Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: FSF5x7yoEKwyPYjkK3WDoxcrfc6ML2w8PH6g6YolbDA=
Subject key identifier: 88:8D:54:DC:6E:B2:15:E7:69:9E:D8:00:3C:24:46:DC:AD:EF:C8:51
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 019A0591BB80A76E218759F68026E9BD3DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 0925
Signing time: Tue 21 Oct 2025 07:00:28 +0000
Manifest this update: Tue 21 Oct 2025 07:00:28 +0000
Manifest next update: Wed 22 Oct 2025 07:00:28 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: 86+/rFesm0YqyXdnkF69UFONE31dAUyxmA7B7avJODI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:bb:80:a7:6e:21:87:59:f6:80:26:e9:bd:3d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Oct 21 07:00:28 2025 GMT
Not After : Oct 22 07:00:28 2025 GMT
Subject: CN=888d54dc6eb215e7699ed8003c2446dcadefc851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:09:88:50:3c:83:f8:88:12:2f:d4:e2:e1:
26:18:ab:b5:67:48:4c:6d:7a:53:4d:6f:88:2b:01:
e3:60:42:6e:91:e9:66:7b:dd:e4:5d:1f:06:31:f9:
44:ea:fd:af:e4:95:98:97:1f:68:fc:33:12:0c:bf:
b8:a0:0c:ab:c7:95:7c:e4:a2:5d:41:9e:ae:d1:4c:
45:06:3a:33:ca:14:0a:1d:84:e2:c7:ba:d3:26:00:
40:b2:f9:4e:bc:9a:e2:d9:83:ff:c3:85:63:e6:d8:
16:fa:94:02:92:bc:40:f8:7d:97:67:dd:f2:7c:50:
9b:1a:08:18:f5:8a:56:2a:3b:e4:b0:8e:f3:71:1c:
bc:8d:c8:5f:a3:f8:8c:41:ee:92:a6:29:1a:1e:f6:
d1:73:e0:5b:ca:b5:6c:ed:87:45:f9:f5:4e:13:61:
23:12:b1:39:2a:32:bd:4e:fd:59:1c:d3:26:ec:9b:
66:83:9d:86:10:c8:49:0f:f2:51:31:36:c4:9f:f1:
12:63:ab:40:fa:d0:77:2d:e0:e2:4c:bb:8e:3f:d2:
19:7d:7f:e4:89:7e:59:00:5f:11:8d:84:d5:21:1e:
0a:46:d2:a1:e4:4d:52:7b:33:da:e5:94:48:5b:b7:
15:c4:09:d9:0f:9f:0c:34:27:fa:54:0b:26:dd:c4:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:54:DC:6E:B2:15:E7:69:9E:D8:00:3C:24:46:DC:AD:EF:C8:51
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:14:fa:33:7c:0c:6c:1a:56:40:de:e0:ac:de:e0:f4:85:23:
18:1d:77:be:30:89:94:3b:0b:db:63:18:f2:2c:01:be:5b:80:
97:c5:8a:d4:3d:15:43:2b:2b:b5:27:22:d4:5e:ac:3e:81:fb:
4a:d1:dc:cf:46:73:27:e7:c4:d7:fd:28:04:c2:62:be:76:1e:
48:a1:de:47:d4:b7:09:eb:4b:0e:d8:1d:30:0f:52:52:c9:51:
d3:fe:f9:16:81:43:34:2d:9e:2b:d2:80:dd:cb:e0:af:16:0d:
3f:01:2c:f6:31:bc:55:77:1e:b5:d4:c1:8d:78:44:47:42:a6:
dc:66:c6:44:d9:33:70:58:80:04:d6:d3:a8:0a:a3:c9:5f:93:
05:40:9d:6b:21:79:d4:18:31:2b:f4:2c:5a:29:41:df:b9:dc:
99:b5:61:70:2a:ad:b8:4e:b7:1d:64:2d:5d:a4:da:ef:9d:9b:
03:ea:ef:83:41:73:b7:6d:b9:4d:1f:8e:c5:a1:6c:02:e9:e3:
0a:58:34:31:66:0b:e0:d2:f9:d5:b5:5e:be:55:ac:61:93:67:
94:74:91:f0:69:5d:1f:33:98:75:3c:ce:0a:ae:2f:6d:4b:74:
b2:bb:1d:30:cd:67:7b:6d:65:d2:1b:da:87:bc:61:1f:81:0e:
b0:1e:d0:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFkbuAp24hh1n2gCbpvT26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWQ4MTJiZGY0YzVmYjA4ZWQ2MTIwZGNkMDYxOWFiZjM1
MzA1MjAwHhcNMjUxMDIxMDcwMDI4WhcNMjUxMDIyMDcwMDI4WjAzMTEwLwYDVQQD
Eyg4ODhkNTRkYzZlYjIxNWU3Njk5ZWQ4MDAzYzI0NDZkY2FkZWZjODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtisJiFA8g/iIEi/U4uEmGKu1Z0hM
bXpTTW+IKwHjYEJukelme93kXR8GMflE6v2v5JWYlx9o/DMSDL+4oAyrx5V85KJd
QZ6u0UxFBjozyhQKHYTix7rTJgBAsvlOvJri2YP/w4Vj5tgW+pQCkrxA+H2XZ93y
fFCbGggY9YpWKjvksI7zcRy8jchfo/iMQe6SpikaHvbRc+BbyrVs7YdF+fVOE2Ej
ErE5KjK9Tv1ZHNMm7Jtmg52GEMhJD/JRMTbEn/ESY6tA+tB3LeDiTLuOP9IZfX/k
iX5ZAF8RjYTVIR4KRtKh5E1SezPa5ZRIW7cVxAnZD58MNCf6VAsm3cRiIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiNVNxushXnaZ7YADwkRtyt78hRMB8GA1UdIwQY
MBaAFESdgSvfTF+wjtYSDc0GGavzUwUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEt
ZjE0NTFiYTg4NGI4LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEtZjE0NTFiYTg4NGI4
LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRT6M3wM
bBpWQN7grN7g9IUjGB13vjCJlDsL22MY8iwBvluAl8WK1D0VQysrtSci1F6sPoH7
StHcz0ZzJ+fE1/0oBMJivnYeSKHeR9S3CetLDtgdMA9SUslR0/75FoFDNC2eK9KA
3cvgrxYNPwEs9jG8VXcetdTBjXhER0Km3GbGRNkzcFiABNbTqAqjyV+TBUCdayF5
1BgxK/QsWilB37ncmbVhcCqtuE63HWQtXaTa752bA+rvg0Fzt225TR+OxaFsAunj
Clg0MWYL4NL51bVevlWsYZNnlHSR8GldHzOYdTzOCq4vbUt0srsdMM1ne21l0hva
h7xhH4EOsB7Qhg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:09 2025 by rpki-client