Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 7+vOdmhMOQ3+mN31vk821zPXOlKNoFELJP+0mZSwuN4=
Subject key identifier: 4D:19:A5:BA:E5:6A:27:27:E9:B3:88:42:8D:39:DB:AF:7F:61:60:96
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 0197B82144632A5149D0CFB2E083D5192615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0146
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: K19DCwkR3V6ZT62tVg7M7dTuh66+bA1YmWzKDXoq5cs=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:44:63:2a:51:49:d0:cf:b2:e0:83:d5:19:26:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=4d19a5bae56a2727e9b388428d39dbaf7f616096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:6c:64:b0:41:e6:c7:3c:d4:b1:11:3f:c8:
95:1c:de:39:9e:a8:57:38:41:0e:4e:f4:18:3f:26:
22:14:99:d7:c3:df:2f:a2:a1:27:73:22:4d:3b:e5:
67:7c:99:1d:2d:94:3a:65:e1:46:fb:0c:17:02:30:
ef:28:a1:6e:4e:5c:42:d4:c3:3b:36:f5:02:8a:79:
f7:f3:27:99:ba:7a:51:c7:cf:11:35:54:19:91:10:
7e:b3:bf:6d:c6:a5:e1:1f:10:29:8c:19:42:6f:e6:
4c:93:48:f1:69:10:1d:51:8d:7b:14:8e:81:0a:e5:
c9:59:dd:1a:c5:3c:48:bc:70:1e:c3:66:6a:b7:c0:
bc:d1:ae:30:ef:77:1a:6b:b7:cd:22:02:fb:16:82:
13:3a:00:60:b1:d0:d6:53:fc:85:82:60:3b:08:06:
33:9f:a5:35:f7:27:c8:d2:f9:be:d9:58:1b:f7:7f:
d7:0d:b9:74:c2:88:07:01:27:3a:0c:a1:82:d1:1f:
ee:e2:09:d0:55:3d:32:60:74:20:ae:e6:d5:ff:0f:
6f:26:ed:55:84:83:ea:fa:54:ae:18:8e:ad:23:96:
b1:02:20:e2:b0:54:64:49:96:8e:b0:d8:c8:0c:77:
57:5c:15:40:06:e5:f6:26:bf:6e:66:31:de:16:94:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:A5:BA:E5:6A:27:27:E9:B3:88:42:8D:39:DB:AF:7F:61:60:96
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:8e:c2:1d:e6:ec:8c:f0:f6:f6:70:f5:4f:79:f0:f4:22:
97:7e:43:56:58:c1:6f:27:71:5d:2c:bc:c0:3d:b9:3e:be:28:
90:86:de:c3:60:3d:1b:b9:8b:f2:84:ad:14:66:03:78:5e:64:
0c:8b:cb:db:f7:a6:15:9e:95:10:d3:e8:96:3d:29:62:f0:d2:
77:22:c6:ad:b0:ed:5e:d6:84:4e:1d:6b:ff:9b:86:f9:8e:03:
5c:09:5e:16:38:24:cc:1b:d8:db:10:4e:32:f2:de:17:7e:ac:
5e:32:8f:f4:f9:58:5a:6b:1f:5b:89:21:d6:5b:4c:9c:9a:b8:
28:64:a1:41:22:28:40:5a:8d:81:cc:39:03:c0:e7:f5:7e:cd:
6b:16:30:d8:ba:d6:65:62:10:6f:60:aa:20:f7:21:e1:54:3a:
62:48:61:57:17:8d:35:8d:62:a8:fa:a4:b7:40:c2:06:00:83:
a1:19:5d:9b:25:ef:77:6f:16:46:5f:d0:10:67:4b:6f:1b:85:
64:ac:8f:cc:a3:38:c0:c2:9e:ac:55:87:c6:88:a9:e6:28:ec:
29:7e:d3:9f:ad:9b:86:42:94:b7:3f:74:fd:62:a8:75:a7:e0:
30:c1:3a:03:57:a0:74:e0:06:a7:72:13:19:cb:5b:46:39:52:
8e:df:0a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IURjKlFJ0M+y4IPVGSYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi
ODRlZTEwHhcNMjUwNjI4MjAwMTE3WhcNMjUwNjI5MjAwMTE3WjAzMTEwLwYDVQQD
Eyg0ZDE5YTViYWU1NmEyNzI3ZTliMzg4NDI4ZDM5ZGJhZjdmNjE2MDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowdsZLBB5sc81LERP8iVHN45nqhX
OEEOTvQYPyYiFJnXw98voqEncyJNO+VnfJkdLZQ6ZeFG+wwXAjDvKKFuTlxC1MM7
NvUCinn38yeZunpRx88RNVQZkRB+s79txqXhHxApjBlCb+ZMk0jxaRAdUY17FI6B
CuXJWd0axTxIvHAew2Zqt8C80a4w73caa7fNIgL7FoITOgBgsdDWU/yFgmA7CAYz
n6U19yfI0vm+2Vgb93/XDbl0wogHASc6DKGC0R/u4gnQVT0yYHQgrubV/w9vJu1V
hIPq+lSuGI6tI5axAiDisFRkSZaOsNjIDHdXXBVABuX2Jr9uZjHeFpRHiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0Zpbrlaicn6bOIQo05269/YWCWMB8GA1UdIwQY
MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt
MGNlOTgxM2Q0OTI1LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1
LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb2Owh3m
7Izw9vZw9U958PQil35DVljBbydxXSy8wD25Pr4okIbew2A9G7mL8oStFGYDeF5k
DIvL2/emFZ6VENPolj0pYvDSdyLGrbDtXtaETh1r/5uG+Y4DXAleFjgkzBvY2xBO
MvLeF36sXjKP9PlYWmsfW4kh1ltMnJq4KGShQSIoQFqNgcw5A8Dn9X7NaxYw2LrW
ZWIQb2CqIPch4VQ6YkhhVxeNNY1iqPqkt0DCBgCDoRldmyXvd28WRl/QEGdLbxuF
ZKyPzKM4wMKerFWHxoip5ijsKX7Tn62bhkKUtz90/WKodafgMME6A1egdOAGp3IT
GctbRjlSjt8Kmw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:45 2025 by rpki-client