Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: DcxS8zx494El2jPFFK0WXV1uickaTRZg9MvVVAZB+kc=
Subject key identifier: DD:D9:AE:B1:D9:4B:16:9F:83:8F:3E:5D:D1:8B:0A:63:A3:06:30:0F
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0198439A42A9D05DD01BC27B405117D73CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 1302
Signing time: Fri 25 Jul 2025 22:00:39 +0000
Manifest this update: Fri 25 Jul 2025 22:00:39 +0000
Manifest next update: Sat 26 Jul 2025 22:00:39 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: TvSacEQtLLJ4r3PgHQzpZlTlZGSp5MdYxQJvDigtZ6o=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:42:a9:d0:5d:d0:1b:c2:7b:40:51:17:d7:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jul 25 22:00:39 2025 GMT
Not After : Jul 26 22:00:39 2025 GMT
Subject: CN=ddd9aeb1d94b169f838f3e5dd18b0a63a306300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:9b:26:5d:1c:c2:d6:7b:18:2b:06:19:8b:
5a:de:49:d3:4c:53:af:c9:9e:80:c4:d0:b8:d5:d7:
ab:95:95:69:34:ef:e5:d2:5f:84:11:33:fb:f9:00:
1a:a1:87:0c:7d:a3:ec:c5:38:f2:d0:ac:42:49:9b:
ea:cd:98:ef:95:22:e0:4e:98:23:d4:68:47:3e:51:
f9:4c:0b:d3:fa:35:95:38:be:81:61:91:26:dc:d5:
d9:d0:a3:00:d1:43:ae:b3:96:eb:2f:93:1d:dd:1b:
08:95:d1:19:4e:63:7b:3c:2b:b5:a9:f1:bc:a9:b5:
d7:cf:7f:71:ea:fe:9d:ac:3a:90:4c:93:46:c1:6f:
e8:ab:1c:eb:17:6c:df:2d:10:82:fe:bb:27:6e:0e:
a8:90:5a:40:64:af:b6:52:b7:4d:a3:1a:32:ff:50:
3c:bc:da:9d:d1:79:a7:07:be:29:8f:20:ff:38:7d:
6b:bf:22:6a:00:1b:38:b6:a4:cc:85:e6:87:10:c1:
3d:e3:43:74:28:10:61:c1:3b:79:67:4d:a2:70:cb:
ac:39:e9:35:95:be:94:bb:a2:f9:7a:9a:20:3e:7a:
c1:33:9a:dc:be:bb:e9:87:c2:a7:a8:50:dd:3f:87:
b8:3c:39:ca:58:e3:56:86:f6:eb:0e:98:c5:b7:63:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:AE:B1:D9:4B:16:9F:83:8F:3E:5D:D1:8B:0A:63:A3:06:30:0F
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:55:4e:fa:a1:34:db:f8:fe:33:48:be:91:38:b5:26:aa:
28:9a:01:19:97:24:af:54:1e:fa:e4:33:44:79:16:6b:f6:5e:
fd:4a:c0:df:98:ed:f5:e4:4d:c5:89:38:b5:21:85:08:18:99:
f7:cf:c3:c2:2d:31:f8:7e:3e:46:ef:42:76:10:83:21:0f:6d:
a5:2d:c6:d3:27:8b:4e:46:7d:bc:3c:af:8d:7d:51:a3:8a:59:
86:7f:9a:48:8e:5d:43:91:b0:13:e7:05:61:a3:45:18:a9:65:
e8:fe:dd:7a:03:4a:98:7a:43:c3:51:d6:77:9d:8e:c4:89:56:
06:2b:4d:8f:da:46:4e:a2:1a:16:85:25:4c:c4:96:9e:9b:c5:
f5:cb:79:23:d2:71:85:d9:32:8a:f3:85:e0:48:85:98:24:d6:
81:0a:14:85:ba:1e:32:44:9e:b6:a4:4b:0e:7d:11:3f:aa:6d:
33:42:78:68:fe:0c:d4:b3:9c:0d:3d:9f:97:55:2d:e3:7d:b3:
b4:c0:68:6a:df:51:5c:79:28:6c:9c:c7:28:6c:6c:1f:fa:4a:
07:19:56:c0:9c:12:2c:cc:81:96:72:b1:57:a1:fa:c9:54:de:
fe:91:d5:0e:4d:0e:3c:5c:e1:e3:a0:b9:37:86:32:32:a3:c9:
c6:fd:2f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmkKp0F3QG8J7QFEX1zy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjUwNzI1MjIwMDM5WhcNMjUwNzI2MjIwMDM5WjAzMTEwLwYDVQQD
EyhkZGQ5YWViMWQ5NGIxNjlmODM4ZjNlNWRkMThiMGE2M2EzMDYzMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxubJl0cwtZ7GCsGGYta3knTTFOv
yZ6AxNC41derlZVpNO/l0l+EETP7+QAaoYcMfaPsxTjy0KxCSZvqzZjvlSLgTpgj
1GhHPlH5TAvT+jWVOL6BYZEm3NXZ0KMA0UOus5brL5Md3RsIldEZTmN7PCu1qfG8
qbXXz39x6v6drDqQTJNGwW/oqxzrF2zfLRCC/rsnbg6okFpAZK+2UrdNoxoy/1A8
vNqd0XmnB74pjyD/OH1rvyJqABs4tqTMheaHEME940N0KBBhwTt5Z02icMusOek1
lb6Uu6L5epogPnrBM5rcvrvph8KnqFDdP4e4PDnKWONWhvbrDpjFt2M2PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3ZrrHZSxafg48+XdGLCmOjBjAPMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhFVTvqh
NNv4/jNIvpE4tSaqKJoBGZckr1Qe+uQzRHkWa/Ze/UrA35jt9eRNxYk4tSGFCBiZ
98/Dwi0x+H4+Ru9CdhCDIQ9tpS3G0yeLTkZ9vDyvjX1Ro4pZhn+aSI5dQ5GwE+cF
YaNFGKll6P7degNKmHpDw1HWd52OxIlWBitNj9pGTqIaFoUlTMSWnpvF9ct5I9Jx
hdkyivOF4EiFmCTWgQoUhboeMkSetqRLDn0RP6ptM0J4aP4M1LOcDT2fl1Ut432z
tMBoat9RXHkobJzHKGxsH/pKBxlWwJwSLMyBlnKxV6H6yVTe/pHVDk0OPFzh46C5
N4YyMqPJxv0v6g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:28:34 2025 by rpki-client