Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: Usp3bFFgltpjnBlQWH9Et6QYhY0dG/Br4AkQb4c7Xag=
Subject key identifier: B8:91:9E:F3:DE:D0:C3:9F:D6:24:EF:F8:6D:21:03:FC:DD:7C:89:92
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0198744F94A5C6F1FC99E43C3BA544F2655A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 05DB
Signing time: Mon 04 Aug 2025 09:00:29 +0000
Manifest this update: Mon 04 Aug 2025 09:00:29 +0000
Manifest next update: Tue 05 Aug 2025 09:00:29 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: 4BTkr1FM0+Hr4rRFqLXZ4TI46I+8np1rzT4M2auMa0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:94:a5:c6:f1:fc:99:e4:3c:3b:a5:44:f2:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Aug 4 09:00:29 2025 GMT
Not After : Aug 5 09:00:29 2025 GMT
Subject: CN=b8919ef3ded0c39fd624eff86d2103fcdd7c8992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:5c:85:20:bf:79:c8:a2:7c:8e:62:da:0b:
f0:b6:e6:36:d4:0e:2e:cf:04:58:2a:9b:0f:07:e0:
d7:fd:a8:1b:0c:77:f5:db:d6:94:56:c8:68:ab:10:
ba:ab:7e:2e:32:13:8f:9e:61:b1:2a:b8:a5:ff:2c:
8d:06:72:94:a4:f2:81:00:c4:b1:33:95:27:36:16:
36:3e:46:ff:e9:40:cb:3d:66:ef:b2:85:67:b5:e8:
c9:22:d9:1c:49:c6:cb:eb:7b:43:03:27:77:1d:6e:
01:ef:25:d6:96:c6:51:f9:6a:2b:2e:be:52:01:bc:
57:7e:eb:1e:36:5b:cd:ae:dd:3b:8b:9b:de:34:5b:
9f:34:58:b2:38:35:f1:ea:aa:3d:75:a0:6c:e0:e7:
1f:72:1e:88:8a:b3:50:2a:48:bd:81:1d:e6:9d:51:
35:75:f0:cf:bc:f9:af:94:9f:50:37:70:8d:71:c5:
83:18:6e:46:f5:f0:86:b5:c0:35:44:54:11:44:76:
82:43:3b:10:0e:74:6c:9c:92:16:91:1a:7a:9f:83:
a6:79:38:0d:f8:22:d1:59:a2:59:d0:0a:33:b3:c9:
93:84:2b:58:3a:72:35:9e:b6:5b:b9:c6:8b:15:46:
6a:aa:e4:d7:e7:2a:10:5f:b5:f2:a1:96:37:44:e0:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:91:9E:F3:DE:D0:C3:9F:D6:24:EF:F8:6D:21:03:FC:DD:7C:89:92
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2e:ef:b7:4d:74:c0:8c:ac:05:bb:a2:26:53:0a:22:be:aa:
7d:2d:f1:30:97:d3:01:09:b3:e9:54:a3:49:13:50:9f:3b:6e:
5d:54:ed:e0:e0:61:98:16:f0:42:04:ca:b5:61:ea:b3:14:b7:
41:bc:1f:da:8c:53:ea:94:69:e9:37:db:9e:5d:fe:e3:18:25:
90:45:5a:98:00:c6:1c:1d:f1:47:21:05:28:99:46:99:9a:da:
d0:7c:ba:45:49:4e:81:df:84:6a:76:c0:8b:42:42:07:f1:2f:
f8:3f:87:a7:41:e4:28:27:28:9c:e0:05:41:a8:92:f9:83:3a:
d8:0b:de:7a:ec:84:9b:d5:12:9c:b2:a4:20:f3:7f:f2:e7:3e:
8a:85:f8:0f:c8:e2:2d:57:e2:c4:6c:2a:be:4f:3f:75:14:a0:
0a:ae:34:e9:ae:2d:8a:84:87:bb:e6:b3:d8:e2:c6:4a:27:db:
73:b8:f9:12:4c:c9:05:d4:74:c7:fb:52:d8:23:d6:31:b1:56:
fd:0a:88:d6:7d:5d:60:e0:d2:30:9e:3a:2b:e8:26:82:40:23:
24:c8:f7:cf:4e:06:4c:d0:97:2f:3e:18:fd:37:4e:8a:ae:a5:
60:ab:2c:fa:39:6c:c9:8d:2f:5c:94:79:97:00:ab:c0:ac:65:
aa:f6:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:47 2025 by rpki-client