Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: nlOW90AxduCAvSOg77fhra1DS1MKBMYIQARn7I7+YOM=
Subject key identifier: CE:51:B6:93:3D:50:11:66:43:48:9C:CC:E9:8C:53:47:30:9D:E9:8E
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 019923D5DE2F2278829A52485649467E6D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 09FE
Signing time: Sun 07 Sep 2025 11:00:42 +0000
Manifest this update: Sun 07 Sep 2025 11:00:42 +0000
Manifest next update: Mon 08 Sep 2025 11:00:42 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: re3UAMUO/7ZmKAJN9F6pW7thjpgI6MFBp4Zkv0ax65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:de:2f:22:78:82:9a:52:48:56:49:46:7e:6d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Sep 7 11:00:42 2025 GMT
Not After : Sep 8 11:00:42 2025 GMT
Subject: CN=ce51b6933d50116643489ccce98c5347309de98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:f6:4a:d5:8a:77:75:ac:6c:f2:81:c4:78:
59:af:e6:6c:05:b2:67:08:99:4b:62:8b:48:4e:89:
b8:b1:b4:1b:e2:b7:c7:08:36:2d:8e:01:7c:4f:cc:
9b:cd:78:c6:02:50:e5:34:a3:82:6a:5f:15:93:dc:
27:76:80:82:f8:16:9a:2a:43:de:65:37:ae:27:fd:
90:e6:f5:ff:b6:03:97:03:8b:37:a2:27:84:04:a9:
50:0e:ca:98:7c:d7:5a:1f:eb:4b:58:7e:05:8b:fd:
bb:45:63:f3:1d:59:e6:91:8c:9c:69:22:18:a2:f1:
3f:c3:be:c4:6c:58:75:43:ee:33:04:f6:15:46:35:
c7:36:21:19:cb:06:b2:aa:00:86:bf:f8:fd:dd:06:
32:9f:05:68:e2:27:a1:19:32:7a:c0:1b:1e:b4:d5:
f5:69:ac:f4:47:d7:25:db:ae:86:06:94:b1:b9:df:
e6:ba:9b:fb:b6:92:f4:5e:2e:4f:7f:54:4f:9b:ca:
79:c1:74:11:00:48:ba:83:82:89:93:ab:cc:ad:d5:
a1:13:34:e0:93:bc:2b:cb:f2:21:de:e1:be:d2:dc:
ee:fd:d5:70:a6:7f:9a:01:7d:0b:f2:58:77:86:9b:
a4:5b:fd:10:e5:f8:09:bf:72:01:7b:fd:0e:a5:18:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:B6:93:3D:50:11:66:43:48:9C:CC:E9:8C:53:47:30:9D:E9:8E
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0f:7b:4b:cf:9e:8e:b0:7a:a6:b2:f2:a9:ba:dd:59:c9:3f:
48:68:39:63:aa:73:98:f7:f2:88:c4:9e:95:61:f3:61:5a:36:
ac:8a:ec:9d:ff:70:2b:e1:d8:18:6d:e5:80:d7:e7:8b:ff:b6:
45:de:79:39:ef:bf:6a:01:6f:69:fd:17:fa:08:b4:62:f0:15:
f8:2d:5d:fc:48:00:d1:1d:cf:23:fc:44:16:db:5d:58:02:63:
5b:ff:ac:61:52:7f:ea:59:45:c3:d4:5c:49:b2:9d:4b:af:06:
70:8a:cb:5e:37:13:ba:f1:ee:34:d0:96:77:68:ef:33:bf:6d:
d7:9f:37:ea:37:b5:66:3a:ac:55:a4:fb:47:28:e5:96:98:c5:
bb:53:e4:73:15:3a:bc:6d:06:06:02:38:05:ed:fa:96:0c:1a:
ee:af:4b:58:a4:43:a0:dd:5f:bb:9b:c3:82:3b:80:be:67:87:
cb:22:b3:48:60:85:83:7e:c7:42:f3:50:f0:94:de:c1:bc:6c:
bc:52:04:39:61:7a:40:3b:7a:fe:af:1a:2b:7b:e1:3d:8c:e9:
f4:73:6b:72:ff:e7:e6:fa:4b:c9:06:20:0e:ff:e6:bc:8a:ca:
5f:ec:b1:bb:57:73:60:40:fa:b5:64:c0:d7:b3:fa:67:2b:23:
b1:df:e8:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1d4vIniCmlJIVklGfm0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjUwOTA3MTEwMDQyWhcNMjUwOTA4MTEwMDQyWjAzMTEwLwYDVQQD
EyhjZTUxYjY5MzNkNTAxMTY2NDM0ODljY2NlOThjNTM0NzMwOWRlOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51T2StWKd3WsbPKBxHhZr+ZsBbJn
CJlLYotITom4sbQb4rfHCDYtjgF8T8ybzXjGAlDlNKOCal8Vk9wndoCC+BaaKkPe
ZTeuJ/2Q5vX/tgOXA4s3oieEBKlQDsqYfNdaH+tLWH4Fi/27RWPzHVnmkYycaSIY
ovE/w77EbFh1Q+4zBPYVRjXHNiEZywayqgCGv/j93QYynwVo4iehGTJ6wBsetNX1
aaz0R9cl266GBpSxud/mupv7tpL0Xi5Pf1RPm8p5wXQRAEi6g4KJk6vMrdWhEzTg
k7wry/Ih3uG+0tzu/dVwpn+aAX0L8lh3hpukW/0Q5fgJv3IBe/0OpRhe5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5RtpM9UBFmQ0iczOmMU0cwnemOMB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw97S8+e
jrB6prLyqbrdWck/SGg5Y6pzmPfyiMSelWHzYVo2rIrsnf9wK+HYGG3lgNfni/+2
Rd55Oe+/agFvaf0X+gi0YvAV+C1d/EgA0R3PI/xEFttdWAJjW/+sYVJ/6llFw9Rc
SbKdS68GcIrLXjcTuvHuNNCWd2jvM79t15836je1ZjqsVaT7RyjllpjFu1PkcxU6
vG0GBgI4Be36lgwa7q9LWKRDoN1fu5vDgjuAvmeHyyKzSGCFg37HQvNQ8JTewbxs
vFIEOWF6QDt6/q8aK3vhPYzp9HNrcv/n5vpLyQYgDv/mvIrKX+yxu1dzYED6tWTA
17P6Zysjsd/oqA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:39 2025 by rpki-client