Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File: _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier: a4VkOMp6r3kzBd5AkWUGe3D6IImwTKo12fimNmOcw+A=
Subject key identifier: 65:E2:F1:8B:2B:D6:A8:BC:D8:E3:A8:30:B7:20:F3:39:C2:DA:3D:08
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 019A28549F6EF4352EB825EABDF35458D43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number: 140D
Signing time: Tue 28 Oct 2025 01:00:25 +0000
Manifest this update: Tue 28 Oct 2025 01:00:25 +0000
Manifest next update: Wed 29 Oct 2025 01:00:25 +0000
Files and hashes: 1: 41n65uhvIrOs7pMXCEwIyWAHStU.roa (hash: LjxJ/BCjHptc+tFYMZxLMpRYryRPRgRDdjg86l2vAZ0=)
2: LPzeUoKKbtBniuOIqj8nJU_M67E.roa (hash: BXGvnjHmSyIsPAZUo8glr5Sei8gWA74Tz3aN6uo9z9U=)
3: W2nNEF8qHTKft1xSAnUWoLZGFiY.roa (hash: dDsFO7ipduSuI7GlAukzs3zzXlpJSjZo32XEFl3Fb7g=)
4: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: wjwLaDNd4DNadlnhXsQsADqj6h2xDWgxF+IDLGtS6cw=)
5: kITElgml7RZxWNr4eKfvM1E5VyM.roa (hash: mYphYuWKa2oClwokItjP8xyLuFG6crqS5Vudhf5XeTk=)
6: koZdUg9eyaaGc1g9ur5UXBYavrc.roa (hash: GaEJ7CaaD7TlL7BrSl+zzHjmdcf3ad/46vcHTxYsYGE=)
7: r3RFE-879aQPlTAYSIzxRB7I1g4.roa (hash: HvDiU5OY5w8GPNN2r0h7VcqBDnJGg+XhKF07qtUJ66M=)
8: zsj7ZU7c27fACndp52_vAKfImfU.roa (hash: VK3pf67Xdj80z42M9vc+h8UO7pmF3OLN63Yl3j4PoPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:9f:6e:f4:35:2e:b8:25:ea:bd:f3:54:58:d4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Oct 28 01:00:25 2025 GMT
Not After : Oct 29 01:00:25 2025 GMT
Subject: CN=65e2f18b2bd6a8bcd8e3a830b720f339c2da3d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:4a:c8:e2:d8:27:a1:87:86:8b:75:9d:27:
50:a3:42:a7:25:a8:75:5c:34:2a:54:1d:56:15:c4:
66:d1:fd:83:8e:5e:3a:39:08:20:56:27:87:cc:6d:
f6:0d:a4:e3:13:c1:50:b6:6d:2c:59:2b:b0:47:fd:
22:81:3c:6d:98:f4:57:e9:57:c1:e4:3f:ed:b2:a5:
33:f0:c3:18:1e:5c:73:9b:90:d4:b3:2e:17:93:e9:
eb:27:ca:31:4a:52:88:5c:51:98:2d:b2:42:53:c5:
23:3c:11:90:26:f1:39:0b:82:c9:05:9f:70:cc:5c:
57:eb:0a:ae:91:ef:da:13:c5:a8:5d:94:ac:25:c0:
1e:fe:6e:eb:9c:14:9f:c8:ee:19:43:9d:36:a0:2f:
ef:08:39:a8:c6:29:01:35:1f:b5:64:2c:a1:f1:c9:
e5:c4:92:5f:ee:8b:13:e2:18:1f:57:15:1f:6b:98:
31:be:62:f3:82:6e:9e:29:7d:ea:0a:91:cc:4d:bb:
a1:a3:f8:b7:2a:7c:ed:53:83:87:03:48:ba:67:26:
