Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: bSvmPLnGXLe1E0obBGsyM4mplRwnEdQxLK1iykdWjlk=
Subject key identifier: CF:EB:69:9C:F3:FB:8C:AB:A2:19:96:74:67:D2:42:20:DF:E3:EB:91
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 019A2855D262226AC88156862400DEC566C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 0937
Signing time: Tue 28 Oct 2025 01:01:44 +0000
Manifest this update: Tue 28 Oct 2025 01:01:44 +0000
Manifest next update: Wed 29 Oct 2025 01:01:44 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: kKqnOJFqtOeVmbEE4tgv6lwW2PgDprrZPrxEPCH+Od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:d2:62:22:6a:c8:81:56:86:24:00:de:c5:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Oct 28 01:01:44 2025 GMT
Not After : Oct 29 01:01:44 2025 GMT
Subject: CN=cfeb699cf3fb8caba219967467d24220dfe3eb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:62:c4:dc:0d:70:31:69:4e:6a:8d:94:e0:d4:
ea:f8:23:e8:a8:1f:b0:26:02:7b:ae:9b:5a:2c:c0:
4d:b3:4f:d8:a9:b9:23:30:be:db:5b:c0:35:c9:94:
78:6b:8f:2c:93:96:92:1b:f2:1b:2a:96:23:ba:9b:
1a:a1:53:4b:cf:9a:22:89:36:e9:58:ed:d7:60:e8:
c8:bb:6f:17:08:7c:8f:fe:6e:b5:59:a8:40:6b:9e:
6f:6e:63:12:33:f0:50:62:73:62:d3:91:85:3a:b2:
67:66:db:d7:21:68:9d:42:1e:0f:06:0e:4d:e3:47:
e8:16:51:04:7a:e3:af:db:eb:3f:21:e5:36:d5:de:
8e:16:5f:69:85:50:0f:46:de:8a:45:f6:11:0d:70:
ea:88:be:f9:05:14:29:55:05:9c:05:bb:bd:d7:17:
9f:fd:0f:5f:ac:28:1e:ff:34:fe:d5:f8:0f:ad:3f:
4a:ee:ae:83:31:9e:be:21:3d:99:2d:a0:a7:f1:f3:
11:13:d1:1b:8d:ad:92:9b:53:d5:4b:f3:ac:59:5c:
ce:eb:27:81:41:56:42:f2:21:0d:87:32:bd:8d:0b:
fa:5d:9b:0a:f6:38:9b:d6:ff:14:7d:59:22:3f:e5:
09:f5:fe:ae:5a:b3:d5:d2:8c:19:7b:6e:51:43:b4:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:69:9C:F3:FB:8C:AB:A2:19:96:74:67:D2:42:20:DF:E3:EB:91
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d0:c0:3f:c1:ff:02:21:6b:9f:ed:ee:96:f1:97:52:af:bf:
e6:e6:d9:ad:98:f7:9a:46:5e:7c:1a:57:00:11:c9:65:af:fd:
6d:3a:fe:be:48:c0:be:97:82:fd:5c:53:28:1c:ac:08:50:28:
98:9d:5f:f6:03:be:49:ab:a9:f5:fc:18:b7:c6:29:7e:b0:c6:
36:01:28:04:2e:3d:30:9e:44:6b:fe:3b:64:57:a6:5b:5f:30:
a5:68:6e:8b:a1:ee:49:68:e2:07:94:72:d1:3c:83:c7:62:10:
f3:64:a7:e6:8e:fe:c7:7c:b2:96:e5:1e:16:84:ba:96:de:b2:
6e:13:18:7e:08:58:02:b4:55:99:31:2e:ac:95:d0:c6:50:0b:
45:8d:fd:42:32:e5:1e:04:b2:f6:b4:b5:ba:0e:24:1e:05:4f:
02:31:aa:be:67:e4:4c:9d:3e:1c:17:ac:12:bb:d6:13:f8:fa:
a8:c7:af:fa:44:f2:52:03:9f:d1:2f:71:8a:bd:35:52:3e:97:
94:74:48:bb:6f:98:59:4f:1a:1c:95:53:09:06:fe:e1:eb:d4:
27:d4:40:6d:42:91:54:7e:41:4d:26:6f:bf:ed:39:26:70:73:
d1:39:56:c6:f5:23:73:d5:c9:ce:71:68:62:1b:85:98:52:c7:
04:78:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:09:12 2025 by rpki-client