:6c:be:ef:
44:e9:11:da:5a:79:8a:f4:10:29:a8:09:aa:8a:ff:24:81:6b:
d2:06:70:b0:f1:75:39:26:ec:34:0f:fd:a3:8a:6d:72:4b:87:
37:c6:1c:73:78:36:ae:1a:d0:03:0d:f9:2b:b2:68:39:91:8e:
4d:f6:9d:dd:da:9f:94:9a:7b:f3:68:a7:64:e2:55:d0:9e:dd:
fe:46:d2:57:af:33:a6:99:00:d1:82:03:bc:70:1b:19:f3:4e:
34:06:08:91:df:c9:e5:dc:82:a7:29:a3:91:1d:3b:a1:79:fc:
5d:f7:e3:5b:26:19:bd:8e:98:a4:d3:6a:fd:6b:cf:dc:12:48:
9e:fa:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:26:36 2025 by rpki-client