Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: 0cOuCOwkyghqExs+T2E6qbd/qnWEsnbs/jX3cBMXtTQ=
Subject key identifier: 70:D3:44:3A:EB:BD:23:4E:A9:18:29:B3:A7:12:3D:D5:BC:F8:48:DC
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 0199FC214255CB7EC7918014CCD02E408D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0A6E
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: qZ06mtFiTX6q/whL4lTIOaycTXaU1qAP5qroQSQOuak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:42:55:cb:7e:c7:91:80:14:cc:d0:2e:40:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=70d3443aebbd234ea91829b3a7123dd5bcf848dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:11:4a:fb:4e:7c:f3:06:44:33:8a:9a:27:
27:db:5e:64:dd:2e:cd:c0:76:56:f4:54:d1:87:c0:
06:fa:f9:4b:3c:8a:b8:39:74:60:1a:6b:07:65:95:
a0:a0:cd:fc:eb:17:e4:43:7c:8e:3d:b7:db:dd:6c:
ff:31:89:5a:d1:65:ec:eb:95:d1:59:09:74:9a:a0:
7b:48:51:eb:b3:91:a1:0d:e4:96:a8:81:61:66:54:
9d:c6:6c:58:a1:ec:df:34:70:14:2b:5a:d9:29:14:
9e:33:d2:21:a9:e9:a1:bf:20:b5:48:0d:16:c6:7a:
c7:7e:32:46:19:b8:68:8c:82:92:73:3b:f3:90:fe:
10:04:d2:dd:f5:5e:32:5e:c2:ca:b3:6f:4c:ab:fd:
b5:08:88:a3:39:38:72:bd:f8:21:16:be:ca:86:7f:
65:f9:e3:24:ad:84:3b:ad:40:d3:14:bc:5e:76:bb:
66:bc:35:84:0c:bb:c7:cd:da:01:9e:7c:7c:17:35:
03:85:5b:09:63:71:38:2d:95:5d:2f:dc:31:d2:aa:
4a:1f:57:3c:4d:4f:e9:0a:9b:f5:7d:0b:6d:a0:da:
d9:1c:59:4f:a7:8d:6a:59:f4:01:3c:73:72:b4:0e:
45:86:9e:5e:02:e5:e4:16:23:ac:11:73:db:6d:9f:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:44:3A:EB:BD:23:4E:A9:18:29:B3:A7:12:3D:D5:BC:F8:48:DC
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:88:8a:b4:be:e5:ed:9f:ac:7e:74:12:d9:34:0c:e2:e8:c5:
a7:73:c2:76:08:cd:09:e1:a4:ad:e8:d8:12:0e:fb:8b:75:b5:
50:59:6b:8f:d2:fa:c2:0b:c7:5a:6d:dc:2a:08:73:e5:5f:6a:
a9:95:9e:7f:31:28:86:6f:e2:f3:8e:a4:ed:62:32:63:f9:86:
31:7c:36:eb:83:c1:5c:83:77:3c:5d:f9:07:7a:47:d0:0e:16:
4e:91:72:8e:ac:6c:bf:fe:7f:18:31:04:0c:0d:cb:0b:68:d1:
90:8e:6a:5d:da:3e:9f:5c:64:a8:b3:69:0e:c5:13:19:45:0e:
4f:24:34:e3:54:ae:ba:b4:0f:44:2b:0a:c1:d7:68:ec:7e:18:
18:98:d6:b9:15:01:b7:ba:e1:3d:f2:32:3a:4e:92:83:6e:53:
58:85:70:01:95:cc:f1:33:16:49:bb:ee:09:78:0f:f1:a3:cd:
53:f3:94:74:6c:71:5f:4b:b9:18:04:a4:d7:e7:11:4d:d8:63:
c9:72:b2:50:b9:7e:e6:c8:3f:e2:df:f4:b6:07:15:8c:a4:16:
79:5b:66:b2:0b:db:8d:b0:39:91:b3:dc:7f:9f:59:7f:69:cb:
6f:64:18:b8:d3:a7:7f:c8:a6:9c:ce:46:0a:cd:f1:b8:6a:7f:
6c:e4:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:54 2025 by rpki-client