Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: DSvbQqewi1otEU51DgEaSf5KJYnOUWuTCvxfQfWnP/s=
Subject key identifier: B6:A4:26:19:9F:37:A8:4A:1A:2E:A5:55:D4:89:7B:4B:BD:3E:1F:E2
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019A50E32C3C93BA272FA16741D605D0BEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 0612
Signing time: Tue 04 Nov 2025 22:00:56 +0000
Manifest this update: Tue 04 Nov 2025 22:00:56 +0000
Manifest next update: Wed 05 Nov 2025 22:00:56 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: h5MnD78wkypM1UH8WPImYvZ2O4euUq+lhdKO4ONiUN8=)
2: SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa (hash: gX8l58xrXAT4li7r86mali9lBzeeH/ZmL4mOVXRHAGY=)
3: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:2c:3c:93:ba:27:2f:a1:67:41:d6:05:d0:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Nov 4 22:00:56 2025 GMT
Not After : Nov 5 22:00:56 2025 GMT
Subject: CN=b6a426199f37a84a1a2ea555d4897b4bbd3e1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:ff:33:e9:07:5d:71:c8:b9:f4:f8:6c:8f:
5b:9e:59:80:5a:ab:e5:24:1b:4f:24:12:2f:06:58:
2a:ac:30:f1:cd:4f:06:2e:5b:ed:32:9c:39:03:e1:
26:1d:4e:b5:82:12:83:c2:46:75:35:3c:00:e9:5b:
89:6e:84:06:c7:50:c3:bb:cb:53:5a:e6:17:a7:45:
e0:14:a4:5c:4c:98:7a:43:b4:11:53:5d:77:b1:c0:
40:1b:ae:4f:c8:49:24:a6:6e:d8:2c:3b:45:07:fb:
df:97:45:8c:e8:03:81:f5:ac:e2:1c:d2:78:78:7b:
c0:da:ab:e0:13:03:0d:51:79:fb:2e:3e:6c:f4:25:
1b:27:4b:eb:7a:bc:87:5b:24:d5:09:26:f4:45:66:
be:ef:72:50:e9:84:eb:80:89:f0:55:fc:2d:75:19:
e5:51:79:dc:ac:e7:07:b5:6d:35:04:43:26:eb:74:
b5:87:68:f9:20:9a:17:24:96:61:40:2a:f1:23:1d:
51:1a:6d:35:8b:ff:d9:54:5a:c6:b0:86:ae:b2:c7:
65:53:1d:ec:87:7a:d9:4c:5e:ca:e9:df:50:77:d9:
22:0b:4e:96:ec:da:a3:69:8a:09:de:9d:71:1c:22:
cc:68:ea:e8:7d:e6:9e:20:c7:a6:7b:7e:88:f5:19:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:26:19:9F:37:A8:4A:1A:2E:A5:55:D4:89:7B:4B:BD:3E:1F:E2
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:1e:d4:d7:28:d1:1d:c4:b4:dd:bf:29:56:30:1c:61:77:
f6:09:68:35:95:58:1c:09:eb:a7:65:14:b0:d5:2c:94:9b:22:
df:de:e6:b1:24:f6:51:a5:4b:4b:13:cb:34:39:c1:b4:e0:9a:
a2:5d:8f:ec:34:53:f5:bc:bc:27:2a:cc:1a:a2:ff:83:0a:11:
a7:13:0b:a7:6a:e7:45:22:9a:54:88:fe:5e:6e:ac:72:ee:2b:
03:f5:12:6b:68:26:81:9f:c7:50:20:dc:23:de:71:4a:6c:99:
0d:1b:af:3e:e8:a5:86:f6:fe:fd:99:66:c2:ea:a4:e8:5f:f3:
87:19:d6:a1:70:37:21:0a:f8:f8:c1:1f:d6:64:5a:b0:78:5a:
d0:67:ba:7f:45:3b:1b:d6:ed:da:a5:cd:4c:e6:46:80:a3:ff:
bf:e8:48:48:e5:bc:3e:97:3a:07:c5:c4:8c:97:ce:98:64:36:
40:1e:fe:df:26:af:1e:a0:08:a7:1b:51:21:bb:87:61:62:d9:
a2:3c:33:dd:11:25:5b:c5:8f:b5:ef:87:f2:cf:00:d5:86:66:
4a:24:14:a7:7d:c8:83:7d:2b:d2:5f:ae:59:03:af:cd:ca:60:
7c:d1:b0:f1:a7:fb:84:0d:ba:3f:b1:f4:26:2f:da:77:6b:8d:
96:5d:ff:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4yw8k7onL6FnQdYF0L7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjUxMTA0MjIwMDU2WhcNMjUxMTA1MjIwMDU2WjAzMTEwLwYDVQQD
EyhiNmE0MjYxOTlmMzdhODRhMWEyZWE1NTVkNDg5N2I0YmJkM2UxZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP7/M+kHXXHIufT4bI9bnlmAWqvl
JBtPJBIvBlgqrDDxzU8GLlvtMpw5A+EmHU61ghKDwkZ1NTwA6VuJboQGx1DDu8tT
WuYXp0XgFKRcTJh6Q7QRU113scBAG65PyEkkpm7YLDtFB/vfl0WM6AOB9aziHNJ4
eHvA2qvgEwMNUXn7Lj5s9CUbJ0vreryHWyTVCSb0RWa+73JQ6YTrgInwVfwtdRnl
UXncrOcHtW01BEMm63S1h2j5IJoXJJZhQCrxIx1RGm01i//ZVFrGsIaussdlUx3s
h3rZTF7K6d9Qd9kiC06W7NqjaYoJ3p1xHCLMaOrofeaeIMeme36I9RlaTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLakJhmfN6hKGi6lVdSJe0u9Ph/iMB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlIe1Nco
0R3EtN2/KVYwHGF39gloNZVYHAnrp2UUsNUslJsi397msST2UaVLSxPLNDnBtOCa
ol2P7DRT9by8JyrMGqL/gwoRpxMLp2rnRSKaVIj+Xm6scu4rA/USa2gmgZ/HUCDc
I95xSmyZDRuvPuilhvb+/Zlmwuqk6F/zhxnWoXA3IQr4+MEf1mRasHha0Ge6f0U7
G9bt2qXNTOZGgKP/v+hISOW8Ppc6B8XEjJfOmGQ2QB7+3yavHqAIpxtRIbuHYWLZ
ojwz3RElW8WPte+H8s8A1YZmSiQUp33Ig30r0l+uWQOvzcpgfNGw8af7hA26P7H0
Ji/ad2uNll3/BA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:27 2025 by rpki-client