Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: ykKBzvgHPLx6tH+VRia0JWQvHIdgZAp0M+gRMiO/QGI=
Subject key identifier: 6E:2D:67:0B:F9:52:7E:CC:0E:AC:1F:08:35:E2:E3:06:97:87:1B:53
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 0198469B32D5C9F89952C74554F3D5E96BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0EB2
Signing time: Sat 26 Jul 2025 12:00:32 +0000
Manifest this update: Sat 26 Jul 2025 12:00:32 +0000
Manifest next update: Sun 27 Jul 2025 12:00:32 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: gusiXMyQzrMWhB4EuNEP39ewnk5mTKseiE3HzN5r9Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:32:d5:c9:f8:99:52:c7:45:54:f3:d5:e9:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Jul 26 12:00:32 2025 GMT
Not After : Jul 27 12:00:32 2025 GMT
Subject: CN=6e2d670bf9527ecc0eac1f0835e2e30697871b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:1a:18:7b:d2:eb:bc:4e:30:d6:92:1b:dd:
59:c8:12:0b:6b:bb:93:4d:9c:8f:29:26:49:4a:b7:
68:e2:e6:59:3c:5b:45:8a:87:7f:f8:e1:c0:b3:d0:
fd:a3:09:64:03:e6:80:e7:48:b9:d3:ad:bd:54:51:
59:7f:10:ff:1a:60:aa:39:5a:5c:f6:6a:6b:96:47:
fc:ab:9a:e0:10:10:68:3b:ad:5a:2f:33:59:1d:4d:
12:39:be:70:f0:24:e7:b3:6c:bc:a2:41:fd:f5:89:
b5:24:8c:e2:09:db:ce:bd:aa:30:74:c2:1e:1c:0e:
b7:0b:1a:03:72:f8:36:9c:f0:df:6b:b1:b9:ea:08:
3b:a9:00:c7:9f:5b:c8:54:27:45:46:99:ec:a4:89:
d9:21:32:4d:b5:db:de:34:18:24:8f:bc:0a:f6:02:
cc:0a:9b:9f:6c:6f:46:99:5d:0e:f3:1a:81:c3:91:
6e:8e:ff:b3:12:6e:ef:18:56:19:fe:1d:5f:56:b3:
ee:35:9e:8c:b1:9a:87:02:be:df:a3:18:a8:28:64:
43:9f:76:0d:e8:1f:c8:08:cf:c3:9d:49:2d:a1:39:
90:a7:a9:fc:8b:c3:e5:c2:a0:81:da:9c:1b:e2:f4:
46:70:18:a4:73:0d:aa:29:75:7d:e7:fd:a4:c6:b4:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:67:0B:F9:52:7E:CC:0E:AC:1F:08:35:E2:E3:06:97:87:1B:53
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:47:b0:fa:04:a0:69:9f:66:89:d8:35:24:6b:71:ca:24:85:
19:5d:51:41:7e:80:23:d6:43:24:6d:a3:95:c6:55:9f:49:b7:
48:92:c8:de:23:3f:17:6d:60:83:38:92:ba:49:5b:fb:bb:56:
0d:8e:87:5d:1a:4e:71:ca:04:82:95:80:d1:4f:f1:87:65:7c:
7e:4a:d7:95:99:e6:d1:43:b7:05:a2:3b:c0:5b:cc:a3:7d:d0:
46:25:e9:2e:2e:5b:f3:5a:31:fd:ce:34:62:b1:e8:e9:e0:17:
b0:49:77:8a:92:eb:5a:45:af:46:9f:63:40:29:17:88:4c:e1:
eb:20:a6:6b:55:ea:f1:09:70:13:32:ab:71:df:15:f4:29:85:
5a:e7:f5:5e:e4:83:86:e5:ab:e2:34:ce:59:08:19:21:c0:e7:
53:15:97:51:79:4f:3c:35:89:dc:db:3f:e1:a2:4b:8d:63:82:
04:bb:c3:1c:51:d5:33:1f:fa:57:62:94:8e:e8:6a:12:58:f9:
02:e2:96:3f:83:91:00:2d:e0:50:8b:9b:6b:d9:95:a2:fa:84:
94:dd:71:60:cc:42:f8:de:c2:2e:35:d7:c1:e8:d9:22:4b:29:
be:25:b9:79:31:69:d2:44:d5:48:d5:32:c7:b8:70:96:e1:38:
f3:bb:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:54:04 2025 by rpki-client