Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: 12wdlwUd6OuLFI/a/0ZH7Em3gb7Cnr8Y5K33M9Sn7eM=
Subject key identifier: A3:B8:47:0D:02:CF:50:1E:56:29:EA:C9:32:A0:30:39:70:59:55:82
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 0197B7B323EDDBC12C5E417778F1141C8346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0E68
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: WkBSpAuih9T/UaCMcTBVHbE7LtCFylVGB/sXohAFZ+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:23:ed:db:c1:2c:5e:41:77:78:f1:14:1c:83:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=a3b8470d02cf501e5629eac932a0303970595582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:10:da:3c:7a:61:8e:97:a9:6c:dd:b5:09:
0d:b8:51:28:d3:2a:a7:45:0e:f6:a5:d6:4a:c7:ef:
c9:cc:60:fd:ed:71:0f:3c:cc:55:17:1b:fc:ff:b5:
c8:95:10:06:3a:a9:b0:55:2b:57:ea:c4:17:55:ec:
94:43:3d:bb:a6:d7:e5:39:25:ac:41:14:92:29:de:
ff:67:9f:31:b9:54:87:89:df:68:4c:6d:bb:97:cb:
6a:c0:e7:e0:e3:f1:e8:cb:f3:90:61:b7:79:5d:f0:
f4:6d:ad:2b:67:5f:57:20:9a:ad:0f:c0:b3:2e:50:
49:36:d1:23:4d:95:c4:0e:a3:08:4e:cb:5c:bf:94:
85:08:fb:74:80:61:e2:a1:6f:1d:b9:09:7c:82:2c:
58:89:8e:ca:2a:7b:7f:f7:d5:ab:fd:cd:7f:21:6e:
e8:71:c4:bb:39:fc:e2:13:4b:0b:b9:c5:cd:6e:64:
73:10:db:0d:bf:c6:90:14:30:ca:3b:1c:b2:2c:e5:
b5:c1:40:f0:57:33:50:01:30:80:15:08:3c:f1:73:
27:c5:c2:7f:6f:e1:9c:1d:b3:f8:32:1d:22:66:c1:
86:36:39:d7:eb:47:b6:9d:47:fe:af:13:54:02:64:
e4:e6:52:cf:bf:dc:8e:dc:dc:fe:4f:e2:30:d3:9b:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:47:0D:02:CF:50:1E:56:29:EA:C9:32:A0:30:39:70:59:55:82
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:38:fd:46:84:9b:9e:9f:f8:c9:6c:c1:29:fd:ab:f3:f8:f7:
a5:71:98:9b:f4:bc:97:3b:da:32:15:46:c6:fb:95:0a:87:e8:
10:80:2d:8e:9f:e4:c1:1c:c1:39:75:4c:4d:b1:fa:6b:59:e7:
1c:80:98:45:e6:ea:5d:47:3f:e2:05:f7:a1:2a:e3:5b:cd:52:
e0:a2:a3:82:20:78:41:0e:d0:38:dd:37:75:32:1d:d3:dc:33:
37:47:1c:cc:11:6f:50:36:a7:d5:f5:a3:bf:e5:71:bf:09:98:
15:c2:10:36:be:0f:2d:18:3f:11:ae:70:96:e2:1d:f2:d5:43:
2c:cc:77:46:05:31:c2:40:f1:49:8c:cd:d4:2d:1a:68:e2:ff:
d7:6b:d9:69:4e:51:60:bd:fe:60:77:00:25:e0:f8:2e:60:a7:
36:50:30:b4:7a:79:94:72:80:e9:1c:84:7b:99:7c:5b:ed:f7:
5e:90:c4:f2:2a:7e:84:6c:2c:d7:64:26:4f:f7:6e:e3:76:15:
5f:56:cc:e5:ef:3d:f0:55:b5:d0:6f:49:2c:af:07:a6:03:5d:
fe:59:4a:a0:6c:66:a4:39:0f:90:a9:b5:ad:93:c8:c7:3d:d9:
e6:03:f4:00:24:2a:94:4d:8b:14:0a:05:96:17:1f:b7:f6:9c:
a9:1a:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client