Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: ykG8dm/8IskouPWeogDPWKzIhXmXbNtbklHd3Ds/NP0=
Subject key identifier: AC:CC:31:0F:4D:47:0A:FB:1D:77:1D:A0:8E:E2:5C:2F:3E:9F:DC:EA
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 0199FCFD3615C5E90BB6415D8B5DC0F841DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0F95
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: pyEhsE0OesE4vMgeh0HPJOm1dataHiQJqcAqAkw2bx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:36:15:c5:e9:0b:b6:41:5d:8b:5d:c0:f8:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=accc310f4d470afb1d771da08ee25c2f3e9fdcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:c3:f6:2e:4c:ef:c3:dc:7f:cf:ff:a9:84:
b7:ab:a5:74:9e:86:88:2e:69:cf:19:9f:3a:06:a6:
d4:78:f4:90:b3:be:4f:fe:73:24:63:e5:6f:9a:37:
2b:8b:a5:43:60:15:08:43:25:cb:8f:24:2b:52:f2:
a8:5d:7a:b9:20:77:5b:41:d2:bd:81:8a:60:e7:49:
bc:6f:f4:28:d6:d8:ed:49:bb:6a:0d:8d:9e:02:b9:
a1:c9:24:2f:88:c1:88:a9:25:e7:53:4d:f0:72:6e:
cd:6b:80:6e:bd:30:86:9c:dd:e1:09:39:98:62:2f:
f6:d8:6d:34:6c:b4:c1:1e:4e:63:b3:f1:d2:e8:58:
3b:9c:14:59:be:cf:95:44:da:1a:f8:8c:dc:e9:cc:
ee:fa:c0:37:0a:32:45:40:80:8b:ab:76:15:21:94:
1b:aa:3f:81:2b:af:1b:7b:c2:f8:5a:6e:3b:51:f0:
54:5d:55:9b:ed:44:f1:a7:b5:46:c1:2f:37:51:f6:
f2:4e:d9:ea:cf:59:93:de:b4:45:bc:30:5c:a0:3c:
0a:bd:a4:7c:dc:95:36:a5:69:9e:dc:f7:b3:22:d1:
56:da:7e:9f:82:4c:b8:e7:e8:e1:6e:9c:19:9a:98:
54:3c:ec:f8:8a:bf:e1:aa:1d:92:5d:31:4e:54:f0:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:31:0F:4D:47:0A:FB:1D:77:1D:A0:8E:E2:5C:2F:3E:9F:DC:EA
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f4:ba:3c:fc:ed:40:ef:24:5c:95:75:53:3b:5d:3e:f3:2f:
29:84:6a:c5:bb:6c:9d:d5:75:42:89:86:9b:47:bf:cd:75:ba:
92:ab:35:25:9e:a6:0a:69:20:8f:33:9b:19:2e:86:11:dc:fd:
21:f9:8d:85:f2:eb:2e:4d:71:76:8a:94:57:87:c7:26:76:18:
75:c4:50:42:fd:18:05:ed:86:e9:2c:1a:3f:3d:1e:4a:b6:70:
93:1d:42:bb:34:da:9c:77:da:5a:cf:44:f5:1a:d5:53:19:ca:
db:47:06:11:b8:86:13:2d:b3:2b:27:b5:18:49:eb:b1:38:14:
ff:a7:c9:91:ef:b0:b2:91:47:57:67:1b:66:ed:44:97:f8:e7:
7a:53:74:65:48:68:42:3d:7a:36:a4:db:cc:69:1e:90:ba:02:
83:0e:42:e0:4d:60:11:35:80:62:99:67:2d:65:98:bc:5c:d7:
65:7c:3e:65:c1:a4:52:a3:dc:fb:c4:73:7b:5c:47:e2:37:34:
27:dc:78:e1:84:27:90:2f:d5:7e:46:75:16:8e:3d:54:b2:c4:
67:84:8c:97:72:e8:6f:75:bf:45:af:ee:54:49:e1:c0:ea:4e:
54:ba:bf:69:7e:1c:95:8b:eb:98:38:4d:27:1a:5f:9f:fe:be:
43:53:67:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/TYVxekLtkFdi13A+EHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy
ZWFhOGIwHhcNMjUxMDE5MTUwMTE2WhcNMjUxMDIwMTUwMTE2WjAzMTEwLwYDVQQD
EyhhY2NjMzEwZjRkNDcwYWZiMWQ3NzFkYTA4ZWUyNWMyZjNlOWZkY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPXD9i5M78Pcf8//qYS3q6V0noaI
LmnPGZ86BqbUePSQs75P/nMkY+Vvmjcri6VDYBUIQyXLjyQrUvKoXXq5IHdbQdK9
gYpg50m8b/Qo1tjtSbtqDY2eArmhySQviMGIqSXnU03wcm7Na4BuvTCGnN3hCTmY
Yi/22G00bLTBHk5js/HS6Fg7nBRZvs+VRNoa+Izc6czu+sA3CjJFQICLq3YVIZQb
qj+BK68be8L4Wm47UfBUXVWb7UTxp7VGwS83UfbyTtnqz1mT3rRFvDBcoDwKvaR8
3JU2pWme3PezItFW2n6fgky45+jhbpwZmphUPOz4ir/hqh2SXTFOVPB4OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzMMQ9NRwr7HXcdoI7iXC8+n9zqMB8GA1UdIwQY
MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et
NmUyZGVhMDNkNTk2LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2
LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPS6PPzt
QO8kXJV1UztdPvMvKYRqxbtsndV1QomGm0e/zXW6kqs1JZ6mCmkgjzObGS6GEdz9
IfmNhfLrLk1xdoqUV4fHJnYYdcRQQv0YBe2G6SwaPz0eSrZwkx1CuzTanHfaWs9E
9RrVUxnK20cGEbiGEy2zKye1GEnrsTgU/6fJke+wspFHV2cbZu1El/jnelN0ZUho
Qj16NqTbzGkekLoCgw5C4E1gETWAYplnLWWYvFzXZXw+ZcGkUqPc+8Rze1xH4jc0
J9x44YQnkC/VfkZ1Fo49VLLEZ4SMl3Lob3W/Ra/uVEnhwOpOVLq/aX4clYvrmDhN
Jxpfn/6+Q1NnWg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:46 2025 by rpki-client