Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: mxKe60B8w59i5RAgXIFiJmpu5aM00PjOe9OEbb1UlTo=
Subject key identifier: 75:A5:D1:0A:F1:E2:D9:AD:67:39:57:7B:56:97:77:F6:44:CD:51:B3
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 0198D4E0EB64CA5E95C26FFA8028EB003649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 10AB
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: aH0ns0kpicdLlArHpnvP8aTfElVm1j88FKarfDSMGE4=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:eb:64:ca:5e:95:c2:6f:fa:80:28:eb:00:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=75a5d10af1e2d9ad6739577b569777f644cd51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:f9:c5:02:05:6e:95:99:64:f7:8a:77:f9:
83:49:58:04:d5:30:10:4d:a2:2a:3a:ae:aa:e3:0b:
c8:fd:b7:57:0d:bf:d3:95:a5:ef:0d:9b:a8:10:19:
51:04:3b:bf:72:24:ca:2e:4e:01:c0:6f:ea:c0:21:
cc:07:ea:7b:7c:2c:22:3b:6b:a3:a6:5b:16:a1:a1:
29:fa:33:27:80:e6:32:a2:da:ed:45:7e:50:58:c9:
dc:42:28:33:e7:69:bf:c1:6d:91:c2:72:72:d8:85:
81:f5:5d:6e:d3:b5:7f:c3:f2:6d:47:de:85:2a:34:
8f:45:45:98:9d:57:4c:24:0e:a1:05:c6:72:f7:25:
20:b4:40:0e:2a:c4:76:7a:b7:b2:0b:44:82:85:1b:
16:16:5c:51:b1:4d:68:1d:35:7a:21:ff:25:c9:4f:
a5:eb:47:b0:c1:11:c7:4c:36:80:d9:53:44:bb:69:
bc:19:c7:76:67:6a:7c:ab:6f:39:60:12:ec:f0:90:
82:a3:7c:df:28:9d:eb:de:9d:19:09:e9:6d:e6:d4:
3b:81:2b:74:cb:71:a2:94:36:88:7b:a2:6a:e1:6b:
84:44:15:fc:ea:e6:5b:f3:86:30:a9:9e:c9:92:97:
0f:7a:c4:5e:c9:80:b4:cf:25:34:bc:9d:cd:74:84:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:D1:0A:F1:E2:D9:AD:67:39:57:7B:56:97:77:F6:44:CD:51:B3
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:13:b7:7c:3e:22:42:11:44:6b:b0:97:82:ec:3b:cc:a7:
99:f6:2b:e1:01:be:a5:f4:e8:2e:99:7f:b5:70:b6:be:df:47:
94:78:2e:53:2f:a9:c3:ea:68:12:75:42:56:ae:12:55:a3:24:
49:ee:18:ef:06:6d:aa:b4:9a:c0:ad:4e:1b:22:3c:51:48:81:
fa:66:f7:33:de:b3:18:78:51:1e:0b:67:85:07:2c:e8:78:88:
b2:dd:52:b5:09:1b:55:f4:a3:55:e5:8e:47:21:4e:bc:00:12:
15:b2:54:af:75:48:66:a2:2e:e6:44:94:d0:73:6c:b6:92:88:
dd:00:e1:13:80:40:61:e6:7f:53:be:51:72:12:61:e7:41:41:
b2:25:03:98:a6:9b:d4:a9:63:40:3f:cd:d0:45:78:ff:6c:3d:
fb:3b:54:ca:1a:04:b3:a4:6c:88:cb:33:f8:a7:7f:2e:6e:f2:
40:a9:c1:8e:a2:83:7a:99:ac:b4:d6:8e:2a:2e:a9:1c:42:03:
ba:4e:de:78:df:dd:9d:f5:d0:0d:58:f7:dd:74:53:36:3b:3f:
24:26:27:84:9a:d1:c7:45:77:92:37:12:01:9a:30:b3:05:f4:
12:29:8f:d4:70:d0:04:eb:ef:dd:59:8a:e8:4b:16:22:25:49:
35:e9:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:51 2025 by rpki-client