Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: xhedlry4ZvvDqh1yrLBdkPos8MCkH0YMkXZwWt+goO8=
Subject key identifier: 80:64:0B:75:8E:59:DF:76:31:11:09:D6:64:C6:B7:A1:40:42:F4:6B
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 019A0035153F639CDAB8702D86D5A1C53E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0F28
Signing time: Mon 20 Oct 2025 06:01:10 +0000
Manifest this update: Mon 20 Oct 2025 06:01:10 +0000
Manifest next update: Tue 21 Oct 2025 06:01:10 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: ++JEy2hPgko2DphBGIkhqG1eCr1A3VcqVJvkBOa1Iyg=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:15:3f:63:9c:da:b8:70:2d:86:d5:a1:c5:3e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Oct 20 06:01:10 2025 GMT
Not After : Oct 21 06:01:10 2025 GMT
Subject: CN=80640b758e59df76311109d664c6b7a14042f46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:d1:a1:2a:27:a5:cc:3d:05:96:e3:eb:10:
b8:ee:87:93:35:eb:52:95:a6:8e:f8:e7:84:db:1e:
8d:2d:66:7d:8b:a0:98:ff:dd:c1:9a:fa:28:a4:55:
7d:b8:14:5a:5a:8c:e5:65:c5:e0:4f:7b:45:b9:68:
9d:3a:5e:68:b9:f4:44:95:08:e2:e6:9b:61:c7:45:
57:6e:3e:46:ee:0e:c5:12:55:f3:ae:53:c0:bf:d9:
69:27:76:e3:48:45:bd:03:42:8d:3f:b3:77:c9:04:
68:bd:fd:44:2b:d5:d7:83:f7:99:44:95:fc:a1:38:
47:25:c2:72:9f:93:28:2e:f6:d3:65:ac:c1:af:89:
40:2b:b1:03:a4:e7:b2:19:98:fc:a2:4e:d7:12:6d:
4b:45:be:be:ee:81:b0:2c:9f:58:e1:af:da:b0:02:
1b:23:ac:ef:0c:6f:78:23:17:67:72:57:d3:28:00:
b1:e1:f2:d5:93:9b:01:30:06:69:46:5d:2a:69:72:
62:ad:61:90:96:3d:b2:c7:eb:79:1f:0a:e3:c3:2b:
df:e8:2f:1b:81:78:86:34:7f:d0:a5:ba:8c:e0:96:
2b:7c:39:c2:ed:9e:47:69:8f:ed:d7:10:4a:42:a8:
df:99:b2:89:82:d9:2d:30:a5:ad:b7:76:3b:fb:a2:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:0B:75:8E:59:DF:76:31:11:09:D6:64:C6:B7:A1:40:42:F4:6B
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:80:52:51:bb:16:4d:f3:84:b6:76:c9:7f:72:2b:17:2e:
25:e4:cf:30:9b:6c:ee:03:67:85:63:c2:25:39:13:c6:75:e7:
a7:b8:2e:6d:2c:ba:2f:ef:48:d7:62:66:24:3a:f3:94:44:9d:
7f:c0:ef:27:29:5f:ea:8b:fe:43:79:6d:ef:e9:c9:4c:f0:cb:
04:3f:21:01:9d:eb:e9:14:91:a2:eb:93:96:c3:c8:d7:d6:9b:
d4:62:de:04:6a:7b:6d:8a:7d:41:20:3e:4d:54:c2:89:57:29:
4e:81:dc:4d:ca:a7:50:73:1d:7e:95:82:81:44:a1:9a:65:62:
cb:34:a6:29:93:d0:05:c7:7d:52:66:4f:09:ee:12:f7:eb:77:
15:5e:97:e2:a7:f4:5f:a8:8c:83:28:77:89:54:19:01:57:fd:
4f:3a:d7:dd:ef:53:ac:91:45:b1:5a:c2:91:6a:39:2d:80:77:
3e:66:d2:6d:81:91:9d:e0:49:0c:e8:a5:12:49:04:8d:42:7e:
01:b0:99:da:41:35:72:c9:a6:cd:0a:4b:b5:86:e2:6c:b8:f2:
e4:b3:7a:1b:e1:1d:4a:af:e9:44:aa:e8:42:e4:a7:49:1b:b8:
60:75:5c:28:d2:c5:3e:a2:46:62:03:b2:6c:41:0d:e8:ac:10:
09:01:0d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANRU/Y5zauHAthtWhxT5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTVmMGZiZjNkNmJmM2ExNmEyNGJlYzc4MGNiMGZkNmVk
ZjMxZTcwHhcNMjUxMDIwMDYwMTEwWhcNMjUxMDIxMDYwMTEwWjAzMTEwLwYDVQQD
Eyg4MDY0MGI3NThlNTlkZjc2MzExMTA5ZDY2NGM2YjdhMTQwNDJmNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GnRoSonpcw9BZbj6xC47oeTNetS
laaO+OeE2x6NLWZ9i6CY/93BmvoopFV9uBRaWozlZcXgT3tFuWidOl5oufRElQji
5pthx0VXbj5G7g7FElXzrlPAv9lpJ3bjSEW9A0KNP7N3yQRovf1EK9XXg/eZRJX8
oThHJcJyn5MoLvbTZazBr4lAK7EDpOeyGZj8ok7XEm1LRb6+7oGwLJ9Y4a/asAIb
I6zvDG94IxdnclfTKACx4fLVk5sBMAZpRl0qaXJirWGQlj2yx+t5Hwrjwyvf6C8b
gXiGNH/QpbqM4JYrfDnC7Z5HaY/t1xBKQqjfmbKJgtktMKWtt3Y7+6LnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBkC3WOWd92MREJ1mTGt6FAQvRrMB8GA1UdIwQY
MBaAFDXl8Pvz1r86FqJL7HgMsP1u3zHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEt
MmU5NjdhNGNkZGUxLzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEtMmU5NjdhNGNkZGUx
LzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXOAUlG7
Fk3zhLZ2yX9yKxcuJeTPMJts7gNnhWPCJTkTxnXnp7gubSy6L+9I12JmJDrzlESd
f8DvJylf6ov+Q3lt7+nJTPDLBD8hAZ3r6RSRouuTlsPI19ab1GLeBGp7bYp9QSA+
TVTCiVcpToHcTcqnUHMdfpWCgUShmmViyzSmKZPQBcd9UmZPCe4S9+t3FV6X4qf0
X6iMgyh3iVQZAVf9TzrX3e9TrJFFsVrCkWo5LYB3PmbSbYGRneBJDOilEkkEjUJ+
AbCZ2kE1csmmzQpLtYbibLjy5LN6G+EdSq/pRKroQuSnSRu4YHVcKNLFPqJGYgOy
bEEN6KwQCQENcw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:06 2025 by rpki-client