Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: yQqo/sjdfDyfPmurUZM5N+uj3Ty73998EM7tsbY8WjY=
Subject key identifier: E5:28:25:B9:59:AD:B2:F3:01:EF:6A:70:6B:DD:CE:0C:F3:83:82:E1
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0199FC21683738E160857D982C6FB1EEB9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 06A6
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: UWeIcBym70xSFAQyJfHwBmrTKxGpvSH7TIlmjrIgLpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:68:37:38:e1:60:85:7d:98:2c:6f:b1:ee:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=e52825b959adb2f301ef6a706bddce0cf38382e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:cf:15:d8:d3:98:68:ff:3d:5d:cf:78:79:
a3:88:9c:6a:30:56:99:66:e7:d0:16:27:1a:4b:bd:
d2:5d:c1:94:f7:8e:4f:7f:72:91:b2:c3:ab:9e:9d:
2e:80:29:1f:ed:0b:27:ec:8a:29:06:e6:72:8d:69:
75:a5:ab:98:ca:b2:4f:29:65:02:49:57:d7:ce:f0:
28:ea:6a:59:e7:30:a5:20:6f:c5:b4:2a:21:c7:33:
49:15:84:38:b1:5a:53:2a:ce:50:5e:7e:32:0d:ad:
7d:2c:86:95:6e:c6:db:1c:2b:05:13:fb:1d:5e:d9:
f9:62:6a:b6:8d:ef:ca:58:b4:20:32:7e:aa:f6:e8:
09:b5:85:c4:9f:3c:9e:09:e7:de:14:d1:69:bf:38:
c1:9c:98:2e:63:5e:34:ee:c4:26:e3:85:bb:f5:d6:
af:52:79:f0:61:a0:c2:e2:b8:77:d8:30:bb:fb:bc:
e3:0d:87:3d:0e:20:fa:ca:04:b3:b3:1f:9b:be:b3:
99:7f:d1:24:75:1f:8d:9a:af:40:ac:20:f6:67:99:
98:f0:98:d0:ce:59:43:c7:a2:f6:72:b1:8c:e0:d0:
ba:df:9d:8c:16:ac:f2:b1:32:ae:08:18:93:39:c4:
08:3c:47:08:93:ab:d3:42:0d:56:3c:f8:48:1c:43:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:25:B9:59:AD:B2:F3:01:EF:6A:70:6B:DD:CE:0C:F3:83:82:E1
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:f0:1c:a4:96:0b:03:41:59:04:f6:56:df:cc:cc:62:7f:
0f:1d:5c:4e:d6:0c:e4:95:c0:e0:69:29:3a:8e:bb:85:8e:a7:
50:fe:38:5d:30:3e:5c:8e:3a:89:2e:b8:ac:11:f2:8a:ca:19:
b6:80:08:96:b5:09:b8:20:62:22:e1:c6:14:9a:c8:e2:2c:d3:
8c:85:10:56:6e:04:ea:e3:e1:f4:8f:8e:75:53:a1:e0:7b:e3:
d6:ec:15:b5:8d:98:f7:16:b7:18:f8:4a:d0:f9:1f:46:a2:90:
30:48:6e:a0:f5:d8:a6:22:3f:c0:54:0f:0f:33:76:35:fd:43:
68:7f:7d:ad:e0:39:06:63:14:18:de:17:43:89:b5:1d:43:27:
93:d6:4d:96:5c:33:d3:7c:d2:e3:b0:40:35:35:1a:92:ce:ee:
ad:4c:2b:13:8b:6b:5d:a2:52:6b:da:b8:75:16:06:21:06:b8:
bd:ef:c9:4d:45:fc:f6:d3:60:e5:97:11:48:3e:4b:cc:ef:1a:
e3:fc:24:c0:39:d0:5e:7d:68:c2:49:c5:9e:3e:29:34:df:b7:
b6:98:db:c9:84:4e:b0:32:e0:9a:7e:7b:c7:a2:63:c1:6d:a1:
06:69:75:3a:60:e2:96:57:2e:dd:78:f7:63:d9:70:64:8b:e1:
87:6f:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:55 2025 by rpki-client