Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File: _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier: TrHBYX1BIydakGcBn26rYsOF1SLjy7ZqkZtbAW9JN3Y=
Subject key identifier: C6:96:55:0B:E2:10:F8:41:E4:75:87:26:FB:26:C0:F6:06:4B:5D:50
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 019A4EF4A5D1F6D2FBDE1963DC035029118F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number: 1421
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: 41n65uhvIrOs7pMXCEwIyWAHStU.roa (hash: LjxJ/BCjHptc+tFYMZxLMpRYryRPRgRDdjg86l2vAZ0=)
2: LPzeUoKKbtBniuOIqj8nJU_M67E.roa (hash: BXGvnjHmSyIsPAZUo8glr5Sei8gWA74Tz3aN6uo9z9U=)
3: W2nNEF8qHTKft1xSAnUWoLZGFiY.roa (hash: dDsFO7ipduSuI7GlAukzs3zzXlpJSjZo32XEFl3Fb7g=)
4: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: Yozbkvbgxl9mXGJzlGNJg+Dw6eKypJHvCHigo2hCnPI=)
5: kITElgml7RZxWNr4eKfvM1E5VyM.roa (hash: mYphYuWKa2oClwokItjP8xyLuFG6crqS5Vudhf5XeTk=)
6: koZdUg9eyaaGc1g9ur5UXBYavrc.roa (hash: GaEJ7CaaD7TlL7BrSl+zzHjmdcf3ad/46vcHTxYsYGE=)
7: r3RFE-879aQPlTAYSIzxRB7I1g4.roa (hash: HvDiU5OY5w8GPNN2r0h7VcqBDnJGg+XhKF07qtUJ66M=)
8: zsj7ZU7c27fACndp52_vAKfImfU.roa (hash: VK3pf67Xdj80z42M9vc+h8UO7pmF3OLN63Yl3j4PoPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a5:d1:f6:d2:fb:de:19:63:dc:03:50:29:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=c696550be210f841e4758726fb26c0f6064b5d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:b7:bb:da:a8:61:ab:c8:08:0f:83:dd:0c:
83:99:d2:db:d0:15:e9:f3:0a:d8:e5:2e:03:b4:db:
df:5c:6b:6d:1f:4d:3b:fe:24:df:35:6e:40:ab:b1:
20:ea:f5:2c:24:1e:cd:1c:49:e0:e4:8b:bd:0f:06:
76:c4:37:e4:d0:aa:5a:81:2f:8b:5e:3e:ff:3a:af:
a3:04:ed:3c:45:0f:94:01:bb:84:c2:90:bf:50:e0:
3c:09:1b:b3:16:6b:30:a0:d7:c8:c1:67:81:13:90:
48:68:35:d0:5a:8e:ce:b2:36:ab:22:e4:f6:5b:bd:
d4:f9:08:e0:2f:fe:bd:2b:6e:3b:2b:34:b0:4f:95:
03:83:01:3d:21:20:54:ec:7a:04:0d:8e:e6:2b:87:
4a:8c:69:16:ed:f0:65:1c:bc:40:62:75:6c:b3:cf:
53:36:d2:69:b1:27:88:b2:e8:af:be:10:2e:64:dd:
6c:7c:52:3a:9d:f8:f5:ca:16:a7:d9:8d:cc:49:25:
c7:c2:d5:f9:98:05:ff:4f:67:95:1f:83:f0:d9:12:
98:e4:62:60:c4:c0:42:4a:d6:4b:f9:84:8e:d2:88:
4b:a7:97:2b:23:2a:55:a9:8f:8c:e5:86:cb:65:de:
be:9c:6f:23:cb:06:47:6f:06:03:64:f9:23:3c:d7:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:55:0B:E2:10:F8:41:E4:75:87:26:FB:26:C0:F6:06:4B:5D:50
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:92:8b:24:7a:8a:3c:1c:b8:c2:1c:85:01:6a:a6:83:78:
8a:98:9f:81:56:55:23:2a:1a:89:3b:7a:5a:f3:aa:b1:86:8a:
bd:ce:ac:27:23:3f:ea:fd:3c:8c:7e:ec:03:46:87:8c:8a:34:
20:2e:f1:a6:c6:7b:90:52:d1:05:54:ab:74:52:fd:54:66:f5:
8e:ce:d9:7f:f2:ce:b5:dd:94:ea:c8:91:80:94:84:fa:ef:ce:
47:77:fc:67:2f:e5:7e:37:86:e9:2a:ea:4d:1e:cc:ef:10:ce:
dc:49:66:d9:c6:ec:d2:8e:69:eb:c5:c2:b7:5f:fa:2a:4a:ce:
7d:56:a3:c9:f7:d4:6e:87:77:2c:fc:fe:9f:b1:4e:68:c0:56:
8e:73:76:0c:02:e6:92:3f:16:38:1b:59:58:50:22:49:f8:69:
ff:07:9a:14:b5:08:83:2e:2c:35:82:58:ed:62:ba:0c:df:74:
9e:5b:0c:f9:b4:a0:2b:9a:de:9a:5b:d9:50:19:38:0f:d5:13:
6e:47:7a:dc:3b:bc:22:e9:dc:dc:60:5b:99:33:52:71:68:5b:
8d:52:7e:90:6c:d2:1f:3f:03:ec:ba:fd:8a:ea:8d:f6:bd:a7:
c2:ab:0c:a2:19:15:79:39:c8:78:48:f6:f1:ff:06:1f:56:f2:
94:16:b6:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KXR9tL73hlj3ANQKRGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUxMTA0MTMwMDQ3WhcNMjUxMTA1MTMwMDQ3WjAzMTEwLwYDVQQD
EyhjNjk2NTUwYmUyMTBmODQxZTQ3NTg3MjZmYjI2YzBmNjA2NGI1ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuq3u9qoYavICA+D3QyDmdLb0BXp
8wrY5S4DtNvfXGttH007/iTfNW5Aq7Eg6vUsJB7NHEng5Iu9DwZ2xDfk0KpagS+L
Xj7/Oq+jBO08RQ+UAbuEwpC/UOA8CRuzFmswoNfIwWeBE5BIaDXQWo7OsjarIuT2
W73U+QjgL/69K247KzSwT5UDgwE9ISBU7HoEDY7mK4dKjGkW7fBlHLxAYnVss89T
NtJpsSeIsuivvhAuZN1sfFI6nfj1yhan2Y3MSSXHwtX5mAX/T2eVH4Pw2RKY5GJg
xMBCStZL+YSO0ohLp5crIypVqY+M5YbLZd6+nG8jywZHbwYDZPkjPNfzwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaWVQviEPhB5HWHJvsmwPYGS11QMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRuSiyR6
ijwcuMIchQFqpoN4ipifgVZVIyoaiTt6WvOqsYaKvc6sJyM/6v08jH7sA0aHjIo0
IC7xpsZ7kFLRBVSrdFL9VGb1js7Zf/LOtd2U6siRgJSE+u/OR3f8Zy/lfjeG6Srq
TR7M7xDO3Elm2cbs0o5p68XCt1/6KkrOfVajyffUbod3LPz+n7FOaMBWjnN2DALm
kj8WOBtZWFAiSfhp/weaFLUIgy4sNYJY7WK6DN90nlsM+bSgK5remlvZUBk4D9UT
bkd63Du8Iunc3GBbmTNScWhbjVJ+kGzSHz8D7Lr9iuqN9r2nwqsMohkVeTnIeEj2
8f8GH1bylBa2cQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:49 2025 by rpki-client