Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 1J0bfJO0b+aGgkYstkhwCxUGk3zIS3T1yeS0zKcd1W8=
Subject key identifier: 7C:56:25:CE:35:14:C5:EB:04:21:AF:2A:48:DF:85:C9:6B:AD:68:EE
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 0198D5F1C229E935B0ED805024BE5039A8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 01DA
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: uxiKB6348eRe1s2PDOalhBvotm5DWg4YSfbXzjPnVbQ=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c2:29:e9:35:b0:ed:80:50:24:be:50:39:a8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=7c5625ce3514c5eb0421af2a48df85c96bad68ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:ad:db:d1:3b:26:a3:f8:9a:4f:0a:40:0d:
39:fe:5f:6d:b2:62:ba:b9:1c:1a:8b:25:34:73:02:
45:07:e2:86:7c:cd:c6:d5:a1:de:d0:84:52:85:20:
02:fa:23:82:a0:4b:68:b1:cc:12:2a:63:22:07:d4:
2c:46:cf:ec:47:3c:85:f9:cb:b6:76:76:7d:58:1f:
28:bd:de:04:ae:46:fe:31:d1:5d:8c:88:8e:d2:62:
7f:fd:b2:dc:de:e0:c8:67:e0:4d:e5:26:1c:e4:8e:
fe:6c:4b:9f:44:c2:4c:e6:9b:ee:d2:6c:78:b8:5a:
52:f5:62:82:d9:f7:09:09:48:f6:54:4d:11:cc:03:
5c:5b:ee:9d:d5:28:a6:ce:ef:53:02:6b:89:9c:eb:
27:22:b8:66:cb:bc:45:ef:4b:54:f9:d0:30:aa:48:
61:b1:e4:2c:2c:f1:64:ab:b9:46:17:30:61:28:91:
0e:05:be:8e:aa:00:30:02:c3:42:ab:b8:91:99:6f:
36:43:78:fd:e3:91:17:e0:d0:48:47:60:7f:2b:ad:
cc:1a:17:e9:62:00:7b:ec:22:77:57:56:35:a9:9f:
32:9f:70:ec:73:f1:eb:a4:6e:7f:dc:58:7e:e3:bd:
0f:eb:eb:d3:ca:a0:88:e5:87:f5:fc:23:22:bc:08:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:56:25:CE:35:14:C5:EB:04:21:AF:2A:48:DF:85:C9:6B:AD:68:EE
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:36:a0:e3:b5:87:96:f5:70:52:d3:ac:e1:63:80:a4:07:
ae:a6:9c:2f:4d:1a:42:6c:3d:3e:a7:4f:27:b0:b4:24:ec:32:
4a:5b:21:23:48:7d:a3:af:a7:5a:14:72:8f:d8:73:f5:1e:be:
32:ea:36:4c:49:09:44:25:e1:a5:04:97:22:07:b3:57:c2:07:
b2:bf:f8:b6:a2:35:5d:2e:de:a3:e2:dc:03:96:17:91:cc:cf:
da:42:db:29:de:fb:86:dc:ac:6c:ef:36:b4:4f:fe:61:f7:16:
b0:9b:97:e3:55:56:92:14:d6:16:80:89:d8:bc:e2:70:d9:f0:
53:ae:ce:28:d8:31:9d:ad:f0:ab:6e:ce:16:19:9f:59:11:2f:
92:8c:a8:d6:c8:2e:4d:df:c1:2b:23:0b:53:04:af:e6:b3:17:
31:c6:e3:2e:d8:ab:8f:2a:19:f4:92:be:b4:da:0d:5c:08:4e:
17:c0:55:d9:16:81:5f:d0:6e:36:79:fc:d0:05:3a:02:96:53:
e9:54:71:0d:d5:de:84:e9:50:f3:07:12:59:2b:1a:9e:7d:97:
99:d1:8a:7c:41:df:03:5d:e4:14:87:33:eb:28:cd:1c:69:aa:
7d:38:05:db:61:81:43:c2:59:46:20:bc:ac:e3:21:a8:9f:05:
6b:77:5f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8cIp6TWw7YBQJL5QOaihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi
ODRlZTEwHhcNMjUwODIzMDgwMDQ3WhcNMjUwODI0MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg3YzU2MjVjZTM1MTRjNWViMDQyMWFmMmE0OGRmODVjOTZiYWQ2OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvat29E7JqP4mk8KQA05/l9tsmK6
uRwaiyU0cwJFB+KGfM3G1aHe0IRShSAC+iOCoEtoscwSKmMiB9QsRs/sRzyF+cu2
dnZ9WB8ovd4Erkb+MdFdjIiO0mJ//bLc3uDIZ+BN5SYc5I7+bEufRMJM5pvu0mx4
uFpS9WKC2fcJCUj2VE0RzANcW+6d1Simzu9TAmuJnOsnIrhmy7xF70tU+dAwqkhh
seQsLPFkq7lGFzBhKJEOBb6OqgAwAsNCq7iRmW82Q3j945EX4NBIR2B/K63MGhfp
YgB77CJ3V1Y1qZ8yn3Dsc/HrpG5/3Fh+470P6+vTyqCI5Yf1/CMivAg2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxWJc41FMXrBCGvKkjfhclrrWjuMB8GA1UdIwQY
MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt
MGNlOTgxM2Q0OTI1LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1
LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZw2oOO1
h5b1cFLTrOFjgKQHrqacL00aQmw9PqdPJ7C0JOwySlshI0h9o6+nWhRyj9hz9R6+
Muo2TEkJRCXhpQSXIgezV8IHsr/4tqI1XS7eo+LcA5YXkczP2kLbKd77htysbO82
tE/+YfcWsJuX41VWkhTWFoCJ2LzicNnwU67OKNgxna3wq27OFhmfWREvkoyo1sgu
Td/BKyMLUwSv5rMXMcbjLtirjyoZ9JK+tNoNXAhOF8BV2RaBX9BuNnn80AU6ApZT
6VRxDdXehOlQ8wcSWSsann2XmdGKfEHfA13kFIcz6yjNHGmqfTgF22GBQ8JZRiC8
rOMhqJ8Fa3df3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:13 2025 by rpki-client