Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: ne1pF4GadxX5cRWyWnOpqp9DoE/KZTZ8I3zdUHi+Ir8=
Subject key identifier: 3D:F4:13:1F:FA:C6:24:37:C3:0D:17:34:83:32:90:3F:DE:86:4A:A2
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0199CFEDD1632C6F0977986041439D581CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 16D1
Signing time: Fri 10 Oct 2025 21:01:33 +0000
Manifest this update: Fri 10 Oct 2025 21:01:33 +0000
Manifest next update: Sat 11 Oct 2025 21:01:33 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: UKXVREB2F2Ml6bMv8TjhKVnAmTYSJQHG6PvTgqOEndc=)
3: sPxjsNKAZYfgxPi8TQlY-mZZcT4.roa (hash: EWGb5uGqI3pCu9DA248NQJ9YLr39oAfQHZAN5stmGVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:ed:d1:63:2c:6f:09:77:98:60:41:43:9d:58:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Oct 10 21:01:33 2025 GMT
Not After : Oct 11 21:01:33 2025 GMT
Subject: CN=3df4131ffac62437c30d17348332903fde864aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:66:69:44:a7:9d:42:d3:18:3b:fa:d9:d8:
bc:f1:a8:5e:7d:9e:8f:55:5c:19:26:6f:05:91:d1:
9b:4b:da:4c:9e:df:04:0b:87:ec:12:f6:68:1a:84:
5e:b3:e5:91:59:3e:96:4d:85:6f:f4:ee:ee:8c:9d:
d5:01:58:7f:f5:5a:fa:3b:73:d9:53:4e:e3:10:5d:
d7:96:8f:88:a6:d5:85:0d:5c:92:49:6c:5b:15:e7:
d8:82:fd:e1:f3:fa:d7:0e:f7:2e:68:51:14:4c:52:
ee:96:e8:69:41:14:47:a9:e0:49:3c:cd:f1:05:21:
72:4e:60:dc:a4:cd:61:59:79:a9:25:78:63:8c:e5:
75:c3:ee:92:12:11:cc:10:8c:e6:19:54:36:8f:3a:
69:19:ee:82:fa:b0:85:f9:20:d0:78:b4:f9:c9:c6:
f7:70:47:09:cc:c5:d8:ac:b1:d3:c5:54:24:a9:58:
22:7a:4c:b5:56:c3:5a:7d:2d:f9:2c:70:a5:07:59:
91:69:04:62:b3:0b:a3:46:5b:dd:14:73:45:94:0e:
92:c8:18:68:bf:76:52:31:92:1e:d1:17:0f:79:52:
7c:39:a3:b7:0b:bb:a7:37:12:dd:fb:ef:a4:7a:fe:
b0:54:5d:7f:43:d5:58:da:89:5f:f6:48:b0:db:cd:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:13:1F:FA:C6:24:37:C3:0D:17:34:83:32:90:3F:DE:86:4A:A2
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c0:be:12:fe:38:aa:a9:5e:2a:bf:39:e4:a9:5e:82:98:da:
60:24:cc:71:39:bd:d6:35:37:f6:fb:35:3d:e2:0f:b8:04:db:
89:c9:a1:f8:4e:dc:fc:33:f2:db:4e:0e:c8:06:84:81:f6:49:
a5:c3:21:39:6e:3d:2e:5a:95:86:c4:3b:e1:0e:a9:1c:2c:5a:
80:f8:ff:44:17:fd:47:d3:44:9d:a7:cd:d0:e3:b6:80:fc:a0:
33:dd:37:3f:68:e5:a3:31:9f:00:5f:f1:dd:5d:eb:89:7b:a9:
08:78:3a:f4:b4:d5:29:90:0f:6c:21:3c:28:fe:33:fe:73:bf:
d0:4e:47:ba:2c:91:37:57:3f:fd:da:55:8f:07:eb:f9:b9:34:
f1:5c:e4:b4:4b:e7:92:89:5f:1f:d1:84:b0:b5:7d:b2:46:90:
64:ea:80:7b:b6:84:20:23:c8:af:cb:d5:a6:b3:db:4d:11:d8:
71:d3:a1:56:a8:4d:88:6a:2a:95:a3:93:8d:c0:e7:d2:f0:87:
e1:a5:7c:c3:08:ad:a8:11:5b:ec:5a:e2:48:56:e2:7b:c7:ad:
0a:1b:b9:6d:c6:48:ce:b9:dc:de:bc:f0:30:8b:d9:53:0f:8d:
94:3c:bb:44:28:c0:72:bc:8d:d0:49:3e:03:16:89:43:b2:9d:
ad:29:1d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnP7dFjLG8Jd5hgQUOdWBzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjUxMDEwMjEwMTMzWhcNMjUxMDExMjEwMTMzWjAzMTEwLwYDVQQD
EygzZGY0MTMxZmZhYzYyNDM3YzMwZDE3MzQ4MzMyOTAzZmRlODY0YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur1maUSnnULTGDv62di88ahefZ6P
VVwZJm8FkdGbS9pMnt8EC4fsEvZoGoRes+WRWT6WTYVv9O7ujJ3VAVh/9Vr6O3PZ
U07jEF3Xlo+IptWFDVySSWxbFefYgv3h8/rXDvcuaFEUTFLuluhpQRRHqeBJPM3x
BSFyTmDcpM1hWXmpJXhjjOV1w+6SEhHMEIzmGVQ2jzppGe6C+rCF+SDQeLT5ycb3
cEcJzMXYrLHTxVQkqVgieky1VsNafS35LHClB1mRaQRiswujRlvdFHNFlA6SyBho
v3ZSMZIe0RcPeVJ8OaO3C7unNxLd+++kev6wVF1/Q9VY2olf9kiw280f/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD30Ex/6xiQ3ww0XNIMykD/ehkqiMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8C+Ev44
qqleKr855KlegpjaYCTMcTm91jU39vs1PeIPuATbicmh+E7c/DPy204OyAaEgfZJ
pcMhOW49LlqVhsQ74Q6pHCxagPj/RBf9R9NEnafN0OO2gPygM903P2jlozGfAF/x
3V3riXupCHg69LTVKZAPbCE8KP4z/nO/0E5HuiyRN1c//dpVjwfr+bk08VzktEvn
kolfH9GEsLV9skaQZOqAe7aEICPIr8vVprPbTRHYcdOhVqhNiGoqlaOTjcDn0vCH
4aV8wwitqBFb7FriSFbie8etChu5bcZIzrnc3rzwMIvZUw+NlDy7RCjAcryN0Ek+
AxaJQ7KdrSkddg==
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:53:42 2025 by rpki-client