Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 2/aY0sRHJ2jqeg9Z8fgzZ3/9xkCQ0WXe46X8OOKcxtk=
Subject key identifier: B4:80:68:92:51:AF:A9:FD:A9:8A:E5:33:33:0F:BA:4A:99:11:90:A2
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 019A25F8A21BFDE0B8B344AC4C3932321790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0288
Signing time: Mon 27 Oct 2025 14:00:42 +0000
Manifest this update: Mon 27 Oct 2025 14:00:42 +0000
Manifest next update: Tue 28 Oct 2025 14:00:42 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: 6jH7UyxZW3+cKPfrHva9NZb7rb129eARKK3hAWRkXAw=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:a2:1b:fd:e0:b8:b3:44:ac:4c:39:32:32:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Oct 27 14:00:42 2025 GMT
Not After : Oct 28 14:00:42 2025 GMT
Subject: CN=b480689251afa9fda98ae533330fba4a991190a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:61:89:b6:9a:9c:d2:62:62:65:49:48:97:
e4:74:39:06:8b:88:1c:b3:90:96:dd:ec:4a:eb:34:
b8:c7:e4:e3:75:65:0f:e4:e0:24:ca:96:06:7d:58:
59:18:49:40:56:06:c0:11:29:5f:06:52:d3:66:56:
5d:19:f6:f2:67:59:fb:6e:8c:4c:a6:18:ee:18:2c:
25:1d:44:1f:cd:28:65:3a:cd:2f:7f:02:48:02:d1:
5f:e0:6f:33:8c:3b:e9:52:43:20:75:e3:f9:61:64:
0f:b7:90:73:e4:c5:58:5c:68:55:10:2e:26:eb:1b:
ec:74:77:18:dd:f0:54:90:26:33:35:e4:f8:66:c9:
f4:04:1d:3f:f0:10:1c:0c:ba:da:00:ab:80:c1:f1:
76:49:5e:90:3b:c7:74:31:14:ba:af:70:06:66:d4:
df:16:e5:2e:68:d9:44:8e:9f:2b:ca:bc:4f:e0:91:
93:16:2e:0e:14:76:cd:6c:73:7f:ca:8f:1b:2d:03:
6e:ec:fc:a9:b9:2f:96:d3:f3:21:bf:86:e2:e0:05:
9e:e9:56:ba:b3:6e:e7:cd:be:5d:f4:8b:2f:82:14:
a7:66:37:a0:46:ed:da:54:ba:12:8f:7b:62:52:87:
0d:10:43:79:e3:e6:21:fe:47:a4:c3:2a:20:64:6e:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:68:92:51:AF:A9:FD:A9:8A:E5:33:33:0F:BA:4A:99:11:90:A2
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6d:27:1a:ba:a5:52:c6:30:a2:5f:09:47:a2:3b:5e:b9:b9:
24:82:d4:01:38:3b:7b:e6:40:8d:cc:41:4f:25:e8:83:69:c3:
d3:a9:53:d0:ce:08:a3:70:f0:e6:e8:36:d1:b1:0a:b4:d2:c3:
6f:65:32:91:80:94:19:86:0a:7a:8c:ef:c0:2c:e8:bf:2b:b0:
26:0f:a3:a4:47:c2:e8:49:81:e7:42:3f:42:9e:50:a9:c3:0d:
90:1b:e8:58:27:de:d8:8a:f8:b5:38:0c:f7:06:9f:62:25:6e:
11:c7:be:65:d2:e7:5c:90:31:54:34:35:c3:97:b2:97:88:7f:
c3:7c:2b:27:6c:ee:c3:02:6d:2f:09:69:bb:e9:87:b5:8b:6c:
08:7e:83:35:af:e7:55:95:50:e0:70:7b:1c:ca:22:ea:2a:6c:
5e:1d:84:8d:09:9d:4f:e9:86:df:51:5f:e2:2c:68:66:dd:f9:
46:3b:85:b1:bf:76:14:54:18:c0:e7:17:9d:24:21:df:da:ba:
7b:54:82:13:90:5f:34:3e:0a:1d:ba:76:d8:b5:5b:10:52:c4:
02:72:62:55:38:9c:4e:ce:8e:91:45:83:40:b4:22:45:3f:ae:
ce:81:6c:06:30:54:0e:5d:76:13:01:8f:fc:27:14:48:9c:ea:
81:11:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:45:29 2025 by rpki-client