Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: opXEGmqLyrAKhPSpVMZAqmCjiYYuPZHBI4tAKwMQUwc=
Subject key identifier: 20:6E:E2:66:A6:40:96:59:CF:C7:7A:9A:E0:32:B4:14:EF:07:5E:0C
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 019A21ADC287181943C0B9D55E8C9F1C3FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0FA8
Signing time: Sun 26 Oct 2025 18:00:26 +0000
Manifest this update: Sun 26 Oct 2025 18:00:26 +0000
Manifest next update: Mon 27 Oct 2025 18:00:26 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: bXbevOUgXS6vW/13fUrvbsWdJCg1xaEeV3N0KyiljEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:c2:87:18:19:43:c0:b9:d5:5e:8c:9f:1c:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Oct 26 18:00:26 2025 GMT
Not After : Oct 27 18:00:26 2025 GMT
Subject: CN=206ee266a6409659cfc77a9ae032b414ef075e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:43:0e:36:f4:e6:81:14:23:7b:f0:1d:62:
4b:c0:d3:a4:53:1b:fd:05:92:c0:f4:5b:31:ce:f4:
ca:d7:89:90:47:f0:d2:09:67:2a:10:74:1d:f4:87:
9e:46:22:53:36:0c:a6:1d:56:ca:b5:fc:e3:ff:22:
f1:62:84:9d:88:33:8c:30:e6:11:85:1b:6a:c0:6b:
f2:d9:7f:80:3a:a2:34:07:40:c9:c3:74:91:58:d4:
fc:14:97:8a:fb:1d:3c:3c:58:f2:08:42:a5:fa:de:
80:e0:0f:19:f4:4d:8b:4b:cf:ee:e3:5a:76:f9:46:
dc:6a:94:9d:30:65:a2:07:2c:6e:35:f1:1f:b4:ae:
8b:9d:b0:12:34:59:26:4a:c4:c5:a4:3f:8f:be:63:
0a:9d:90:ed:f9:fa:92:25:b7:bf:b6:a4:8c:c5:4a:
7e:9a:ec:1a:c7:78:39:68:3f:f6:07:57:e1:07:b2:
28:58:d9:34:d2:57:46:f4:bf:31:61:3c:f4:ab:11:
fd:00:c0:bb:6e:79:21:0b:3c:6e:8f:40:8b:33:20:
4f:9a:f7:22:3f:09:41:7b:b5:25:9b:a8:94:23:4d:
5c:e8:b0:af:29:a2:b7:be:d9:33:65:ba:b0:10:b4:
1c:90:0f:99:b7:d3:9f:9d:af:02:52:0b:f6:4e:8e:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:E2:66:A6:40:96:59:CF:C7:7A:9A:E0:32:B4:14:EF:07:5E:0C
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:08:95:3b:50:57:aa:6d:92:15:03:0e:11:fd:12:83:26:6b:
2a:eb:42:0a:7f:26:dd:07:78:46:39:bf:2a:1d:14:6b:b4:5b:
18:06:42:3f:5c:53:10:a1:42:3d:9f:f0:85:54:26:be:d7:09:
b9:e2:0a:88:0d:d1:4f:36:e5:5a:9b:5b:95:83:41:4b:5f:da:
90:8e:28:3a:80:aa:d9:bc:db:db:b5:ac:ec:96:dc:99:35:22:
79:67:ce:c1:c2:bb:d6:19:92:3e:00:e8:0d:84:cc:b9:ad:1d:
bb:c7:53:7d:b7:b7:80:7a:6a:83:9f:c7:27:20:fd:18:cd:fa:
7a:6a:52:d4:62:a6:5c:57:0f:ab:f0:d7:6e:99:47:14:dd:4a:
f9:d3:ff:86:4e:98:7f:00:7e:ea:19:4f:b4:d8:ee:3a:29:3b:
52:04:2f:18:05:d0:db:91:7e:75:a2:9e:3c:eb:f5:b9:4f:04:
51:b6:08:5d:79:a0:f3:42:a4:df:75:59:00:e0:20:c2:d5:f9:
5e:8d:37:c9:5d:2a:e4:f5:e0:8e:b5:2b:a0:b2:3d:04:2d:cc:
50:3a:c7:96:3f:77:7e:8e:c6:3c:ea:8d:02:46:07:32:3f:8d:
41:b6:14:98:e5:e2:2a:6b:55:69:3d:b5:46:83:50:aa:bb:c5:
79:8a:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:02:37 2025 by rpki-client