Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: 8l8/LGQCJUm4NQWGd9W8yx+2Tz49lzFEsUJdnV1CHAI=
Subject key identifier: 34:98:F9:6F:DC:F1:6D:69:05:CE:AD:1B:0C:85:CE:D5:11:63:B4:CD
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 01965914E00F9E12DD9258C1AAB8EF2D2B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 073E
Signing time: Mon 21 Apr 2025 16:01:02 +0000
Manifest this update: Mon 21 Apr 2025 16:01:02 +0000
Manifest next update: Tue 22 Apr 2025 16:01:02 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: S+khkrmObwU+nPDsyw5ElkOUIseC6TBmZMkRoCle8Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:e0:0f:9e:12:dd:92:58:c1:aa:b8:ef:2d:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Apr 21 16:01:02 2025 GMT
Not After : Apr 22 16:01:02 2025 GMT
Subject: CN=3498f96fdcf16d6905cead1b0c85ced51163b4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:d4:20:f4:7e:e5:e8:66:b3:40:d6:cd:3d:
c7:70:f5:f5:11:3a:e7:84:d0:be:43:76:38:d5:44:
2c:37:87:20:3b:e4:95:bc:fa:0f:3d:a2:8b:2e:d9:
61:11:1b:80:58:04:3e:80:71:87:38:34:c3:b1:72:
df:34:b6:15:13:97:ed:cf:f8:ec:74:dc:cf:63:ed:
e3:2c:ac:0e:00:01:c8:36:f1:a9:43:b0:c0:14:6a:
6d:65:81:a1:7c:95:f1:27:f2:1c:54:cc:ed:2d:20:
d3:2a:16:84:aa:94:99:80:8d:61:c4:db:68:c8:9f:
ec:cc:c2:c5:27:37:93:7d:b6:1a:d9:e2:4c:e2:97:
dd:ae:ca:28:ce:38:51:60:68:4c:2f:36:28:65:69:
17:fb:a2:e8:60:fa:f6:94:e4:25:4b:57:7d:70:fd:
24:22:98:18:32:72:42:6b:13:e8:07:12:c4:d3:ae:
8b:ff:e3:e6:46:f2:0c:ad:4b:04:fa:37:5a:1e:47:
c4:8c:09:a5:b9:81:9e:de:7c:70:fc:e1:70:26:bc:
74:6d:33:cd:5d:eb:83:07:a1:6c:c2:ed:75:2a:94:
d6:b4:0d:bf:0c:de:c7:7f:5f:7b:5f:71:99:ed:b5:
2b:cc:5b:fc:50:a3:0b:bd:c8:8a:b8:b2:72:ec:03:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:F9:6F:DC:F1:6D:69:05:CE:AD:1B:0C:85:CE:D5:11:63:B4:CD
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0b:c3:f6:b3:ef:38:71:29:26:a5:38:88:0b:6e:03:b6:78:
76:37:76:61:d5:51:86:17:56:10:8c:d5:cc:c3:dc:ec:da:7c:
c1:c0:f1:ec:f5:21:9a:6a:48:e6:5e:12:b0:65:22:f1:7f:99:
44:72:17:d6:52:51:9b:1b:c2:cb:2c:a4:30:ad:e2:d2:b9:7f:
4d:92:1b:02:23:43:e5:0d:a4:fb:f2:a0:8b:f6:7e:6c:98:47:
d2:b6:d6:78:48:37:0b:df:52:5c:c3:65:87:17:aa:90:a7:4c:
c7:4e:fb:ad:a5:51:a0:70:c4:92:d3:64:4d:20:ab:91:30:b0:
ab:1e:2a:05:0c:8c:b2:22:62:83:0a:3d:80:2e:3e:7d:3e:5a:
96:4e:dc:ba:ff:5b:bf:c0:19:3a:17:98:1a:3b:64:b9:e0:c8:
44:29:7a:bd:15:f3:f5:02:28:26:4c:f9:55:1a:71:cd:18:5b:
26:14:74:a6:2f:d5:5c:29:b8:4b:5c:5c:a1:9b:b5:03:8c:d6:
6a:e6:50:fd:d0:e0:d1:57:ec:d9:a3:9b:9f:5c:a8:08:3f:cd:
17:d2:5d:6f:25:c7:e5:97:f2:f6:fa:53:2a:e5:39:97:41:c6:
04:b6:4c:2b:ff:4b:5f:d8:9d:e9:bc:54:b4:14:99:25:aa:89:
77:41:c8:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFOAPnhLdkljBqrjvLSs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWQ4MTJiZGY0YzVmYjA4ZWQ2MTIwZGNkMDYxOWFiZjM1
MzA1MjAwHhcNMjUwNDIxMTYwMTAyWhcNMjUwNDIyMTYwMTAyWjAzMTEwLwYDVQQD
EygzNDk4Zjk2ZmRjZjE2ZDY5MDVjZWFkMWIwYzg1Y2VkNTExNjNiNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwPUIPR+5ehms0DWzT3HcPX1ETrn
hNC+Q3Y41UQsN4cgO+SVvPoPPaKLLtlhERuAWAQ+gHGHODTDsXLfNLYVE5ftz/js
dNzPY+3jLKwOAAHINvGpQ7DAFGptZYGhfJXxJ/IcVMztLSDTKhaEqpSZgI1hxNto
yJ/szMLFJzeTfbYa2eJM4pfdrsoozjhRYGhMLzYoZWkX+6LoYPr2lOQlS1d9cP0k
IpgYMnJCaxPoBxLE066L/+PmRvIMrUsE+jdaHkfEjAmluYGe3nxw/OFwJrx0bTPN
XeuDB6Fswu11KpTWtA2/DN7Hf197X3GZ7bUrzFv8UKMLvciKuLJy7AM8pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSY+W/c8W1pBc6tGwyFztURY7TNMB8GA1UdIwQY
MBaAFESdgSvfTF+wjtYSDc0GGavzUwUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEt
ZjE0NTFiYTg4NGI4LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEtZjE0NTFiYTg4NGI4
LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAvD9rPv
OHEpJqU4iAtuA7Z4djd2YdVRhhdWEIzVzMPc7Np8wcDx7PUhmmpI5l4SsGUi8X+Z
RHIX1lJRmxvCyyykMK3i0rl/TZIbAiND5Q2k+/Kgi/Z+bJhH0rbWeEg3C99SXMNl
hxeqkKdMx077raVRoHDEktNkTSCrkTCwqx4qBQyMsiJigwo9gC4+fT5alk7cuv9b
v8AZOheYGjtkueDIRCl6vRXz9QIoJkz5VRpxzRhbJhR0pi/VXCm4S1xcoZu1A4zW
auZQ/dDg0Vfs2aObn1yoCD/NF9JdbyXH5Zfy9vpTKuU5l0HGBLZMK/9LX9id6bxU
tBSZJaqJd0HIcw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:18 2025 by rpki-client