Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 6Ii6cQsw9uLLXsPHLbgjvgEPFZ964roWfUQDfnAkaj0=
Subject key identifier: BE:68:17:94:35:94:19:38:CF:F8:75:D5:DF:B1:07:3E:C2:91:56:62
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 01993870B03D5FC8125BB306C2098BF5707F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 020D
Signing time: Thu 11 Sep 2025 11:02:13 +0000
Manifest this update: Thu 11 Sep 2025 11:02:13 +0000
Manifest next update: Fri 12 Sep 2025 11:02:13 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: L1sS6gyTndr1pXIyENz04gzxRPLqbFV2AMcHuL9ZQLQ=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:b0:3d:5f:c8:12:5b:b3:06:c2:09:8b:f5:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Sep 11 11:02:13 2025 GMT
Not After : Sep 12 11:02:13 2025 GMT
Subject: CN=be68179435941938cff875d5dfb1073ec2915662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:45:77:76:8a:22:85:8c:3e:95:7b:03:71:
0e:26:a7:c9:22:fa:75:fe:6f:a2:f3:36:c2:12:4a:
45:52:2c:c3:f3:8e:b8:87:db:c2:5c:18:9b:b0:e7:
cb:7a:e2:57:b0:d1:91:b1:98:d3:43:5d:cd:4c:db:
39:f1:bd:5c:15:8c:ed:41:05:21:1b:aa:57:ac:28:
5f:73:bb:07:6a:e6:e5:d1:75:fa:07:9c:11:b1:22:
93:5e:bc:61:6d:2f:9f:0b:0c:af:91:9d:a2:70:52:
08:d5:e9:6a:31:9d:77:df:aa:dd:54:f6:66:9e:7e:
1c:9a:0c:86:a6:e1:0b:51:03:fd:b9:b2:92:88:a0:
70:a2:d8:ef:1c:4a:06:d5:af:ff:1f:6e:31:be:d8:
c7:26:2d:03:16:82:db:aa:87:11:03:ab:da:89:99:
c6:31:f9:fe:50:00:4b:a0:30:82:eb:e2:2f:d5:33:
ae:90:f9:3c:f0:94:af:33:70:2c:25:af:32:3d:37:
96:8d:a8:8b:18:49:a5:75:77:41:9b:62:9c:ff:6c:
db:7f:1b:cb:91:3b:13:e0:1e:28:34:8a:eb:12:08:
48:9f:4b:77:70:bd:09:de:69:d1:a9:48:8e:50:57:
e8:8f:22:8a:6e:c0:f4:28:3e:95:81:88:ab:2d:90:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:68:17:94:35:94:19:38:CF:F8:75:D5:DF:B1:07:3E:C2:91:56:62
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:39:b8:17:29:64:ea:fe:d8:70:e2:a4:18:3b:b3:5c:ee:
e1:22:44:10:e3:68:00:e4:2e:17:d4:06:8d:b2:c5:c7:fa:de:
15:2e:09:6a:a6:09:bc:9c:3d:4d:50:e3:35:a6:f1:a9:47:65:
fe:87:b2:c9:3e:b7:31:51:be:a0:2f:a4:c7:51:69:bd:c6:de:
ac:ed:be:80:2b:d9:6b:74:af:e9:4a:1c:f7:c3:1d:49:8a:fc:
58:88:a6:2d:1e:3d:e2:66:a0:97:d7:41:0a:d2:74:12:7e:e2:
de:e0:b0:67:53:c3:63:f4:ec:ce:2f:ab:61:bc:b7:23:2b:aa:
78:bc:c5:5d:29:9c:60:cc:9e:c4:c5:53:13:f8:a7:3d:2b:6a:
4a:fa:0d:90:e7:1f:fc:c4:8e:40:eb:c8:d8:80:78:41:54:cc:
67:a9:f8:75:54:73:08:e4:21:86:2a:86:f3:2f:52:20:6c:62:
0a:ee:22:0e:b0:ba:d0:42:d0:f3:4b:2b:21:35:96:fe:17:7f:
d6:15:61:bf:f4:f8:0e:d3:da:6f:0e:23:9a:51:f7:b7:1c:db:
f8:45:b4:c3:8c:64:ea:43:ee:d2:d2:fb:37:4c:4a:14:60:93:
15:c8:0e:18:f8:c7:5f:e6:ac:aa:9d:d7:66:47:a3:42:13:ab:
f5:4c:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:57:27 2025 by rpki-client