Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: hT2Ig4DPKmtRny7ZqMibWOfGfJeIqCk+QMm/Gmx5tMY=
Subject key identifier: 83:E0:83:06:A6:D8:AC:08:67:23:E9:2F:4C:28:F7:BD:93:3D:02:C2
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 019A4F629917FE4095AD0022E25682C07EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: pQXpqH5BDLpBbg5xKvC676xiKEMwdLQ0jnX8mkTR7Fs=)
3: sPxjsNKAZYfgxPi8TQlY-mZZcT4.roa (hash: EWGb5uGqI3pCu9DA248NQJ9YLr39oAfQHZAN5stmGVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:99:17:fe:40:95:ad:00:22:e2:56:82:c0:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=83e08306a6d8ac086723e92f4c28f7bd933d02c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:57:04:46:33:f3:03:26:27:d3:9d:87:3d:
4d:ee:77:71:1f:57:7c:40:d2:c7:37:e1:00:7b:17:
33:6f:0d:f0:98:23:be:10:2f:c3:3d:2a:20:51:38:
be:f8:9e:c6:b5:91:93:93:7f:81:f7:ce:38:41:0f:
bf:08:a0:64:b5:9f:fc:b0:d2:57:cc:e7:fd:f1:8d:
d6:21:62:d3:f7:1a:dd:6c:82:32:c0:72:bc:3f:d9:
03:46:3f:f9:63:d8:21:8a:66:a4:e4:70:a6:a1:48:
96:60:80:c1:84:3c:24:47:09:6d:04:57:1c:d5:9c:
fc:15:80:73:27:79:3b:b2:54:f7:fa:af:12:bc:37:
78:1b:80:af:4c:90:a8:fc:ce:23:87:b0:9c:04:57:
e8:20:0f:a2:35:0f:6d:de:87:4d:d1:c7:ed:83:2b:
60:fb:79:17:ab:90:70:b7:38:02:c2:f9:94:60:8b:
47:9a:7b:6a:d0:6d:51:80:4b:51:fc:09:7f:ba:d8:
2b:3a:94:0f:34:07:29:2d:37:35:62:d3:fc:21:8c:
ea:dd:af:fe:33:91:a0:9d:7c:78:31:b5:44:09:b1:
8a:23:37:d7:5d:18:86:56:bd:45:39:35:28:a6:6b:
de:da:a3:2c:b3:99:cc:8d:3e:95:c9:af:46:66:35:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:83:06:A6:D8:AC:08:67:23:E9:2F:4C:28:F7:BD:93:3D:02:C2
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:c4:86:d4:63:e3:52:ae:7a:d6:a4:b0:7d:fc:16:cf:9e:
a1:25:13:8a:3a:3d:1d:6c:a1:3b:6b:e2:af:9c:6a:27:ef:16:
53:27:72:0c:4a:06:31:93:34:86:07:9d:9e:ca:06:ff:f8:ef:
e8:11:19:c4:c8:79:ae:01:15:df:ca:0d:63:f6:a1:cb:85:fc:
15:7b:d6:7c:4a:14:2f:34:a5:8f:53:6a:6a:13:ed:ac:28:1c:
4d:fb:a2:b2:2a:a7:cb:5b:48:33:64:b9:cd:18:97:ae:da:14:
16:8f:93:01:a6:99:98:2a:d7:23:dd:cd:20:d5:5e:1c:47:d8:
e2:e6:3d:5c:82:4c:a4:f0:23:3d:3e:92:a7:8d:55:55:13:b9:
bb:31:12:12:0a:17:c7:f7:a6:1c:98:ba:67:08:d1:c5:36:de:
35:11:13:b4:0b:07:be:7e:9c:77:fb:aa:22:c0:e2:9b:c3:f0:
4d:5c:e5:ac:77:54:31:62:40:36:2d:80:1d:54:6d:93:52:82:
b3:5e:09:18:59:3d:52:c9:1a:51:8a:e5:26:6d:43:58:9c:36:
90:f4:0d:3a:90:23:02:cd:0e:d7:c3:33:8c:9a:92:52:04:fb:
8d:d0:c6:a8:43:2d:9a:cb:55:6c:57:67:c5:ea:78:9b:97:ed:
1f:fb:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:14 2025 by rpki-client