Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: z+51Pzqtme0tGmiw7PHg0ABTpghJi9sf1/bL5gvsBAs=
Subject key identifier: 98:C8:86:1F:65:B2:86:AC:E6:29:49:DE:B6:5C:45:57:6A:90:E2:AF
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 0199FC587B7E6A0EDCB346DA1243D6C16361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 1144
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: W++1OC5WzyL42gmAlkNoODIiSEYB+y9jtxzTfbxsgIg=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:7e:6a:0e:dc:b3:46:da:12:43:d6:c1:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=98c8861f65b286ace62949deb65c45576a90e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:ff:8f:60:ac:73:9b:8f:8f:41:66:31:2b:
aa:e1:32:14:59:d9:85:f0:9a:41:54:9d:b6:31:15:
cd:9a:61:f3:28:7b:86:72:9f:25:3d:87:7c:9c:d5:
2d:27:a6:89:30:19:18:17:5b:7a:d3:4b:8e:19:15:
67:1b:48:a4:61:fa:cc:67:e8:59:ad:38:31:a7:46:
4f:66:1b:8a:76:be:a5:f7:03:36:f7:c3:86:98:20:
35:66:f2:4d:80:1a:74:17:12:64:52:86:66:7d:3d:
18:48:71:9d:7c:96:16:6d:36:be:a4:66:db:a7:5c:
db:f5:46:29:05:ba:17:80:d9:8b:7e:52:52:56:04:
7f:8a:56:e7:f3:af:27:ef:ee:e8:a2:34:4c:52:58:
0e:3a:bc:3a:9c:9e:bc:67:bf:d3:34:54:ed:f6:4d:
9f:75:f7:e9:61:de:81:63:4d:44:5d:98:50:63:1d:
d7:ba:4b:3b:36:59:b2:78:ea:d3:18:35:30:7c:4a:
9e:53:ab:5e:17:b3:e0:6c:08:eb:99:44:23:d4:ae:
54:88:79:02:0c:8f:95:e6:e9:d0:33:ba:d8:30:af:
1f:6b:b1:d0:81:bc:2e:97:13:25:52:83:3d:84:54:
50:d0:65:c8:23:f3:88:5d:7b:45:96:46:71:2a:c3:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:86:1F:65:B2:86:AC:E6:29:49:DE:B6:5C:45:57:6A:90:E2:AF
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:d0:4e:f9:18:95:c1:c3:e0:fe:51:9b:f8:83:b1:61:98:
97:3c:5d:5b:ef:2e:50:93:a3:ba:6b:23:49:8d:91:c8:84:e0:
7d:d0:e6:df:bf:ee:b6:7b:e6:cc:fd:b2:1a:cd:4a:10:1e:db:
e3:92:03:d0:b3:2e:85:a3:d4:4b:7c:a6:75:5a:87:7c:84:fc:
13:f4:5d:80:37:94:a4:9b:02:7d:7a:7e:54:75:49:f1:00:9f:
b1:cd:32:52:d4:b2:c6:68:38:fd:c5:93:30:5f:70:b3:e4:83:
e2:14:80:1f:1f:5c:7d:aa:19:e9:e3:d4:66:57:c2:5c:05:82:
c5:61:80:cc:bb:6b:89:d8:d9:da:04:7a:7e:42:81:4b:70:53:
e7:2c:65:8a:ea:20:15:3a:db:a7:bf:b4:87:f7:7a:7f:bf:13:
8a:a4:27:bc:96:1e:a8:91:c1:59:e5:b3:08:61:db:16:4d:af:
47:7f:12:68:55:92:f8:9a:94:81:09:a3:37:63:38:35:e6:bb:
1f:90:84:2c:eb:b0:ed:a0:34:d9:88:68:32:20:38:ae:6d:da:
da:d7:a1:10:c4:cb:2a:b4:f3:0d:31:c7:a3:5c:d3:6a:1b:47:
91:d1:66:1d:34:70:da:ea:9b:fd:7a:1f:42:3c:b5:4a:51:d8:
bc:0d:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:33 2025 by rpki-client