Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: dajB3YXRR6ED4P0x8aAn8Pb0R8ZLKh1CwyMkMVH2css=
Subject key identifier: E3:EC:87:DD:9B:42:49:8E:0A:AD:F4:1F:E7:83:0C:67:66:1C:0B:0A
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 01984AE602922DFB40123BC8F147FFFD8FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0192
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: Vk++BfGMTS8Pd4Jrmsip9Z4t1tNSqZn14cj5JxHtVaM=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:02:92:2d:fb:40:12:3b:c8:f1:47:ff:fd:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=e3ec87dd9b42498e0aadf41fe7830c67661c0b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:30:e4:c5:73:99:00:63:5f:1a:3b:68:34:
31:d7:42:69:26:05:dc:b9:29:92:5c:9c:cf:08:19:
10:b5:6d:1f:a2:8d:8f:9c:06:76:de:22:4f:1b:5b:
98:03:e2:f8:53:9c:7a:49:f9:8a:67:2a:50:61:14:
02:20:4a:ca:a6:0c:18:44:87:ad:7a:de:09:c8:18:
4b:c2:5a:76:2a:3c:bb:95:f4:7d:93:dd:03:52:ef:
54:02:83:7a:bc:d4:9f:94:10:64:10:9d:e2:0f:0f:
43:e9:23:8e:56:af:3f:bc:ce:4e:2b:dd:7a:61:31:
b8:ec:30:dd:8b:cc:87:17:43:44:1b:e3:b1:7b:8b:
df:b8:c1:bd:07:58:d6:8c:f4:f1:38:e7:74:d2:6e:
1e:73:22:22:2b:8d:77:0d:d1:65:c2:87:cf:b4:a8:
c7:d6:cd:85:2e:cf:d0:0d:f3:77:c5:b3:db:f3:c5:
af:57:96:b6:bd:ec:32:21:13:4a:c8:15:40:68:8e:
c4:b0:04:ad:f3:25:7b:d1:91:d2:c5:19:b9:4b:62:
03:8d:d1:66:68:4d:03:e0:77:6c:63:52:d4:2e:ad:
94:97:c0:85:41:65:89:fd:6c:81:f9:e1:b4:98:a5:
28:7e:05:0d:8e:b3:1a:49:73:e3:f1:f7:7f:87:b8:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:87:DD:9B:42:49:8E:0A:AD:F4:1F:E7:83:0C:67:66:1C:0B:0A
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7f:b9:ca:4a:ce:d0:0b:c7:c1:c8:4c:2c:a1:80:89:08:e4:
2a:66:6c:bf:38:33:79:3e:39:70:ff:75:ad:c1:f7:77:5a:82:
44:28:2b:e8:0c:04:10:6f:5c:f8:9b:60:dc:53:d0:35:c2:e7:
7c:9b:c3:98:ff:74:9f:1b:d0:33:60:e0:b1:32:6a:a3:f0:16:
b8:f0:d5:4a:f4:3f:26:39:32:0c:e1:59:1e:7a:94:4f:d7:75:
64:ed:56:eb:be:35:ff:42:c8:a6:31:33:ee:33:a9:9d:76:9e:
1d:63:6c:3d:9a:a4:8d:79:80:10:4c:0c:28:49:f4:0f:c3:bb:
02:20:f0:3f:9a:3b:83:e4:ec:41:43:3c:14:09:08:90:47:14:
c6:c1:6a:bb:c7:c6:29:6f:20:4d:1e:1d:b1:0f:79:e1:46:af:
1e:25:9b:19:19:9f:c0:1f:f2:22:16:07:a6:e4:04:5c:24:e5:
0c:fb:7a:fc:27:ae:b3:8c:db:88:38:32:96:9e:85:c2:86:5c:
02:af:9f:86:5a:da:22:6d:a2:bf:bd:1c:d7:03:c5:94:1c:d6:
55:43:85:d0:c2:da:f9:76:6e:58:14:0c:4b:4e:9b:b9:7e:c6:
2b:0b:22:25:56:cb:b7:6f:43:3b:c4:81:4a:69:aa:89:9e:be:
67:43:89:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5gKSLftAEjvI8Uf//Y/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi
ODRlZTEwHhcNMjUwNzI3MDgwMDQ0WhcNMjUwNzI4MDgwMDQ0WjAzMTEwLwYDVQQD
EyhlM2VjODdkZDliNDI0OThlMGFhZGY0MWZlNzgzMGM2NzY2MWMwYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS8w5MVzmQBjXxo7aDQx10JpJgXc
uSmSXJzPCBkQtW0foo2PnAZ23iJPG1uYA+L4U5x6SfmKZypQYRQCIErKpgwYRIet
et4JyBhLwlp2Kjy7lfR9k90DUu9UAoN6vNSflBBkEJ3iDw9D6SOOVq8/vM5OK916
YTG47DDdi8yHF0NEG+Oxe4vfuMG9B1jWjPTxOOd00m4ecyIiK413DdFlwofPtKjH
1s2FLs/QDfN3xbPb88WvV5a2vewyIRNKyBVAaI7EsASt8yV70ZHSxRm5S2IDjdFm
aE0D4HdsY1LULq2Ul8CFQWWJ/WyB+eG0mKUofgUNjrMaSXPj8fd/h7gZFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPsh92bQkmOCq30H+eDDGdmHAsKMB8GA1UdIwQY
MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt
MGNlOTgxM2Q0OTI1LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1
LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZn+5ykrO
0AvHwchMLKGAiQjkKmZsvzgzeT45cP91rcH3d1qCRCgr6AwEEG9c+Jtg3FPQNcLn
fJvDmP90nxvQM2DgsTJqo/AWuPDVSvQ/JjkyDOFZHnqUT9d1ZO1W6741/0LIpjEz
7jOpnXaeHWNsPZqkjXmAEEwMKEn0D8O7AiDwP5o7g+TsQUM8FAkIkEcUxsFqu8fG
KW8gTR4dsQ954UavHiWbGRmfwB/yIhYHpuQEXCTlDPt6/Ceus4zbiDgylp6FwoZc
Aq+fhlraIm2iv70c1wPFlBzWVUOF0MLa+XZuWBQMS06buX7GKwsiJVbLt29DO8SB
SmmqiZ6+Z0OJmg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:10:30 2025 by rpki-client