Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: S2yxt1vJ09ClUziifpzXiYFG3O5HfdZexM93KTzM69A=
Subject key identifier: 62:B4:24:EA:82:ED:9A:32:CE:EA:CD:A0:9E:50:DC:6C:E0:F6:78:AA
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 0198D5836783CCCE3C1B633504AFF8086E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0EFC
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: 8Ds6iDiQ2U1CvHCJ46OM2dkpC09dpESfEFBrEL+CL7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:67:83:cc:ce:3c:1b:63:35:04:af:f8:08:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=62b424ea82ed9a32ceeacda09e50dc6ce0f678aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:fc:69:53:b5:74:f0:ad:6a:4f:2a:c7:cd:
1c:c8:c6:0c:91:b2:b7:f6:71:2e:c4:a9:64:b0:9a:
54:91:f1:b0:55:c6:81:97:e0:f8:b5:85:04:51:07:
c9:62:31:eb:77:7f:38:93:93:62:04:c9:9b:2d:b6:
64:26:3b:d9:4f:57:1a:78:1a:e1:5e:5f:f3:18:17:
84:c9:fc:4b:22:34:91:e8:d1:27:07:ea:d3:82:8f:
8e:d2:4d:b3:3a:2c:36:42:06:69:6b:95:bb:26:61:
1b:50:42:bd:28:16:24:72:9b:95:d8:3a:2c:6f:33:
2b:29:3f:82:91:7b:57:90:e5:0d:20:be:41:98:40:
9d:f5:75:10:f6:71:51:aa:a0:31:84:51:3d:2a:20:
4b:e5:18:43:2a:85:ae:b3:77:3a:75:c4:a9:16:4b:
98:6b:67:ba:51:4a:90:d3:57:5f:db:15:b2:19:cd:
1d:8a:04:cd:4b:45:b8:0e:f0:52:09:d7:e7:b5:10:
83:fc:3f:e6:a7:7c:c8:f0:b3:19:8d:c8:63:9f:94:
7b:63:0e:fa:4d:c1:31:6f:67:24:48:47:7b:4b:f7:
34:cb:a0:d8:16:16:f9:72:0b:03:8a:5d:05:cd:76:
8b:ed:ce:02:dc:92:30:96:aa:c0:5a:6a:59:81:21:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B4:24:EA:82:ED:9A:32:CE:EA:CD:A0:9E:50:DC:6C:E0:F6:78:AA
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f1:a0:23:44:b3:0a:3e:42:c4:db:b2:e2:5c:98:1d:d4:8d:
c8:fe:09:42:f9:0c:91:28:a3:ca:d0:65:95:4a:01:5b:a2:7c:
73:42:e2:fd:98:a4:85:91:c4:1b:14:98:a7:a4:0a:ab:5a:45:
77:61:71:27:a2:1a:f1:ad:dd:f8:b4:7a:fd:37:91:5e:93:c3:
79:d7:5c:5f:85:77:98:3a:46:39:16:95:11:02:ba:e6:f5:1c:
17:51:4d:5b:d0:e6:ed:17:16:79:aa:7f:b4:7b:f8:98:20:a1:
4e:e4:da:4b:7f:3c:1d:40:fd:07:22:f8:31:31:ec:58:99:68:
c0:f7:a4:b8:33:9c:61:77:18:dc:96:ea:f1:ad:fb:88:19:d6:
73:d8:7f:54:0b:ba:05:2f:b3:28:6c:57:e1:63:ff:1a:3a:80:
3b:63:c6:53:b0:94:2e:ff:65:fb:87:53:34:ff:11:a8:42:6b:
63:7c:3c:79:ae:73:96:e0:20:69:1f:81:35:66:c6:69:44:6a:
a2:bc:43:7c:25:82:6a:45:87:44:02:95:f0:3f:93:a7:23:5d:
51:46:8c:65:3c:bb:56:9f:d0:0e:07:73:1b:17:d9:e0:d9:62:
33:59:98:ea:02:19:fb:24:29:18:ad:3f:36:50:6b:48:6d:af:
e5:0b:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:00 2025 by rpki-client