Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 2qzkTMe97kD5yYmw5jH90woex08Qd0RGMhpJR82PrGk=
Subject key identifier: DF:BA:6A:F9:BA:91:D8:C3:38:7E:53:1A:08:F4:6D:9F:87:9C:D5:82
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 0199FB7C80D244F820D0465FF22AF77E2B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0272
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: 0Xq29x4ReyV38vmOIbpggKU/sHOtb/24R2kpFZ4putQ=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:80:d2:44:f8:20:d0:46:5f:f2:2a:f7:7e:2b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=dfba6af9ba91d8c3387e531a08f46d9f879cd582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:fb:d3:cf:69:56:c5:0e:1e:c1:41:13:0e:
6f:75:5f:2a:1b:ea:b4:2f:6f:a6:ad:07:e8:39:8a:
3d:e9:85:e2:77:95:af:f8:4e:20:f3:1a:67:30:9e:
52:0b:14:f7:01:32:6d:07:21:0b:c3:49:d0:3d:c3:
ca:ae:1f:f4:cc:9d:50:f1:6c:30:48:51:f2:56:b5:
e6:3b:26:4c:8b:2b:a9:03:f7:9b:e0:49:af:6c:67:
5f:10:dd:4b:58:26:48:47:f0:5f:3d:81:29:68:e3:
4e:cb:01:e3:79:43:d6:b6:02:13:61:aa:89:6e:d1:
d7:86:1c:eb:74:67:5d:9f:c8:2c:b5:74:93:22:4d:
2e:cc:ec:35:3d:2e:75:5b:5c:bf:02:f9:50:34:3d:
ad:cc:a7:7d:e4:42:ba:76:82:4e:8c:92:8e:aa:3e:
19:96:ee:e7:10:d7:9f:0f:51:9d:3d:f2:bd:36:ea:
c8:05:68:fe:a7:16:2b:99:10:17:47:49:75:78:17:
6f:a4:c9:7b:40:3b:08:ff:04:17:92:af:58:ea:83:
c1:5b:1a:a7:6a:ec:07:49:3e:83:5b:39:8b:92:40:
82:82:59:5a:60:ba:b2:8e:ae:86:91:0b:04:aa:d9:
49:cc:2c:d9:cc:0a:d3:48:cb:92:cf:b9:de:c7:29:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BA:6A:F9:BA:91:D8:C3:38:7E:53:1A:08:F4:6D:9F:87:9C:D5:82
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c1:9b:04:a7:b5:95:ff:f1:48:b7:c8:e4:88:a9:ff:1e:f7:
3b:c1:48:e3:1c:a8:3d:6b:ce:a0:55:0d:ef:b3:f1:8e:61:b1:
e8:00:93:1e:6d:7d:af:ea:06:4a:b0:08:6a:38:0c:34:b4:90:
92:b2:54:8d:8f:72:0e:f1:02:d8:8a:fe:35:b3:55:0b:1c:19:
3e:d3:06:a3:9f:b5:76:00:52:52:42:1d:67:42:c2:25:08:e5:
21:3f:27:ae:f6:3d:98:07:97:81:20:5e:04:33:72:ca:7b:b2:
26:d7:60:0c:81:76:9d:b5:5a:fb:dc:a4:24:93:b5:0b:e4:97:
c5:e8:07:1e:01:ab:1b:8f:18:ee:ef:1b:f4:95:ed:15:9d:1a:
5f:60:a1:55:5b:6d:d3:b9:76:24:95:dd:a3:bb:4a:47:c8:a7:
ac:01:2c:10:77:21:4c:5b:12:77:e8:7b:64:67:f2:0a:cf:5c:
0c:86:fd:b8:48:ae:97:f2:42:c7:56:d8:07:01:f1:61:0b:27:
43:03:d2:b8:da:d9:f3:f2:33:19:59:40:98:20:0c:00:42:3b:
06:e1:f4:ec:bf:3e:36:54:10:23:9c:4d:bd:1f:c6:06:09:4b:
90:40:cc:d6:07:b9:88:60:b2:02:97:ed:63:a0:47:0f:31:a9:
da:0a:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:47 2025 by rpki-client