Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: FxBORllKK9rhspT7DJNjviSUdXuliUmm0zSc4RmSRY4=
Subject key identifier: 43:03:25:74:C0:44:27:39:21:2F:6A:4A:2D:F6:63:73:50:09:FA:D2
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 01993236407D113068003D2B4718F718F04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0F2C
Signing time: Wed 10 Sep 2025 06:00:40 +0000
Manifest this update: Wed 10 Sep 2025 06:00:40 +0000
Manifest next update: Thu 11 Sep 2025 06:00:40 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: QnXSXcOP4PiSPtEdxnaKszjV06FC3mbkQvgRJ5SMHCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:40:7d:11:30:68:00:3d:2b:47:18:f7:18:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Sep 10 06:00:40 2025 GMT
Not After : Sep 11 06:00:40 2025 GMT
Subject: CN=43032574c0442739212f6a4a2df663735009fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:55:c7:bf:78:61:2a:8b:7d:45:58:7e:03:
bf:f4:c2:c9:ef:5f:88:17:e5:66:49:65:6c:cc:69:
32:c7:ed:35:82:e1:e2:72:8e:18:4f:bb:61:94:d7:
58:eb:a8:c8:97:80:9f:07:9a:c3:8a:52:bb:d8:ac:
fe:8b:73:89:b2:06:27:b3:8c:b0:0f:e2:02:14:5b:
fe:9a:92:03:3d:92:79:90:d2:4d:2b:68:8e:f4:ca:
1d:89:27:71:87:bc:98:d0:e2:36:9c:d8:1a:de:66:
a0:35:f9:da:8b:bb:65:49:2f:7e:bf:d3:75:fe:37:
5b:a2:16:a9:c8:02:c8:0b:14:c3:5f:42:5c:5c:86:
ac:82:4c:8e:17:eb:80:8d:5b:9b:3e:8d:6e:42:18:
7a:a8:3e:fc:e0:49:69:f0:30:50:78:68:39:1c:1a:
4f:e6:8c:b3:4d:48:b1:30:6c:bb:79:42:b7:01:21:
4e:d5:71:f7:c1:39:90:0e:63:28:84:67:cb:74:70:
28:1e:56:40:44:4d:b4:6f:52:3e:41:9d:a8:1a:da:
a2:e9:5b:02:11:c8:9d:fa:21:89:8f:69:6f:f2:3b:
fd:2b:da:fc:06:a9:7f:0d:8c:a3:5e:f3:77:07:88:
1c:9c:4d:90:21:90:27:6e:8f:3b:b7:30:a4:0f:97:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:25:74:C0:44:27:39:21:2F:6A:4A:2D:F6:63:73:50:09:FA:D2
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:22:8b:0e:d7:25:f0:c4:5f:ed:83:e4:3f:69:77:18:d2:0c:
d1:f5:94:08:d0:70:c7:64:d2:bb:84:da:a5:52:2e:b8:98:5b:
ba:ba:dd:29:6d:a0:b9:ae:75:c4:77:9c:84:c6:7e:65:f1:12:
f3:2d:55:91:40:b4:a7:7e:dc:9c:d2:f6:77:ee:21:a4:87:32:
cf:42:59:14:31:d8:9a:0f:ab:ae:91:ea:90:c4:f4:a5:a7:e8:
d1:24:80:8b:5d:ea:e6:27:0f:1f:25:ea:84:58:f0:4f:bd:e5:
06:1b:6c:5f:ca:cf:d0:28:59:43:8e:7a:df:c7:1a:8e:8a:46:
99:85:18:e1:28:f7:77:db:25:d8:31:6f:69:cc:e2:8d:84:57:
8f:c5:a4:f3:2b:a9:0b:30:13:6a:a3:e7:64:a8:3e:b0:d2:19:
6e:b7:88:75:87:6c:99:e3:ff:7f:a6:da:e7:5b:51:0e:c8:48:
91:ea:a7:09:14:af:a9:13:b3:01:be:85:d8:f7:50:8e:b9:2f:
cf:c3:f1:0f:22:d7:5c:39:c3:e6:c8:16:02:86:eb:d6:3a:ad:
2b:90:ca:90:db:c1:11:76:9f:27:db:99:ec:e5:bd:85:c1:39:
d8:4b:14:52:64:04:e6:bf:60:73:59:5e:78:5f:ea:9b:45:97:
ca:1d:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:58:14 2025 by rpki-client