Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: HayJxbN+w2BDAY+oCk1/Tur9sYWfHL4YhYl/Vvl3kXc=
Subject key identifier: B1:8C:DD:3C:A0:DC:EB:A4:2E:1C:1D:46:83:C7:F1:D3:D1:7E:28:44
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019A72262B0A55E7CAD8BDE9408BC1F64FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 1181
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: v/Zi8/EqLB+YxVrchwOLUFjdcV7TAS8xqYOSafVQozs=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2b:0a:55:e7:ca:d8:bd:e9:40:8b:c1:f6:4f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=b18cdd3ca0dceba42e1c1d4683c7f1d3d17e2844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:8d:30:d6:3a:58:40:21:ed:38:9e:6d:41:
b2:0d:56:81:17:13:1c:8a:16:84:94:22:6f:d0:a5:
60:33:8e:23:39:ed:ed:2d:99:db:eb:05:5c:38:22:
cb:0e:8e:c8:67:25:ae:4e:0e:b9:82:b2:f2:b9:c9:
b1:23:a2:ce:a4:d3:fa:4c:74:78:50:2e:1a:92:da:
35:27:b0:b6:6b:4d:23:ef:f2:c4:27:1f:48:55:4e:
f6:1b:22:74:21:38:c9:23:f2:6d:4d:c2:47:db:40:
41:b1:8e:dd:b5:2f:5d:c0:80:e1:68:1a:59:54:be:
cb:30:21:e0:0b:85:f1:51:2d:60:11:b6:7f:73:2e:
78:8c:cf:03:bb:4c:2b:02:fe:b9:58:73:d1:06:84:
f3:9c:35:6d:e7:56:04:d1:8b:59:a1:7f:c6:5f:80:
ca:ca:70:4b:14:3b:42:d0:c0:48:ae:f9:22:a2:81:
5e:ee:a2:18:e9:fc:7f:f0:44:cd:89:bc:77:ff:ac:
fa:8e:6d:c3:ea:fe:31:e9:8c:cb:a0:57:e0:44:21:
85:92:0c:b8:d3:e3:ae:97:2c:c9:01:b4:7a:07:4d:
60:06:b9:7d:2b:01:28:ba:78:14:cf:bb:39:af:c0:
c0:a6:c3:7e:23:64:06:59:2d:6e:53:66:46:52:11:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:DD:3C:A0:DC:EB:A4:2E:1C:1D:46:83:C7:F1:D3:D1:7E:28:44
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f0:91:7f:96:14:05:fb:c6:e8:35:cb:c7:b0:4b:21:1a:7a:
e6:86:ad:67:a1:57:4e:67:62:9d:44:27:a9:93:e4:2c:95:6b:
d4:67:6f:38:08:5f:d5:2d:98:93:2a:50:b4:ae:e8:b8:a5:9b:
06:a1:78:1a:20:11:45:ee:2e:59:3c:05:09:b7:22:f3:6f:4e:
d8:d3:c4:69:8d:6d:ef:e9:c0:fa:ad:1a:e7:95:a8:d6:d3:f8:
df:a3:24:6b:f4:3d:8b:54:36:1d:b3:91:ce:a0:bf:90:cc:d9:
2e:33:b4:cc:b8:f4:d6:81:db:e5:46:ea:44:89:50:77:f6:cc:
a1:a1:f7:dc:26:52:15:7a:db:f5:bd:26:ac:b7:9b:85:26:ba:
16:0b:8f:32:c5:0b:74:e2:42:d1:56:0b:a5:04:48:9e:fd:3d:
27:a1:80:1d:94:56:aa:02:97:f6:51:b8:7d:a5:ea:50:5f:d6:
1a:3b:4e:ef:38:81:3d:6b:6f:03:aa:31:31:24:d1:78:ab:de:
98:21:f4:86:ac:44:bb:9f:9a:8d:64:0f:d3:51:fb:d4:cc:b1:
90:1e:1a:da:78:c4:15:01:21:84:31:5a:26:df:87:02:23:ea:
e9:b0:77:05:76:4c:16:e7:e9:9b:71:c7:9a:20:94:7d:e6:63:
5c:ab:62:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJisKVefK2L3pQIvB9k/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTYzN2U3Y2UyMWQ2YzkxYjU0YTA2ODhlMjBmOTI0MTYy
MjIyMzcwHhcNMjUxMTExMDkwMTM1WhcNMjUxMTEyMDkwMTM1WjAzMTEwLwYDVQQD
EyhiMThjZGQzY2EwZGNlYmE0MmUxYzFkNDY4M2M3ZjFkM2QxN2UyODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNWNMNY6WEAh7TiebUGyDVaBFxMc
ihaElCJv0KVgM44jOe3tLZnb6wVcOCLLDo7IZyWuTg65grLyucmxI6LOpNP6THR4
UC4akto1J7C2a00j7/LEJx9IVU72GyJ0ITjJI/JtTcJH20BBsY7dtS9dwIDhaBpZ
VL7LMCHgC4XxUS1gEbZ/cy54jM8Du0wrAv65WHPRBoTznDVt51YE0YtZoX/GX4DK
ynBLFDtC0MBIrvkiooFe7qIY6fx/8ETNibx3/6z6jm3D6v4x6YzLoFfgRCGFkgy4
0+OulyzJAbR6B01gBrl9KwEoungUz7s5r8DApsN+I2QGWS1uU2ZGUhHcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGM3Tyg3OukLhwdRoPH8dPRfihEMB8GA1UdIwQY
MBaAFH3mN+fOIdbJG1SgaI4g+SQWIiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQt
MDM5NjFlMmIwNjAxLzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQtMDM5NjFlMmIwNjAx
LzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvCRf5YU
BfvG6DXLx7BLIRp65oatZ6FXTmdinUQnqZPkLJVr1GdvOAhf1S2YkypQtK7ouKWb
BqF4GiARRe4uWTwFCbci829O2NPEaY1t7+nA+q0a55Wo1tP436Mka/Q9i1Q2HbOR
zqC/kMzZLjO0zLj01oHb5UbqRIlQd/bMoaH33CZSFXrb9b0mrLebhSa6FguPMsUL
dOJC0VYLpQRInv09J6GAHZRWqgKX9lG4faXqUF/WGjtO7ziBPWtvA6oxMSTReKve
mCH0hqxEu5+ajWQP01H71MyxkB4a2njEFQEhhDFaJt+HAiPq6bB3BXZMFufpm3HH
miCUfeZjXKti2w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:29 2025 by rpki-client