Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: qMl5coAnn+IaEvlQpjjHtO/vwFhAN/cen3EDKSlnCZc=
Subject key identifier: 4E:ED:F9:F3:E3:3D:E9:F6:D7:02:92:38:21:50:61:8C:7C:D2:04:9F
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0198C56D5821CBDDCD8F50649EBCE092CCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 0605
Signing time: Wed 20 Aug 2025 03:02:14 +0000
Manifest this update: Wed 20 Aug 2025 03:02:14 +0000
Manifest next update: Thu 21 Aug 2025 03:02:14 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: 7jFVJyLE3bnPbDFDT+p7zcLr6CZXOLXPETGLzH7ksMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:6d:58:21:cb:dd:cd:8f:50:64:9e:bc:e0:92:cc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Aug 20 03:02:14 2025 GMT
Not After : Aug 21 03:02:14 2025 GMT
Subject: CN=4eedf9f3e33de9f6d70292382150618c7cd2049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:91:eb:84:38:91:92:9a:59:ea:75:3b:b9:
1f:7a:4d:18:50:b7:2e:c5:0d:e2:9b:b4:cb:a1:1b:
c5:ca:1e:52:b0:9f:34:52:19:0f:69:91:42:95:0b:
74:f4:c1:79:a0:bb:4b:fe:74:2d:18:24:71:7c:b3:
b0:99:0b:03:86:d1:b4:ae:df:b6:19:ad:40:cd:23:
17:97:09:1b:b8:2d:3e:f4:19:ed:98:02:0c:4b:b1:
7a:a8:3a:cd:69:18:8d:7d:86:d2:fb:09:81:f6:29:
d4:e1:25:06:01:5e:9c:2c:77:d8:03:77:e9:7a:4a:
34:7a:03:e6:6a:4f:13:22:7f:cd:67:94:a6:6b:36:
89:2e:54:a9:de:1f:f7:73:cd:07:e9:04:e9:67:40:
d6:c8:0d:37:d1:de:a6:3c:90:a7:98:e1:54:01:34:
2c:9a:08:a8:cc:75:11:2e:35:59:39:7c:02:99:72:
1e:8d:c0:5f:06:8c:cc:1f:ee:20:01:68:5f:f3:4d:
1b:61:95:b8:1d:40:8e:d7:2e:9a:31:10:0d:e3:19:
42:f7:21:96:18:3e:cd:a8:27:c7:bd:4e:24:f4:5a:
fd:7a:f3:54:3d:3a:e6:21:41:14:f2:05:da:80:b3:
35:27:d5:b4:68:36:2c:5b:46:3f:be:26:67:42:35:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:F9:F3:E3:3D:E9:F6:D7:02:92:38:21:50:61:8C:7C:D2:04:9F
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:58:ba:58:6c:e5:f8:82:cb:e4:ee:89:39:fd:c2:d1:4b:
84:0a:49:b9:0c:53:da:7c:52:05:92:26:0f:f4:5f:34:57:34:
8f:b3:5c:20:5b:ee:62:8f:7f:23:b0:7f:a3:78:fa:4e:9e:ea:
80:b7:bb:36:11:35:aa:a5:cf:ec:b5:73:7d:f4:c9:cd:e2:fa:
05:e1:c6:f8:e7:f6:6e:a3:bf:47:57:d6:4c:1e:24:c1:12:9b:
a6:31:06:27:09:ca:1a:23:ba:7f:fe:1a:5f:5f:d8:ce:e5:77:
b2:70:cd:36:26:f4:f5:ac:c6:78:83:2c:54:3d:52:93:51:6d:
56:f6:fd:0d:f9:8f:67:41:a8:3e:6a:04:19:25:d1:17:c0:d1:
f2:7c:18:ea:51:02:95:30:14:76:b0:2f:8d:b3:49:3f:61:a3:
94:83:f3:92:bf:ac:94:1c:6f:88:33:4e:0e:38:4a:2d:69:2e:
04:40:44:16:7d:61:5b:04:9c:4b:46:30:14:27:11:4c:cf:25:
14:4a:b1:b0:b7:0b:c0:79:1c:80:8e:bf:ab:60:8f:cd:46:c1:
cc:21:64:e5:58:b7:7b:93:76:98:c2:4f:a2:11:52:d6:2b:fc:
15:81:03:f3:f6:43:39:42:bd:a9:ac:59:99:43:4d:b4:29:52:
b8:d3:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:10:59 2025 by rpki-client