Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: iHtJV94P2XeEAA0X53am4twVYzEocOX8J+j4xeJC4b8=
Subject key identifier: 77:F2:56:65:DA:39:C4:46:E3:88:F2:6B:DB:5F:7C:D1:93:71:74:D7
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 0199239F2FF11221947F56AEF48EEF117EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 08B0
Signing time: Sun 07 Sep 2025 10:00:58 +0000
Manifest this update: Sun 07 Sep 2025 10:00:58 +0000
Manifest next update: Mon 08 Sep 2025 10:00:58 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: 1W1E8/hMcBriIT6trTLKZGs5zhrZ1UlHTxOPfUaWNoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:2f:f1:12:21:94:7f:56:ae:f4:8e:ef:11:7e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Sep 7 10:00:58 2025 GMT
Not After : Sep 8 10:00:58 2025 GMT
Subject: CN=77f25665da39c446e388f26bdb5f7cd1937174d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:e8:48:e9:15:5c:9a:d1:69:bb:51:0d:8e:
81:27:9c:93:db:36:f7:33:1a:99:7e:15:c6:28:aa:
71:35:77:03:21:fb:bc:5c:4e:cf:bf:1f:de:2e:64:
95:5e:3d:68:0b:b6:60:ac:aa:26:54:4c:c6:90:ca:
2f:d4:18:f5:0b:aa:61:b2:8a:14:c8:cf:9f:35:41:
4b:70:1b:a1:1b:8b:c5:9e:29:22:d6:a2:2d:6e:47:
ff:2d:cd:f0:06:e6:d3:c8:87:31:fe:93:9a:8e:bb:
01:01:d2:6e:69:ae:18:5e:56:6d:86:fc:57:7b:cc:
60:d9:d1:e8:23:fb:98:ca:b8:87:87:77:54:25:33:
6a:09:e8:5e:e9:14:36:54:15:c2:96:3a:92:65:ec:
21:92:df:fe:5f:60:bf:ae:ed:f6:40:67:a8:64:9c:
7d:0c:5e:33:e6:fa:34:76:59:fe:64:2a:d9:44:b3:
ef:81:59:70:fe:90:43:bf:71:30:79:58:17:db:52:
bc:d2:1a:88:cc:88:dc:a5:ee:c2:52:cc:7e:4d:e5:
fe:02:22:8a:ad:5e:17:12:71:75:de:bd:1c:90:f0:
44:a6:c1:f7:0b:9e:11:3b:ce:1d:8f:c0:e9:46:18:
8d:1f:ec:9d:5c:e0:e9:cf:54:b5:53:62:a7:93:ba:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:56:65:DA:39:C4:46:E3:88:F2:6B:DB:5F:7C:D1:93:71:74:D7
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:88:a3:94:89:00:2a:bf:9b:ba:04:26:d8:6c:ad:a6:ac:
f5:e3:a3:6e:78:01:e5:bd:bf:b6:f7:12:73:9a:d0:32:61:99:
07:64:43:ea:8b:04:10:31:bf:f2:07:85:55:66:26:f5:27:3e:
4e:8c:98:e2:80:3a:0a:9d:d6:98:ae:e6:c3:a4:38:71:f1:dc:
77:7e:04:86:16:e1:da:91:ca:04:85:e2:b8:8d:9c:8d:20:13:
b8:d3:be:98:10:5d:c7:f3:25:25:bb:b4:bd:6a:48:cc:b7:04:
51:8a:f1:86:8a:cf:16:49:1d:b3:5e:bf:cb:b3:29:93:ed:26:
2c:27:1c:27:d1:35:64:c7:c4:59:ce:91:9e:37:e7:1f:5e:d8:
e7:9a:3a:89:f2:f0:8f:4b:87:b3:b8:87:75:89:ca:f4:37:06:
06:cf:90:75:e0:4d:da:e1:83:1e:87:f4:d4:b3:19:9c:7a:d7:
14:83:69:cb:e2:97:f0:e4:31:51:e4:b5:fd:43:b9:06:e9:8d:
6f:ff:2c:0a:ae:b9:b7:ae:35:64:0d:ef:5a:02:6e:90:9b:09:
74:ff:7f:dd:8d:3c:bb:16:00:5b:2d:34:91:cf:42:cd:13:9d:
e6:79:11:cd:95:c8:49:f0:97:54:75:b4:8c:b0:83:53:57:c2:
7b:e8:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:50 2025 by rpki-client