Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File: femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier: kuucNvoGdFGALulV01mp9yBbvGPZ8m/3rl4MTolLZC0=
Subject key identifier: C3:B4:8D:5C:20:E1:02:91:8A:25:B0:23:C0:76:4B:66:7A:4C:02:BB
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 019A7112D581B91DF9AA27814CBD7C8CE983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: nuqZys91aL9QyG+v4fCXkt5JkKOVG+JAwnCNLAxTr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d5:81:b9:1d:f9:aa:27:81:4c:bd:7c:8c:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=c3b48d5c20e102918a25b023c0764b667a4c02bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:f9:21:12:ed:5b:81:c6:ca:33:04:2f:a1:
03:2f:f8:f9:ae:d4:ff:96:04:85:3a:fc:79:d0:9e:
61:17:fa:d5:79:e1:88:b9:75:65:23:89:eb:c2:d1:
38:86:20:e5:40:25:35:9a:d8:de:47:49:84:0a:2a:
a3:a1:ad:02:fa:f0:b3:b1:06:ad:6e:40:e0:a3:e3:
ca:fb:04:a1:75:4b:82:db:0b:23:1b:81:2f:c6:18:
53:f4:2b:9d:98:85:de:65:a5:18:6b:78:2e:b3:6a:
f2:bd:4e:95:cb:43:f9:e3:90:dc:2e:d2:19:76:96:
4a:54:31:21:df:a1:fd:7c:90:bf:80:35:01:c7:27:
aa:69:6a:b2:8b:b5:04:32:7e:f1:b0:01:4f:3a:14:
a0:89:80:0a:90:c2:2b:f2:a0:bc:96:47:bf:d4:cd:
14:d2:0b:59:a5:91:92:29:8d:cd:14:ca:ed:2d:54:
d5:bd:54:a1:83:2b:5e:d5:5a:6c:af:1d:30:09:1b:
3d:72:7c:65:9f:a3:a6:8f:65:d3:ec:60:9b:d0:9b:
51:26:89:88:5b:23:30:f6:d6:6a:21:5a:7f:bc:65:
09:61:1a:f7:02:eb:63:13:39:40:f2:12:fa:42:3d:
4a:b1:6a:3b:ec:47:0a:36:8a:41:59:1e:6e:77:fc:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:8D:5C:20:E1:02:91:8A:25:B0:23:C0:76:4B:66:7A:4C:02:BB
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ae:94:c7:2f:b0:6a:45:ee:54:ca:b3:4e:d5:f0:eb:d9:4b:
d6:d2:28:8e:34:25:11:e8:63:e1:ab:27:09:2a:5c:f0:34:7a:
46:c6:94:1c:28:08:b4:17:10:f9:b6:83:44:3e:d4:60:37:3d:
ae:07:19:dc:52:3c:74:f8:34:22:30:32:84:85:e5:0c:53:26:
2a:ef:e8:93:cc:e4:75:c0:4f:85:7e:b4:cd:73:3e:3a:dc:e1:
59:a6:13:34:43:54:d6:a4:98:78:e3:19:b5:db:ee:62:ff:ba:
b5:4a:80:4b:50:58:50:6c:b0:70:82:fa:48:ca:f3:f8:a2:56:
38:7a:1f:16:e8:e1:37:9d:ed:f8:ee:1f:34:4b:1e:dc:8c:8c:
07:0a:2c:3d:a5:71:46:c3:74:8e:95:c6:1a:43:70:08:af:e7:
78:56:38:2d:9d:ab:39:94:f4:67:7a:93:d2:00:23:03:8b:8d:
fc:f1:40:e2:95:6d:fd:0f:67:94:49:be:c8:76:e5:32:1d:de:
f3:17:6c:ad:bb:ae:2e:cb:94:cd:12:ef:dc:89:d7:33:c6:f3:
51:fb:88:9d:5a:a8:b7:75:a2:a8:7f:40:d8:8f:df:9f:fd:99:
40:18:b0:38:13:d5:4d:da:77:2a:cc:ad:2d:e9:c3:4c:c0:c7:
0e:63:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client