Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: K5aN3pV5ievqrLwwyPmsF/swCK4ex/nrnrhw6qlj9jc=
Subject key identifier: EF:43:4A:EE:CF:C0:CC:F5:E5:1F:A6:73:1A:E4:44:87:73:69:B4:71
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 019A71EEAC3530D6FFBA5BCB16840E0513AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0AAB
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: YsNOWLDvyVliLZJATW9ZUOQLf5htA5bkMneUb5Mi2Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:35:30:d6:ff:ba:5b:cb:16:84:0e:05:13:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=ef434aeecfc0ccf5e51fa6731ae444877369b471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:68:51:30:2b:dc:cd:ee:e0:f1:c9:25:c5:
f8:0d:e1:06:a9:f8:f3:94:67:ea:b2:5a:a6:92:ce:
5e:7b:91:6c:08:d9:0c:d3:4f:58:24:be:4a:24:f4:
49:36:49:f4:c6:3f:f0:b5:ea:82:01:f4:e0:5b:4b:
8d:eb:74:f0:c9:1c:93:49:da:04:73:5b:2a:9b:d9:
58:45:9d:2a:ad:1e:b7:2a:a8:eb:25:d5:44:ae:bc:
39:47:81:1c:bc:7d:28:b5:67:79:d7:87:0b:72:ea:
cf:05:68:c1:67:b6:1a:1b:99:6e:30:a2:2a:4d:41:
dd:fa:71:c3:10:a0:ae:0e:b0:f7:99:56:89:48:0e:
da:1a:54:86:a8:f7:50:8b:57:80:e5:d7:4f:3f:99:
fc:37:64:9b:13:aa:50:05:59:05:41:57:b7:d5:37:
ac:d4:38:3c:72:28:4a:ff:d1:72:6c:f8:e1:bc:7f:
bb:c4:f5:db:d1:0b:04:7f:b0:08:dc:61:cf:23:67:
30:b1:c6:ec:a5:f9:e4:93:ef:38:9a:15:5a:d7:ea:
73:cf:8d:e6:16:72:d3:0a:01:33:34:92:02:64:ea:
3e:a3:0c:ff:3d:c8:c2:46:43:85:a6:e4:d5:77:bc:
71:e8:23:11:2d:25:ac:9c:a1:b3:16:47:17:a8:06:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:4A:EE:CF:C0:CC:F5:E5:1F:A6:73:1A:E4:44:87:73:69:B4:71
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:5a:c1:be:c1:f5:08:a1:34:12:94:2e:a6:8c:f1:d0:d5:
39:49:f8:ad:46:ca:81:02:c7:1b:28:ef:24:dd:be:9e:27:fc:
c1:39:aa:5c:ba:fc:4b:95:05:98:02:d5:80:65:5f:14:6f:5a:
64:2e:4e:18:65:b7:e5:65:a7:ab:8b:ad:4e:e5:f6:99:b5:0d:
7b:f6:d1:10:dc:74:0d:70:1a:99:d4:cf:70:d8:ff:0b:fd:56:
24:35:36:c0:ab:4c:f2:a2:65:4d:ae:28:3b:ff:6a:4a:41:e5:
2a:a6:94:1d:a6:69:fd:f8:44:40:23:17:f8:01:a2:70:f9:89:
5d:2c:3b:c0:70:86:70:b8:55:c7:a5:d3:b9:03:3c:1c:74:3a:
c1:23:be:7c:75:c4:74:99:a7:5c:c8:06:39:a1:84:1a:68:b6:
31:d0:e8:57:54:e0:d6:b2:f4:52:65:4e:46:73:4d:4d:f6:3c:
61:aa:23:be:3b:38:8a:09:cd:14:82:b5:0b:e5:2b:2b:e2:ec:
c7:cf:52:36:f9:fd:1d:dd:28:b3:89:03:cc:0b:35:3c:e8:8b:
4a:6e:99:87:5c:5a:1d:f1:a8:f0:9d:2a:a5:bb:b1:54:9f:39:
71:55:5c:2b:11:1b:82:0b:20:a2:d1:e7:38:26:b5:49:64:93:
cb:2f:8b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qw1MNb/ulvLFoQOBROtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjUxMTExMDgwMDU4WhcNMjUxMTEyMDgwMDU4WjAzMTEwLwYDVQQD
EyhlZjQzNGFlZWNmYzBjY2Y1ZTUxZmE2NzMxYWU0NDQ4NzczNjliNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYdoUTAr3M3u4PHJJcX4DeEGqfjz
lGfqslqmks5ee5FsCNkM009YJL5KJPRJNkn0xj/wteqCAfTgW0uN63TwyRyTSdoE
c1sqm9lYRZ0qrR63KqjrJdVErrw5R4EcvH0otWd514cLcurPBWjBZ7YaG5luMKIq
TUHd+nHDEKCuDrD3mVaJSA7aGlSGqPdQi1eA5ddPP5n8N2SbE6pQBVkFQVe31Tes
1Dg8cihK/9FybPjhvH+7xPXb0QsEf7AI3GHPI2cwscbspfnkk+84mhVa1+pzz43m
FnLTCgEzNJICZOo+owz/PcjCRkOFpuTVd7xx6CMRLSWsnKGzFkcXqAZH+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9DSu7PwMz15R+mcxrkRIdzabRxMB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXghawb7B
9QihNBKULqaM8dDVOUn4rUbKgQLHGyjvJN2+nif8wTmqXLr8S5UFmALVgGVfFG9a
ZC5OGGW35WWnq4utTuX2mbUNe/bRENx0DXAamdTPcNj/C/1WJDU2wKtM8qJlTa4o
O/9qSkHlKqaUHaZp/fhEQCMX+AGicPmJXSw7wHCGcLhVx6XTuQM8HHQ6wSO+fHXE
dJmnXMgGOaGEGmi2MdDoV1Tg1rL0UmVORnNNTfY8Yaojvjs4ignNFIK1C+UrK+Ls
x89SNvn9Hd0os4kDzAs1POiLSm6Zh1xaHfGo8J0qpbuxVJ85cVVcKxEbggsgotHn
OCa1SWSTyy+LZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client