Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: FvmtiZdQOWKqtmYdGDDbxs2Sfo0He0iVSy9R5gi05jI=
Subject key identifier: 43:D8:38:DC:25:FF:9D:B8:DA:3F:9C:63:20:F6:DB:5D:B2:AC:31:AB
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0198E641872CBB4190FBC0D0CEA4B89ECA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1658
Signing time: Tue 26 Aug 2025 12:01:50 +0000
Manifest this update: Tue 26 Aug 2025 12:01:50 +0000
Manifest next update: Wed 27 Aug 2025 12:01:50 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: GRj3PWlUBaM2KUK/blZSZmyBkSZVyzBt7YEwnYmce5A=)
3: sPxjsNKAZYfgxPi8TQlY-mZZcT4.roa (hash: EWGb5uGqI3pCu9DA248NQJ9YLr39oAfQHZAN5stmGVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:41:87:2c:bb:41:90:fb:c0:d0:ce:a4:b8:9e:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Aug 26 12:01:50 2025 GMT
Not After : Aug 27 12:01:50 2025 GMT
Subject: CN=43d838dc25ff9db8da3f9c6320f6db5db2ac31ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:74:c3:d2:da:60:9b:6a:8d:f1:5f:61:66:
5d:cd:cb:4e:f1:dd:db:00:73:c5:81:01:85:f9:0e:
25:3e:8f:28:b4:7f:09:c6:5b:ad:bd:c5:cc:d7:f2:
1a:29:4d:1a:4e:41:eb:f7:1d:59:68:83:0d:8a:bb:
03:a9:ef:a9:05:c6:18:f3:b2:79:10:4f:e2:7d:8a:
af:73:a2:d6:02:f1:b0:4c:ae:34:eb:1b:47:67:cc:
65:eb:bf:12:66:91:a3:73:c1:a4:69:1d:c0:6b:5e:
9c:05:44:7d:35:45:86:5a:e4:c1:f4:41:1b:b1:a5:
57:e6:79:0d:75:5e:ac:ff:98:c8:9c:e2:9d:c0:03:
24:88:51:60:3d:89:55:37:ab:ba:6d:ed:d7:31:7a:
16:d8:c4:e3:32:b3:5b:9b:f5:3c:b8:eb:ac:77:88:
a5:4e:b3:67:cc:40:9c:60:ab:c7:a9:2f:a7:71:09:
75:e8:c9:60:11:5f:75:66:6b:2f:ac:8a:aa:25:32:
20:96:1e:99:60:c2:5b:ed:f6:e5:53:5e:07:53:31:
42:c5:84:3b:b8:ee:a9:75:11:f5:47:45:20:44:33:
8e:a0:91:b8:db:7e:68:96:39:6b:d3:6d:fa:22:58:
aa:ec:a0:2c:75:5d:80:0e:56:a4:90:e6:b9:a8:b6:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:38:DC:25:FF:9D:B8:DA:3F:9C:63:20:F6:DB:5D:B2:AC:31:AB
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a4:56:65:40:a2:10:5a:49:cb:e2:6b:be:c8:3e:d6:39:fd:
93:e6:af:0b:82:2f:94:41:8b:52:ef:9c:9b:db:6b:24:73:b4:
8d:8b:2d:41:78:6d:b7:5f:c5:e3:ec:56:d2:a5:59:55:6c:e3:
f6:b5:a7:87:aa:cc:19:a9:45:35:18:95:e9:9c:38:69:a4:42:
b4:35:85:8c:8c:20:80:bb:b7:08:70:04:b8:16:34:8e:ed:04:
37:85:ea:12:33:24:af:4e:78:04:26:e4:21:ed:2c:b5:20:e6:
66:9a:ce:72:89:b0:ca:2f:6a:a2:73:3c:8a:54:2a:3e:2a:c1:
96:62:a6:fa:92:98:5e:e5:f2:1b:52:79:cf:7d:de:f0:90:c7:
41:1a:8e:d9:6f:6c:35:5d:bc:bb:8e:d6:1d:97:20:7a:e0:ff:
04:8c:68:78:a4:53:f2:48:36:d4:17:74:9d:85:0e:13:c1:01:
d9:f8:8f:d0:06:1e:6f:f7:67:c2:4e:50:eb:c0:6c:f6:12:35:
52:3c:b5:3b:19:36:2d:d7:b2:1a:cf:f2:e1:e9:5f:7c:2e:14:
17:08:05:9a:50:c4:30:c6:c2:14:c7:21:61:e9:ce:ba:85:95:
f7:bd:7c:bc:14:97:fa:04:43:45:00:89:07:94:05:ae:95:8a:
be:4d:a2:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjmQYcsu0GQ+8DQzqS4nspQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjUwODI2MTIwMTUwWhcNMjUwODI3MTIwMTUwWjAzMTEwLwYDVQQD
Eyg0M2Q4MzhkYzI1ZmY5ZGI4ZGEzZjljNjMyMGY2ZGI1ZGIyYWMzMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrx0w9LaYJtqjfFfYWZdzctO8d3b
AHPFgQGF+Q4lPo8otH8JxlutvcXM1/IaKU0aTkHr9x1ZaIMNirsDqe+pBcYY87J5
EE/ifYqvc6LWAvGwTK406xtHZ8xl678SZpGjc8GkaR3Aa16cBUR9NUWGWuTB9EEb
saVX5nkNdV6s/5jInOKdwAMkiFFgPYlVN6u6be3XMXoW2MTjMrNbm/U8uOusd4il
TrNnzECcYKvHqS+ncQl16MlgEV91ZmsvrIqqJTIglh6ZYMJb7fblU14HUzFCxYQ7
uO6pdRH1R0UgRDOOoJG4235oljlr0236Iliq7KAsdV2ADlakkOa5qLZ/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPYONwl/5242j+cYyD2212yrDGrMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6RWZUCi
EFpJy+Jrvsg+1jn9k+avC4IvlEGLUu+cm9trJHO0jYstQXhtt1/F4+xW0qVZVWzj
9rWnh6rMGalFNRiV6Zw4aaRCtDWFjIwggLu3CHAEuBY0ju0EN4XqEjMkr054BCbk
Ie0stSDmZprOcomwyi9qonM8ilQqPirBlmKm+pKYXuXyG1J5z33e8JDHQRqO2W9s
NV28u47WHZcgeuD/BIxoeKRT8kg21Bd0nYUOE8EB2fiP0AYeb/dnwk5Q68Bs9hI1
Ujy1Oxk2LdeyGs/y4elffC4UFwgFmlDEMMbCFMchYenOuoWV9718vBSX+gRDRQCJ
B5QFrpWKvk2iUg==
-----END CERTIFICATE-----
Generated at Tue Aug 26 15:35:04 2025 by rpki-client