Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: x5Cvok7nuATG0yzUuH3a7bm1vw/t/imEaT4ObTzZpnw=
Subject key identifier: 48:F2:0A:E9:36:36:AD:42:77:5E:64:E1:8C:65:1F:37:A4:49:F2:75
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 0198D65F7F0A6695DBA1E17DB146C58A293A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 0888
Signing time: Sat 23 Aug 2025 10:00:38 +0000
Manifest this update: Sat 23 Aug 2025 10:00:38 +0000
Manifest next update: Sun 24 Aug 2025 10:00:38 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: PRM7FR6ninySr9OQIStMJEAnBP5YpXsnQLOcB367ZfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:7f:0a:66:95:db:a1:e1:7d:b1:46:c5:8a:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Aug 23 10:00:38 2025 GMT
Not After : Aug 24 10:00:38 2025 GMT
Subject: CN=48f20ae93636ad42775e64e18c651f37a449f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:05:7c:2b:74:58:d9:d2:46:ac:b5:cc:8c:
8a:ba:3f:ce:e7:9e:b3:5a:86:a9:46:ea:3a:4f:18:
e3:7b:ad:ff:56:01:08:2b:5f:f2:7b:9f:08:b3:32:
e6:6d:a4:31:90:ec:05:11:4a:d2:84:65:72:69:29:
c1:4f:55:e1:9b:d7:2e:81:00:60:36:d2:b9:11:f5:
19:d8:e8:d5:8b:c9:c7:e9:8a:c3:2f:e7:b5:db:97:
f5:db:5f:f9:88:fa:47:f2:b8:c9:e1:b1:96:46:4b:
40:39:88:29:78:eb:ba:0a:46:5a:b0:67:29:a9:9c:
b7:3b:95:e7:bb:66:5a:b2:6f:17:69:fa:c7:14:fd:
55:ca:b7:9d:2b:2a:80:6c:4d:ca:bc:68:29:20:a0:
49:3f:63:19:cb:aa:87:be:2f:ee:6f:41:97:7a:61:
11:3b:91:e9:dc:6c:f3:f3:26:86:a5:55:e5:fb:b6:
3d:38:94:86:99:d5:0e:db:1c:21:33:3e:d0:e0:b7:
70:c7:ed:60:45:f0:57:b8:80:44:eb:ac:4a:e1:18:
0a:ef:f6:26:74:98:72:ed:0b:9e:8b:b7:6e:11:8e:
1b:b2:87:b4:45:6a:37:ac:c2:e8:62:60:83:c1:38:
87:76:61:25:ac:77:2c:b7:20:dc:8b:bc:f0:86:40:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F2:0A:E9:36:36:AD:42:77:5E:64:E1:8C:65:1F:37:A4:49:F2:75
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:da:d9:a9:2b:1a:08:23:a7:ee:a2:06:6b:03:71:73:9e:
13:44:de:c3:54:8f:c7:de:79:f0:60:6e:ae:f2:24:bd:5f:cd:
67:79:55:11:d3:b4:e8:20:e7:0c:31:95:2b:b9:5a:57:27:af:
41:9b:04:d2:55:e0:8f:08:82:f5:30:1c:06:0b:8a:cb:aa:31:
be:7a:c3:3d:f7:94:ad:95:47:84:8b:fe:e6:34:95:bb:7d:25:
e9:df:b2:5a:f7:fb:72:0e:05:4d:2b:82:fa:75:63:0b:f1:97:
f1:a8:42:96:85:a6:05:22:46:af:8a:f3:80:f1:62:6b:0f:cd:
44:58:3f:02:ec:db:11:c4:b2:46:fd:93:38:62:c1:c9:9c:59:
41:f8:0b:ef:85:e6:9a:c2:22:89:c7:f6:22:80:d1:5c:2e:4a:
bc:d5:d4:a1:69:cb:39:bf:32:1b:6c:fa:a9:99:8e:ea:86:b5:
a7:17:35:56:f1:73:02:bb:7d:78:12:81:12:19:53:96:b7:26:
8c:95:a5:6e:a3:6d:4f:02:a2:9f:82:43:bd:22:58:05:a3:c6:
56:4d:5c:a2:d4:a6:cc:d7:bc:5f:d0:e9:6a:45:95:d6:da:94:
aa:a2:70:77:9a:6c:fe:f3:be:c6:a1:50:84:46:0a:2a:d1:40:
6d:23:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:47 2025 by rpki-client