Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: 1mDyKhNIYV/QuYrqn263gUD2OfU22FtJ0906+LDAN5w=
Subject key identifier: A9:8D:B3:E6:19:CA:EF:38:F5:2A:C0:31:78:5F:A0:61:63:F4:7C:EF
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 01987418E5E9AEBA32B6602F0D11CA77C427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 09A3
Signing time: Mon 04 Aug 2025 08:00:45 +0000
Manifest this update: Mon 04 Aug 2025 08:00:45 +0000
Manifest next update: Tue 05 Aug 2025 08:00:45 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: t0LyJ6bXywqN8bFdEsyPdmKZWx5dFa4Sy08/HkJ+zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e5:e9:ae:ba:32:b6:60:2f:0d:11:ca:77:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Aug 4 08:00:45 2025 GMT
Not After : Aug 5 08:00:45 2025 GMT
Subject: CN=a98db3e619caef38f52ac031785fa06163f47cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:d3:cd:6d:7f:91:b1:03:f2:19:27:92:39:
c5:a9:44:50:fe:77:17:bf:3b:7e:1b:7e:5e:41:65:
22:d8:44:c1:b9:a7:d4:d6:a1:0b:54:62:00:7d:e4:
56:20:d2:44:41:70:29:8e:11:64:6f:0f:38:2a:6b:
13:49:bd:f4:1a:9a:9e:bc:38:18:37:3a:87:ab:74:
aa:fc:0c:79:b7:9f:19:3e:c0:6a:ef:12:91:71:9b:
4f:84:65:ba:d4:83:06:7b:06:94:3a:76:e9:6c:ea:
32:4a:d1:e2:f1:4c:d8:d4:55:67:63:95:36:5c:04:
e1:e4:bd:ca:90:14:ea:bf:76:0d:16:0b:0b:af:d0:
26:ff:c9:9a:65:6c:dd:76:d5:fd:45:b6:c9:ef:ff:
10:91:2a:4a:90:38:f9:70:05:82:53:b0:58:d4:5e:
e0:40:cf:09:27:13:14:75:3f:6c:a6:82:3c:31:d1:
4d:c1:cc:69:d8:fd:30:72:25:12:8c:d7:00:4d:bd:
6f:2c:8f:9d:2d:ff:87:b7:fc:46:1c:ec:1a:b7:67:
e2:db:d7:0f:5e:4c:13:79:fb:4e:ca:c5:7d:d2:39:
4a:88:6c:64:57:86:70:ad:33:1d:69:c0:be:e8:0b:
7a:f3:8b:63:30:37:38:dc:44:df:02:ff:72:06:5a:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8D:B3:E6:19:CA:EF:38:F5:2A:C0:31:78:5F:A0:61:63:F4:7C:EF
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:39:96:c0:cc:59:43:61:dc:eb:2d:01:29:8c:9e:3f:94:b9:
06:4f:12:9c:93:d5:a9:78:f1:61:f6:4d:3f:c5:ed:f0:d0:23:
16:dd:42:f4:a4:b2:52:27:d7:12:8c:95:53:3a:1b:50:e5:b1:
a7:72:76:b2:12:da:08:86:51:ba:45:1a:e9:f3:86:b0:4a:95:
1a:de:d0:48:b1:7c:17:44:5a:14:d5:39:51:00:31:b2:43:f8:
df:b7:ca:8b:05:dc:d6:0e:88:52:5a:27:a0:d9:0b:60:b0:4a:
0b:3c:58:20:9a:23:f4:24:45:03:57:11:5c:bd:b6:b9:f3:e0:
c1:4d:59:d9:2d:40:11:cf:be:96:5e:0b:fa:81:16:eb:65:8e:
52:37:27:f9:38:7a:7d:c2:b9:c8:05:76:77:f2:17:29:73:74:
37:6a:32:7a:c3:e2:5e:2e:63:6f:68:c8:10:3d:5e:12:72:4f:
aa:6f:44:b3:49:cb:f0:14:8c:3f:85:a1:63:3d:35:92:6b:00:
ea:be:a6:b8:c7:e2:ad:7f:05:41:ec:8f:46:fb:8f:0c:b8:ad:
6f:25:fb:00:ec:70:10:79:bf:0e:e5:d7:34:b4:b0:dd:d0:d3:
7f:77:2b:28:b3:e7:75:d3:e0:58:3a:f0:15:8f:d7:97:ae:82:
2d:8f:5c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GOXprroytmAvDRHKd8QnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjUwODA0MDgwMDQ1WhcNMjUwODA1MDgwMDQ1WjAzMTEwLwYDVQQD
EyhhOThkYjNlNjE5Y2FlZjM4ZjUyYWMwMzE3ODVmYTA2MTYzZjQ3Y2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3bTzW1/kbED8hknkjnFqURQ/ncX
vzt+G35eQWUi2ETBuafU1qELVGIAfeRWINJEQXApjhFkbw84KmsTSb30GpqevDgY
NzqHq3Sq/Ax5t58ZPsBq7xKRcZtPhGW61IMGewaUOnbpbOoyStHi8UzY1FVnY5U2
XATh5L3KkBTqv3YNFgsLr9Am/8maZWzddtX9RbbJ7/8QkSpKkDj5cAWCU7BY1F7g
QM8JJxMUdT9spoI8MdFNwcxp2P0wciUSjNcATb1vLI+dLf+Ht/xGHOwat2fi29cP
XkwTeftOysV90jlKiGxkV4ZwrTMdacC+6At684tjMDc43ETfAv9yBlqvawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmNs+YZyu849SrAMXhfoGFj9HzvMB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTmWwMxZ
Q2Hc6y0BKYyeP5S5Bk8SnJPVqXjxYfZNP8Xt8NAjFt1C9KSyUifXEoyVUzobUOWx
p3J2shLaCIZRukUa6fOGsEqVGt7QSLF8F0RaFNU5UQAxskP437fKiwXc1g6IUlon
oNkLYLBKCzxYIJoj9CRFA1cRXL22ufPgwU1Z2S1AEc++ll4L+oEW62WOUjcn+Th6
fcK5yAV2d/IXKXN0N2oyesPiXi5jb2jIED1eEnJPqm9Es0nL8BSMP4WhYz01kmsA
6r6muMfirX8FQeyPRvuPDLitbyX7AOxwEHm/DuXXNLSw3dDTf3crKLPnddPgWDrw
FY/Xl66CLY9cFw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:44 2025 by rpki-client