Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: 4AMul98A1Yf6vUtJ1h+h7ZRWrFD+FSzi7aAaGpDZZQk=
Subject key identifier: 76:4A:04:98:A8:2B:FF:76:0D:C2:1F:EF:07:05:D2:44:1A:15:62:AE
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 0198345E63738F0C41E97051E58E7642C8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 04FA
Signing time: Tue 22 Jul 2025 23:00:57 +0000
Manifest this update: Tue 22 Jul 2025 23:00:57 +0000
Manifest next update: Wed 23 Jul 2025 23:00:57 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: rapF6D1hrATzuei8L7UK1Q0BgAonIvha2uOCriQKDJg=)
2: _potATJqOaFRbfrrUyC81tvt8bE.roa (hash: uJ4lvA5jV+wv5Fa9R4ZV8hLyulLrozYlDZcFmzcOKdA=)
3: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:5e:63:73:8f:0c:41:e9:70:51:e5:8e:76:42:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Jul 22 23:00:57 2025 GMT
Not After : Jul 23 23:00:57 2025 GMT
Subject: CN=764a0498a82bff760dc21fef0705d2441a1562ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:0a:ce:e7:2f:6e:8a:b3:a5:57:65:e9:b2:
e8:99:31:36:66:7f:2a:a3:cd:87:76:6f:8d:6a:cc:
4e:fc:ed:6f:3f:da:52:82:79:dd:3a:87:c4:09:af:
5a:62:64:30:99:71:7a:54:16:ea:8f:4a:7b:ea:81:
d3:a8:a4:b9:85:2c:a2:36:22:05:14:2d:00:bb:9c:
ac:ae:18:a5:e0:8a:68:4b:79:21:de:0f:2b:a6:c4:
0b:64:a6:b5:da:62:cd:86:3b:43:fd:c7:f0:e7:66:
27:d4:0d:31:c5:9a:f9:dc:18:1e:05:a4:a5:90:66:
03:ee:6b:e5:a4:f8:a6:12:15:80:db:87:62:5b:df:
9c:27:f9:a2:a9:4e:db:eb:c6:1f:b5:f2:99:64:ff:
12:a0:00:eb:20:6d:55:2d:47:36:16:93:4a:cf:06:
b4:8b:95:06:2e:11:c8:54:8e:8e:f8:db:8c:e9:07:
bd:ba:33:ec:6e:d0:38:86:26:0f:4c:f3:f8:9b:5d:
44:de:f8:aa:7f:07:97:e9:ed:3d:6a:df:db:48:bd:
d3:e9:4f:ca:3f:16:27:48:34:3a:70:39:5a:d1:24:
ea:78:e7:df:36:16:11:f6:60:6d:d4:72:2d:fc:d5:
2d:b6:c2:fd:f1:78:0d:32:c1:fc:f6:2a:86:2f:4b:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:04:98:A8:2B:FF:76:0D:C2:1F:EF:07:05:D2:44:1A:15:62:AE
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:82:0a:50:67:ef:c9:a3:26:d1:2e:97:22:a9:66:17:5a:80:
36:61:2c:01:9f:88:9f:ab:8e:78:0c:21:aa:a1:24:e6:75:b1:
18:a2:20:ff:8f:a0:58:66:43:84:e9:5e:de:3e:eb:d7:00:cb:
83:ee:01:4b:75:1f:bf:3a:94:13:66:a9:1f:c2:3b:ea:62:eb:
05:22:9e:1c:a3:09:c6:22:18:e3:fa:4c:f6:ea:fa:a2:da:53:
e7:01:7d:8d:35:97:14:79:d9:36:f8:73:d4:b6:2d:b8:1f:1d:
2c:66:fe:d2:85:bb:01:4f:e4:f2:f4:17:09:07:82:29:d4:b1:
71:86:d6:96:28:a8:a6:23:b0:91:92:56:47:f1:d5:40:5f:a5:
cb:79:4e:bc:7e:4f:15:dd:c7:a8:1c:95:e5:f9:61:25:7d:cf:
40:0e:94:b6:a3:7f:c8:5c:3e:db:5a:0f:ac:b5:6c:5d:a3:b1:
22:93:e9:21:d4:61:0a:da:4e:cd:f3:5a:8c:a8:49:ee:b0:65:
f8:01:ab:30:d3:10:70:a4:e8:47:ef:8c:d9:b2:23:03:c1:19:
03:59:8c:19:8b:59:6a:63:9b:bb:f8:49:d4:b2:19:c9:cb:7b:
20:8e:f6:c6:8a:40:48:57:f2:ff:cb:1a:7e:cb:de:54:65:2b:
e2:7c:68:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0XmNzjwxB6XBR5Y52QsjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjUwNzIyMjMwMDU3WhcNMjUwNzIzMjMwMDU3WjAzMTEwLwYDVQQD
Eyg3NjRhMDQ5OGE4MmJmZjc2MGRjMjFmZWYwNzA1ZDI0NDFhMTU2MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc8KzucvboqzpVdl6bLomTE2Zn8q
o82Hdm+NasxO/O1vP9pSgnndOofECa9aYmQwmXF6VBbqj0p76oHTqKS5hSyiNiIF
FC0Au5ysrhil4IpoS3kh3g8rpsQLZKa12mLNhjtD/cfw52Yn1A0xxZr53BgeBaSl
kGYD7mvlpPimEhWA24diW9+cJ/miqU7b68YftfKZZP8SoADrIG1VLUc2FpNKzwa0
i5UGLhHIVI6O+NuM6Qe9ujPsbtA4hiYPTPP4m11E3viqfweX6e09at/bSL3T6U/K
PxYnSDQ6cDla0STqeOffNhYR9mBt1HIt/NUttsL98XgNMsH89iqGL0tP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZKBJioK/92DcIf7wcF0kQaFWKuMB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYIKUGfv
yaMm0S6XIqlmF1qANmEsAZ+In6uOeAwhqqEk5nWxGKIg/4+gWGZDhOle3j7r1wDL
g+4BS3UfvzqUE2apH8I76mLrBSKeHKMJxiIY4/pM9ur6otpT5wF9jTWXFHnZNvhz
1LYtuB8dLGb+0oW7AU/k8vQXCQeCKdSxcYbWliiopiOwkZJWR/HVQF+ly3lOvH5P
Fd3HqByV5flhJX3PQA6UtqN/yFw+21oPrLVsXaOxIpPpIdRhCtpOzfNajKhJ7rBl
+AGrMNMQcKToR++M2bIjA8EZA1mMGYtZamObu/hJ1LIZyct7II72xopASFfy/8sa
fsveVGUr4nxoww==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:10:25 2025 by rpki-client