Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: Ke2hnhsSdogSuz2Jeu3tJhD8k15c1IVp22DlBQ00RXU=
Subject key identifier: 75:A1:AA:49:58:6D:8B:F4:9F:C0:6B:DD:F1:D2:EB:46:5E:54:0D:A5
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 01988F22A4079B20FEAB38FF27914544F998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 14:01:08 +0000
Manifest this update: Sat 09 Aug 2025 14:01:08 +0000
Manifest next update: Sun 10 Aug 2025 14:01:08 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: yjAOl9Y3PHIdLxQePK4ckQzG/o1lSAP7TeTdtZxyrnU=)
2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:a4:07:9b:20:fe:ab:38:ff:27:91:45:44:f9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Aug 9 14:01:08 2025 GMT
Not After : Aug 10 14:01:08 2025 GMT
Subject: CN=75a1aa49586d8bf49fc06bddf1d2eb465e540da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:b1:3a:d7:59:c5:b7:b2:9b:aa:10:61:4a:
14:73:23:f0:1e:aa:ff:3c:05:d3:12:db:75:ea:08:
a7:3f:1f:2d:67:8a:f8:46:0d:5c:8f:a2:e1:fd:4f:
db:76:b8:12:73:9a:e1:f2:af:90:35:16:27:d3:7d:
02:29:c9:40:59:b6:c0:50:56:37:ef:91:4c:45:89:
28:66:0b:de:59:73:27:80:ea:0e:f5:9a:71:5d:f8:
6b:b9:a4:94:e8:8a:13:19:ef:76:ee:5d:95:b5:1d:
ee:53:ec:a0:e2:eb:d9:97:ea:53:c3:bb:83:28:6a:
a5:43:03:46:b4:ea:d1:e0:9e:ef:ed:61:16:e2:0e:
7d:09:ad:68:16:09:30:b9:94:0c:13:ee:6c:b6:c1:
8d:ac:dc:ed:53:96:fb:f9:af:9d:41:1c:26:ac:b0:
7d:36:b9:09:63:9a:18:8d:e3:3d:21:01:46:f7:36:
c4:94:18:19:26:64:7d:ed:75:8d:32:87:42:51:e4:
10:79:97:ea:3d:6e:01:7a:bd:31:32:05:95:2f:19:
fd:07:7b:0a:e9:be:3a:b0:0a:f2:af:70:70:1b:fc:
6b:f8:51:3a:7f:73:03:18:c4:24:05:f9:03:3c:a4:
ab:28:0a:e5:e3:7c:aa:1c:db:93:c5:41:75:db:41:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:AA:49:58:6D:8B:F4:9F:C0:6B:DD:F1:D2:EB:46:5E:54:0D:A5
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:0a:23:7e:35:b5:2d:86:0f:c5:6b:82:4f:c4:0f:c6:eb:
c9:cc:9e:b0:80:05:fe:fe:ac:74:ab:86:f8:d1:fc:1e:ef:be:
3a:9a:85:e8:b8:9b:f6:93:0e:48:52:ff:72:f7:5b:ee:f3:fa:
65:1b:d2:d4:50:82:d4:ef:45:7b:7d:b8:4d:85:3f:17:a0:b0:
42:0d:3c:57:34:9c:2a:77:2a:64:68:3d:6a:87:f6:4d:3b:54:
cb:6c:6b:4d:14:cf:13:ff:cf:3f:ae:14:3c:1b:05:02:fa:70:
f1:e5:ef:e6:5a:f6:8a:62:5b:90:f9:a9:26:fa:9c:50:65:57:
3f:9b:3b:38:03:7d:a8:e3:b1:3a:17:0b:c9:06:93:67:cb:7b:
0a:f4:f5:cd:20:8d:25:de:32:ce:98:d5:01:d5:d5:39:92:b3:
02:b5:ae:46:1f:74:67:32:c3:7c:10:02:ab:77:8b:f6:14:17:
16:8e:fe:51:96:48:40:e4:7e:8b:19:bd:59:7a:20:7e:1a:44:
36:02:e0:a7:d9:61:5b:b1:1a:26:ae:77:9d:73:07:13:ba:a7:
c4:00:46:0f:95:c6:a7:ac:18:be:5a:45:df:31:34:24:6b:8f:
0e:88:23:fe:ca:32:0c:25:78:d8:cd:01:3a:9e:df:f5:9f:b1:
26:5d:ff:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPIqQHmyD+qzj/J5FFRPmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTg0YzA2M2EyMTgwYjIzZjVmNmQzMTYyYTc1YjMwOTJm
NWMxOGQwHhcNMjUwODA5MTQwMTA4WhcNMjUwODEwMTQwMTA4WjAzMTEwLwYDVQQD
Eyg3NWExYWE0OTU4NmQ4YmY0OWZjMDZiZGRmMWQyZWI0NjVlNTQwZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKxOtdZxbeym6oQYUoUcyPwHqr/
PAXTEtt16ginPx8tZ4r4Rg1cj6Lh/U/bdrgSc5rh8q+QNRYn030CKclAWbbAUFY3
75FMRYkoZgveWXMngOoO9ZpxXfhruaSU6IoTGe927l2VtR3uU+yg4uvZl+pTw7uD
KGqlQwNGtOrR4J7v7WEW4g59Ca1oFgkwuZQME+5stsGNrNztU5b7+a+dQRwmrLB9
NrkJY5oYjeM9IQFG9zbElBgZJmR97XWNModCUeQQeZfqPW4Ber0xMgWVLxn9B3sK
6b46sAryr3BwG/xr+FE6f3MDGMQkBfkDPKSrKArl43yqHNuTxUF120HLCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWhqklYbYv0n8Br3fHS60ZeVA2lMB8GA1UdIwQY
MBaAFDXoTAY6IYCyP19tMWKnWzCS9cGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYt
ODRhNzFjYzMyZDQ4LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYtODRhNzFjYzMyZDQ4
LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltwKI341
tS2GD8Vrgk/ED8brycyesIAF/v6sdKuG+NH8Hu++OpqF6Lib9pMOSFL/cvdb7vP6
ZRvS1FCC1O9Fe324TYU/F6CwQg08VzScKncqZGg9aof2TTtUy2xrTRTPE//PP64U
PBsFAvpw8eXv5lr2imJbkPmpJvqcUGVXP5s7OAN9qOOxOhcLyQaTZ8t7CvT1zSCN
Jd4yzpjVAdXVOZKzArWuRh90ZzLDfBACq3eL9hQXFo7+UZZIQOR+ixm9WXogfhpE
NgLgp9lhW7EaJq53nXMHE7qnxABGD5XGp6wYvlpF3zE0JGuPDogj/soyDCV42M0B
Op7f9Z+xJl3/3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:33 2025 by rpki-client