Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: KqZyLdRa0SYmwiyGoPC2q1nD+oPh4djYOrEzRTboCAg=
Subject key identifier: F4:70:78:3E:86:90:CB:F3:59:4E:7C:78:32:E3:6E:4E:C0:9A:0E:7B
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 01991DD3F10B56D82DD20CD34E6CAB76CBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 0573
Signing time: Sat 06 Sep 2025 07:00:52 +0000
Manifest this update: Sat 06 Sep 2025 07:00:52 +0000
Manifest next update: Sun 07 Sep 2025 07:00:52 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: vrwVh861xKsZjkNQ5etBeQkitZNzLlgx10c306YGgUg=)
2: SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa (hash: gX8l58xrXAT4li7r86mali9lBzeeH/ZmL4mOVXRHAGY=)
3: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d3:f1:0b:56:d8:2d:d2:0c:d3:4e:6c:ab:76:cb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Sep 6 07:00:52 2025 GMT
Not After : Sep 7 07:00:52 2025 GMT
Subject: CN=f470783e8690cbf3594e7c7832e36e4ec09a0e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:3a:36:26:61:6b:d9:2f:46:be:17:b0:ad:
43:9e:95:24:1f:8f:18:fb:b5:f2:60:5f:23:a9:fc:
9c:6f:35:96:59:36:29:62:17:8f:3b:2f:86:8d:b5:
01:5d:ad:f7:d1:8d:dd:7b:8f:c2:9a:9b:49:17:47:
cd:93:8f:0a:a2:e2:d9:4c:e1:cf:25:41:38:ad:d6:
a0:ea:00:f1:55:5e:70:53:7b:c5:bd:7e:75:33:74:
87:5d:61:33:11:3f:a6:3d:1a:0d:39:ef:83:0f:58:
c6:ee:4d:20:f7:6a:45:b0:65:6d:67:11:33:85:26:
23:bd:6c:c5:1e:e5:5f:9a:52:fa:89:00:6a:25:e6:
aa:7e:2a:28:72:5d:ae:31:6d:65:74:05:29:67:f7:
da:77:b5:17:89:bd:a3:c6:09:7f:a0:0c:5d:a7:19:
3d:b9:51:22:7b:a7:41:c3:0a:be:8c:74:54:3f:e5:
8a:b3:b4:b7:54:9b:9e:e6:a5:73:1f:09:3b:e6:f6:
03:ee:f4:ac:70:d9:c5:4e:02:1e:ca:76:80:3e:76:
a9:c3:ec:29:22:be:29:41:9f:91:27:c7:04:ea:ab:
fb:43:e6:05:e0:36:18:de:14:61:0b:c2:c6:89:b9:
4e:d2:8a:2b:75:5d:39:b6:a3:04:48:0d:2f:c2:74:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:78:3E:86:90:CB:F3:59:4E:7C:78:32:E3:6E:4E:C0:9A:0E:7B
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ab:b5:64:f0:c1:91:ca:63:61:ca:18:9f:c9:fe:df:5c:c5:
d6:a9:89:b3:46:76:fd:58:6f:8a:bb:f2:6a:a2:d1:b1:8a:48:
53:4e:64:5c:d8:2b:0b:49:18:60:25:f5:06:e4:24:b2:45:2b:
79:fb:7a:10:83:6f:4b:6e:6b:4f:9b:f3:c0:56:3f:d8:ec:41:
a7:1f:8e:30:14:d5:64:05:de:a0:a2:26:1c:25:d2:9b:d2:4b:
10:45:88:3b:be:59:b3:18:41:57:d0:5a:28:10:09:f6:c1:4f:
e1:4c:04:99:d4:9a:55:f0:c3:7f:d5:df:a1:de:cb:80:56:65:
cb:79:a1:1b:b8:aa:0f:c5:fa:47:18:af:c3:5b:98:cc:f8:33:
6a:03:e8:f3:44:1d:65:64:15:a1:f1:57:af:ef:8c:34:d2:31:
97:e2:3c:64:04:c3:7a:f0:78:2e:a6:6b:26:02:6d:4f:97:7b:
a9:9e:90:47:49:ea:f4:26:03:7a:c2:7a:8d:e7:32:6e:bf:88:
02:57:fd:ff:9b:eb:51:a8:63:90:f9:c3:75:43:fc:4d:dc:06:
2a:74:91:01:62:d8:dc:79:4f:01:b1:80:17:a5:bf:3e:2b:5b:
d9:94:fe:a1:bf:96:c5:a2:2e:68:53:49:5d:c5:bf:64:d8:a9:
c8:72:44:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkd0/ELVtgt0gzTTmyrdsvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjUwOTA2MDcwMDUyWhcNMjUwOTA3MDcwMDUyWjAzMTEwLwYDVQQD
EyhmNDcwNzgzZTg2OTBjYmYzNTk0ZTdjNzgzMmUzNmU0ZWMwOWEwZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM46NiZha9kvRr4XsK1DnpUkH48Y
+7XyYF8jqfycbzWWWTYpYhePOy+GjbUBXa330Y3de4/CmptJF0fNk48KouLZTOHP
JUE4rdag6gDxVV5wU3vFvX51M3SHXWEzET+mPRoNOe+DD1jG7k0g92pFsGVtZxEz
hSYjvWzFHuVfmlL6iQBqJeaqfioocl2uMW1ldAUpZ/fad7UXib2jxgl/oAxdpxk9
uVEie6dBwwq+jHRUP+WKs7S3VJue5qVzHwk75vYD7vSscNnFTgIeynaAPnapw+wp
Ir4pQZ+RJ8cE6qv7Q+YF4DYY3hRhC8LGiblO0oordV05tqMESA0vwnRchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRweD6GkMvzWU58eDLjbk7Amg57MB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaau1ZPDB
kcpjYcoYn8n+31zF1qmJs0Z2/VhvirvyaqLRsYpIU05kXNgrC0kYYCX1BuQkskUr
eft6EINvS25rT5vzwFY/2OxBpx+OMBTVZAXeoKImHCXSm9JLEEWIO75ZsxhBV9Ba
KBAJ9sFP4UwEmdSaVfDDf9Xfod7LgFZly3mhG7iqD8X6Rxivw1uYzPgzagPo80Qd
ZWQVofFXr++MNNIxl+I8ZATDevB4LqZrJgJtT5d7qZ6QR0nq9CYDesJ6jecybr+I
Alf9/5vrUahjkPnDdUP8TdwGKnSRAWLY3HlPAbGAF6W/Pitb2ZT+ob+WxaIuaFNJ
XcW/ZNipyHJELw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:28 2025 by rpki-client