d8:0f:84:ed:df:22:e3:17:55:d4:50:f6:ca:f8:8d:
a0:01:6c:0a:d6:b6:49:72:d3:97:a3:87:21:c7:67:
18:99:9d:53:08:e7:e4:e2:6a:c7:60:d3:be:0d:90:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:F1:8B:2B:D6:A8:BC:D8:E3:A8:30:B7:20:F3:39:C2:DA:3D:08
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:59:19:69:b6:30:72:dc:10:b7:3d:23:51:6b:8c:f4:49:
f2:32:23:25:0c:15:96:07:21:5d:52:70:f0:13:32:f7:01:cd:
8a:a8:d3:11:11:d6:3d:01:a6:9a:69:ee:3b:a8:62:de:46:bf:
cc:d6:1f:06:5a:00:7c:39:c2:72:87:03:33:14:76:98:85:3d:
07:ef:f0:8a:4d:0e:e9:81:2a:49:37:bb:12:ba:e7:b2:4d:f4:
fe:7e:74:88:fe:85:5e:a5:32:1a:50:c8:2b:d4:08:5e:59:f4:
a2:4f:16:48:a3:66:24:1a:24:e8:ba:34:67:1c:32:31:23:d0:
d4:ed:2c:72:dc:e6:39:a3:35:33:39:34:7a:6c:8a:7b:d7:87:
30:ae:a5:3b:d2:28:36:ef:1a:20:08:d4:89:f0:a0:7a:0b:71:
0d:60:4d:f9:7d:55:4a:fa:c5:76:99:df:1f:bb:fa:fe:d6:ea:
ce:9b:b9:83:cf:3e:58:7c:b2:c3:bb:73:29:03:c1:5e:26:9b:
dd:c4:e8:95:6b:e4:40:c5:4e:79:a3:ad:3a:91:75:69:ad:4a:
55:99:bf:52:5a:91:cb:4e:dd:34:14:80:35:7f:30:1b:c0:62:
81:4d:6a:d6:00:06:9a:4e:88:07:42:eb:d1:34:04:f9:bb:cf:
92:31:23:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVJ9u9DUuuCXqvfNUWNQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUxMDI4MDEwMDI1WhcNMjUxMDI5MDEwMDI1WjAzMTEwLwYDVQQD
Eyg2NWUyZjE4YjJiZDZhOGJjZDhlM2E4MzBiNzIwZjMzOWMyZGEzZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm5KyOLYJ6GHhot1nSdQo0KnJah1
XDQqVB1WFcRm0f2Djl46OQggVieHzG32DaTjE8FQtm0sWSuwR/0igTxtmPRX6VfB
5D/tsqUz8MMYHlxzm5DUsy4Xk+nrJ8oxSlKIXFGYLbJCU8UjPBGQJvE5C4LJBZ9w
zFxX6wquke/aE8WoXZSsJcAe/m7rnBSfyO4ZQ502oC/vCDmoxikBNR+1ZCyh8cnl
xJJf7osT4hgfVxUfa5gxvmLzgm6eKX3qCpHMTbuho/i3KnztU4OHA0i6ZybYD4Tt
3yLjF1XUUPbK+I2gAWwK1rZJctOXo4chx2cYmZ1TCOfk4mrHYNO+DZA0tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXi8Ysr1qi82OOoMLcg8znC2j0IMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/RZGWm2
MHLcELc9I1FrjPRJ8jIjJQwVlgchXVJw8BMy9wHNiqjTERHWPQGmmmnuO6hi3ka/
zNYfBloAfDnCcocDMxR2mIU9B+/wik0O6YEqSTe7Errnsk30/n50iP6FXqUyGlDI
K9QIXln0ok8WSKNmJBok6Lo0ZxwyMSPQ1O0sctzmOaM1Mzk0emyKe9eHMK6lO9Io
Nu8aIAjUifCgegtxDWBN+X1VSvrFdpnfH7v6/tbqzpu5g88+WHyyw7tzKQPBXiab
3cTolWvkQMVOeaOtOpF1aa1KVZm/UlqRy07dNBSANX8wG8BigU1q1gAGmk6IB0Lr
0TQE+bvPkjEjjw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:46:24 2025 by rpki-client