Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: oJlQ6yNN3tkqWCuhhCP8gjvFhzIWafcaY+zcAUJOR5w=
Subject key identifier: B9:08:99:1F:FF:CF:C0:B4:73:AE:10:9C:B4:C5:D7:17:6E:F5:73:68
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0198D4DFC8D27257F0006170D0FC8F2974EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 060D
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: sP7zbpjYF7LksW9UJlXWhf6Q3uix2jxS7cuWvWZzO8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:c8:d2:72:57:f0:00:61:70:d0:fc:8f:29:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=b908991fffcfc0b473ae109cb4c5d7176ef57368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:94:d1:53:55:2c:a6:66:aa:1f:fb:40:dd:
d0:71:45:89:d2:cb:08:a0:ad:2b:1d:12:93:88:dc:
98:c4:b5:e5:1b:8a:70:5d:20:2d:5e:cb:86:6b:70:
86:00:f1:cb:9a:d9:76:e9:44:40:0c:04:7b:2e:2b:
6a:b6:d4:df:db:39:4c:af:a5:e1:af:92:78:ea:c6:
b2:a0:44:cd:83:02:6b:6c:26:87:4f:e4:17:e6:3b:
53:0a:08:8f:25:fb:15:6d:f0:98:90:4d:68:29:03:
f0:51:c7:3f:74:27:f5:f2:ee:58:7f:50:00:40:2e:
ab:8b:42:cc:b2:ef:06:d3:c7:2c:d7:82:68:7c:2d:
d6:a2:a4:13:e3:f9:84:62:15:bd:f9:4f:73:5a:cd:
65:9f:81:43:eb:03:94:e5:d8:e7:72:e3:a0:de:8d:
02:f5:1d:03:74:80:cd:da:4d:5f:4a:f2:5a:46:cd:
26:cd:1e:a4:c2:c5:8d:d0:cf:46:a8:36:93:12:15:
3f:99:dc:6c:12:ee:04:48:c2:c9:2f:01:be:fb:6f:
a0:4b:36:d7:6d:91:cd:1d:96:6c:2e:20:99:bf:4d:
1c:66:e7:99:c3:80:99:98:f6:b3:8a:8a:af:60:d1:
f1:99:2a:c6:40:ae:54:57:8a:78:72:48:1a:fd:58:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:99:1F:FF:CF:C0:B4:73:AE:10:9C:B4:C5:D7:17:6E:F5:73:68
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3a:80:b3:30:6e:dc:38:2c:c2:40:ab:c1:d3:9f:84:ad:73:
2b:83:ee:9a:19:79:77:dc:c4:85:06:5b:d8:3f:3d:15:ae:a0:
69:7a:00:fe:0e:96:97:f3:78:ea:75:35:9e:18:c1:34:d9:9a:
85:7e:78:44:2a:fb:03:de:1e:58:ef:f1:ab:2d:33:7b:a5:1c:
9d:a1:5a:19:14:b8:71:98:a5:90:ab:d4:45:2b:aa:28:ba:db:
f6:d1:e3:cf:7c:8b:b2:aa:10:56:b6:4f:be:7a:ed:aa:e8:21:
ea:82:4f:5c:15:05:69:40:ce:7e:6e:9d:4c:b2:5b:b7:13:ef:
0e:34:ed:13:1a:2b:a3:de:19:df:cc:00:d4:e6:f0:6c:6d:90:
a9:88:8b:5d:c8:1b:4b:1a:66:8a:fd:0b:f0:86:ce:85:b6:41:
77:86:31:58:57:b8:dd:dc:e8:7d:ae:cc:14:6d:bf:ca:0d:8a:
0a:18:b7:04:52:c8:3d:35:6c:23:17:4e:af:7a:c7:ad:0c:eb:
1b:b7:cc:41:d4:d4:4d:61:00:a5:05:68:d3:a6:6b:7e:83:70:
7f:09:bc:1e:50:90:33:4d:93:bb:a0:03:05:b8:c9:e8:89:fb:
87:f1:de:15:37:7e:81:b1:f2:b2:a6:25:b3:75:59:e2:fc:49:
e6:1b:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:56 2025 by rpki-client