
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: 9z+KJISw2gSgiHwcgnWjFema5Q69sEuTr6hwuLWWojk=
Subject key identifier: 98:12:BC:7B:5E:D6:94:BF:93:75:4F:FE:64:A6:7E:C5:CB:EB:A0:ED
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 01988A6A602A42429A46B582CFCA2B7E3C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 16:01:23 +0000
Manifest this update: Fri 08 Aug 2025 16:01:23 +0000
Manifest next update: Sat 09 Aug 2025 16:01:23 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: nJpJ0WwbD9RC66dptwI9ohQplq5r4THVFdzpsJOEtj0=)
3: v4-Es1Kwp5EvyY2ian59bv_yZR4.roa (hash: dInoXwT69P80+5Zt0K7jQxUhAfqmo2mQHLpFYWRuEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:60:2a:42:42:9a:46:b5:82:cf:ca:2b:7e:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Aug 8 16:01:23 2025 GMT
Not After : Aug 9 16:01:23 2025 GMT
Subject: CN=9812bc7b5ed694bf93754ffe64a67ec5cbeba0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:4a:b4:22:ec:be:63:8e:32:ed:39:d4:62:
53:6b:a8:1b:7a:2c:3a:0c:94:36:32:de:c9:1b:f2:
ef:69:73:e5:bb:bc:96:1e:8e:aa:29:49:e0:25:4c:
b3:30:20:52:45:b6:97:6d:60:c0:37:ca:7c:0e:a2:
9a:c4:ae:42:1c:93:48:12:99:7e:1e:d5:d7:7e:b3:
c5:aa:f2:f0:35:b6:87:1c:0a:17:2a:96:c7:ba:70:
b0:20:24:6c:59:1e:71:81:e7:9f:c3:49:33:2c:c5:
d5:6a:4a:51:c5:95:40:bd:8f:32:24:7d:b2:f9:0d:
8b:f3:d8:50:36:a8:ac:58:cd:0a:fe:39:64:e6:bd:
93:68:77:1a:5d:24:20:06:04:cb:cb:0a:b4:a4:eb:
18:77:00:7e:3e:d7:8a:b9:c3:ff:32:15:a8:cc:1b:
af:4d:3f:ae:2b:5e:4d:ca:d1:b6:9d:ac:51:ce:cf:
2b:ef:f9:0a:74:9b:6c:3e:ed:0c:cb:25:66:a9:54:
95:a8:52:9a:09:74:6d:87:73:6f:5c:cf:7b:39:6a:
f0:6a:42:11:36:50:36:b5:0f:f9:66:35:84:6b:c1:
f1:e6:c9:2a:ee:bb:36:85:9f:41:4d:14:9d:da:0b:
b6:cc:19:34:6a:11:c2:f8:8c:05:19:e9:d1:12:30:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:BC:7B:5E:D6:94:BF:93:75:4F:FE:64:A6:7E:C5:CB:EB:A0:ED
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2e:77:e6:dd:1a:e5:fe:ee:7a:35:98:e1:4a:cd:b1:d7:30:
c3:f1:e5:38:c9:d8:04:e1:02:8c:f3:9e:9d:94:17:4c:91:c9:
a0:79:84:cc:48:76:45:e9:d4:f4:6e:2f:e3:57:b4:e0:91:77:
25:a5:90:88:87:02:27:fc:4a:53:b4:c9:39:36:6b:c1:80:70:
ac:9b:7f:f8:b5:b3:41:0f:02:a5:e8:32:b1:b6:74:be:70:c6:
26:5c:cf:e9:ca:4d:0c:a0:08:2c:6d:97:aa:86:c9:ba:fa:37:
20:4c:02:02:fc:ac:c9:57:86:31:4c:2e:97:ce:6c:4a:ff:83:
0d:06:dc:97:97:c0:1e:70:a6:d7:14:bb:c4:ba:45:9c:23:aa:
da:fc:39:f0:6c:3d:8b:b3:89:a6:59:b8:f6:de:89:bf:6d:fc:
5c:36:be:80:18:bf:bf:3e:7b:9d:cf:10:f7:fd:e9:3a:8a:bb:
c8:68:0a:a9:55:94:84:22:32:40:b3:19:5f:19:b4:a6:c8:ff:
65:6d:ed:c5:fd:11:8f:cd:81:27:f0:83:f8:67:93:31:96:60:
ac:e2:64:1f:21:2d:c1:a3:ba:47:72:1b:eb:a7:92:af:98:1b:
bb:e2:57:e7:27:ce:8c:f6:de:5f:88:1c:a5:cb:8c:8e:bb:a6:
36:5f:f3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:21 2025 by rpki-client