Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: wQucLTZA/gB8F2b/2TLhTi1VC49rE0MKw6a7ooUkW8w=
Subject key identifier: F2:23:DD:38:DB:97:F1:4D:BB:8E:8C:85:96:94:BB:51:4D:04:F8:BC
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019A5187E977DE761DDB9CA8F4B81273B509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 073E
Signing time: Wed 05 Nov 2025 01:00:52 +0000
Manifest this update: Wed 05 Nov 2025 01:00:52 +0000
Manifest next update: Thu 06 Nov 2025 01:00:52 +0000
Files and hashes: 1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: FY2vBwvmL+VfISD+2Ay1OGfswBMEpx0S8rZVXCzyvjE=)
2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e9:77:de:76:1d:db:9c:a8:f4:b8:12:73:b5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Nov 5 01:00:52 2025 GMT
Not After : Nov 6 01:00:52 2025 GMT
Subject: CN=f223dd38db97f14dbb8e8c859694bb514d04f8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:dc:ae:f3:f4:d3:da:9b:3c:e3:08:8e:7c:
46:9b:56:e9:4e:fe:31:84:c3:d3:55:d5:4a:f7:ad:
44:15:1c:dd:ac:ba:17:2f:53:67:4e:be:b5:84:e3:
f4:1e:6d:db:4b:04:a0:2d:02:3b:51:ed:9c:df:14:
ae:96:28:74:1b:e7:58:3f:dc:7b:2f:d0:ec:33:d2:
27:e9:ef:0c:3a:99:8b:88:e7:47:ed:bf:40:62:42:
18:c8:01:45:d5:a6:ce:a2:cc:8d:1f:44:53:77:e5:
79:46:e3:6d:14:1c:de:5b:a9:22:64:68:a5:e4:ea:
6c:6d:3b:42:b9:79:2d:06:89:e0:b6:5e:13:3a:c1:
12:96:51:62:b2:10:ae:82:5f:cc:f2:74:9b:95:ec:
48:64:1a:d3:c7:d9:ec:51:f5:d4:08:cd:fa:8b:63:
a8:1a:8a:57:66:51:65:b5:ec:e4:24:08:0d:4b:2c:
ba:6d:3b:cb:60:cc:18:74:44:1c:53:22:8a:d7:ac:
50:fb:6e:f8:f2:d3:72:b3:dc:71:86:12:0c:cb:ab:
84:ba:52:c1:0c:dc:fd:f1:7f:e6:b4:07:ea:30:ea:
ba:0a:33:aa:7f:2b:55:cd:d7:4e:5e:59:02:d5:d4:
e7:f9:38:ab:b9:8a:79:82:9b:f0:79:be:65:07:b8:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:DD:38:DB:97:F1:4D:BB:8E:8C:85:96:94:BB:51:4D:04:F8:BC
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9e:ff:ae:fe:b4:ad:68:bd:37:9a:98:aa:de:d6:d6:71:1b:
06:3c:ee:27:d6:fb:ef:53:f5:9c:8e:90:f7:7c:33:22:f0:a9:
c2:82:8a:9e:2a:bd:70:07:96:18:77:0d:ca:76:ee:96:c0:93:
ee:06:d2:67:1e:5a:62:b2:ee:61:f1:74:7c:f0:5c:6a:c7:8f:
aa:1e:d9:e3:aa:72:b7:43:8a:49:19:54:e6:3e:02:20:34:1a:
bd:fc:29:ec:1c:3b:c5:fc:5b:4a:54:e3:c3:98:ee:90:15:d4:
8e:22:d2:84:2f:af:00:52:21:1f:23:fb:a9:a3:16:a1:7f:1b:
50:27:3d:4a:ba:24:4c:ee:f8:74:33:d5:12:12:e2:ef:1e:54:
d1:9f:0e:2e:20:4a:aa:dc:c9:79:e5:cc:49:79:71:ac:13:b5:
1e:c4:b8:cb:35:90:e6:17:8b:b7:53:65:50:03:b6:5b:87:56:
2d:e9:7e:2a:56:25:d0:27:58:03:c7:87:07:a8:62:28:2b:a2:
47:db:53:47:fb:3e:4d:44:2b:1f:b8:69:99:2d:07:fb:4f:f6:
53:0d:6b:b7:73:c5:69:90:d8:2d:50:ad:ac:2d:93:86:d3:97:
c1:0b:da:cb:63:95:7d:55:02:69:82:e5:ce:f6:e1:2d:7c:6b:
36:6f:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:35 2025 by rpki-client