Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: PEAhEXATF0tO2imLABvoCd1xuprFMBA0KRjVZSpA26g=
Subject key identifier: ED:A9:E9:95:91:3C:4B:5C:D8:96:FC:12:CF:D4:C5:41:7A:3D:92:CC
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019A706E2A5F3B00424FCCFD3602FCDCE581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 074E
Signing time: Tue 11 Nov 2025 01:00:59 +0000
Manifest this update: Tue 11 Nov 2025 01:00:59 +0000
Manifest next update: Wed 12 Nov 2025 01:00:59 +0000
Files and hashes: 1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: 6ln5bsZJCHEPYpCEUHDoir7sSlZQbR3ObpIZOTF0DOE=)
2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2a:5f:3b:00:42:4f:cc:fd:36:02:fc:dc:e5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Nov 11 01:00:59 2025 GMT
Not After : Nov 12 01:00:59 2025 GMT
Subject: CN=eda9e995913c4b5cd896fc12cfd4c5417a3d92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:0d:e4:de:1d:f6:b4:46:55:b8:d2:52:b2:
7a:ca:b9:f8:64:01:46:73:5a:9b:0c:c8:0f:40:38:
d1:b8:a2:4a:61:8b:3f:bf:de:d3:89:ce:d2:2e:cd:
bb:f3:02:8e:63:e5:51:5d:07:b0:68:c4:c0:df:70:
cd:63:d8:30:c0:24:46:f4:78:9c:54:cd:b8:38:5c:
a8:b3:b1:6d:b8:e8:c1:e5:7a:56:fe:91:76:fb:f6:
85:76:08:11:3c:74:3f:1b:52:a0:b9:61:8c:be:09:
96:34:f3:7a:44:50:5f:f4:e8:4c:53:8c:59:a3:8c:
41:7f:99:e1:29:0c:b2:ca:5a:24:13:b2:83:30:2f:
a7:27:79:af:cc:a5:9f:94:35:b6:8e:f8:cd:c8:32:
e6:10:1d:96:17:07:35:f5:40:05:5b:88:e2:f0:a0:
99:69:11:15:29:80:c8:87:36:94:ae:ff:f1:b2:74:
38:37:46:76:b7:db:fd:55:ac:04:5b:2c:08:f7:c5:
f4:0b:44:be:43:33:00:53:67:87:b4:46:3c:5c:ef:
c3:47:3b:e4:7c:9c:7f:55:c0:00:a9:bd:b4:eb:51:
88:3d:4c:3a:43:85:a8:10:8f:7e:4d:26:c6:90:81:
d7:94:0f:8f:ba:9a:d9:38:f6:ef:eb:21:b9:13:4d:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:E9:95:91:3C:4B:5C:D8:96:FC:12:CF:D4:C5:41:7A:3D:92:CC
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c5:ec:a6:7e:92:98:f9:66:66:3f:cf:f6:c8:de:be:96:da:
c1:71:5d:7b:d4:44:4e:33:3a:82:de:0f:0c:32:b6:27:23:70:
66:eb:cd:4a:14:e0:71:44:74:f6:37:b5:28:97:88:71:1a:d9:
b6:92:34:af:6d:54:9f:69:2b:2c:a7:1b:b7:11:53:7c:54:29:
93:6a:04:46:cd:b3:97:5f:04:02:6e:8e:ae:f8:e6:a0:97:21:
d4:8a:3a:a3:1c:64:b4:c0:29:ad:0c:4f:dc:73:c7:57:f8:61:
ae:5e:d4:7f:a8:1e:94:8a:97:62:45:5e:08:49:00:2d:2b:fa:
02:c5:c8:ba:6a:87:00:23:90:62:a2:ff:50:79:be:ae:ee:5a:
6f:7e:b1:ca:fd:f0:b3:b4:37:d0:4f:7f:6b:bb:48:53:f4:60:
c5:cf:3b:66:c2:04:41:4e:4b:55:e7:28:7d:33:09:56:4e:0c:
19:f9:84:35:f0:81:dc:69:fd:77:0a:a1:32:71:e8:70:01:94:
48:24:0a:2e:10:0a:c7:bc:5e:ce:52:83:c7:82:e9:d6:29:d9:
c7:61:bd:ca:d3:99:15:8c:e4:43:aa:00:e1:63:0a:8f:d4:6a:
12:d1:58:6f:df:78:1f:2a:57:68:cb:8a:d0:b5:7e:62:4b:d5:
8e:74:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client