Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: Wb+Cb5jTX0M+oBt0tHDbSTRnpMAI4g/XRX50JUgEP3Y=
Subject key identifier: 04:25:27:D7:D1:8C:48:50:27:31:9B:30:F0:CA:17:37:A9:AC:D5:19
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 019874F54E72B8368C61CF6C655419763BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0ECA
Signing time: Mon 04 Aug 2025 12:01:29 +0000
Manifest this update: Mon 04 Aug 2025 12:01:29 +0000
Manifest next update: Tue 05 Aug 2025 12:01:29 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: SgZiyjF+fj8oK+ym6lHp6ga9HcQBHb1cqYlz0PTc/7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:4e:72:b8:36:8c:61:cf:6c:65:54:19:76:3b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Aug 4 12:01:29 2025 GMT
Not After : Aug 5 12:01:29 2025 GMT
Subject: CN=042527d7d18c485027319b30f0ca1737a9acd519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:76:d6:83:75:8f:76:55:f4:0e:40:05:8c:
19:5e:34:9d:8d:cd:31:5d:12:5c:ca:37:3b:41:3e:
7f:cf:0d:3b:a8:a3:a7:14:27:a6:8a:de:3d:7e:a4:
d2:66:83:ee:97:27:66:60:6e:97:bc:63:45:9b:4e:
5b:53:d9:98:47:55:ac:3c:87:0b:a7:89:d5:46:29:
bb:31:1c:8c:a8:31:24:ec:38:10:dd:0a:3b:f0:a5:
87:b0:73:c1:73:97:d5:8f:b5:6a:59:b4:9d:04:52:
77:4e:0f:f4:47:99:e4:60:e7:5a:e0:e1:79:c0:68:
ec:67:de:b4:c0:3e:df:50:52:ae:58:e9:82:67:c4:
b6:7a:f8:a4:69:12:4d:d9:71:99:63:ac:4c:da:73:
81:df:49:1e:0d:3d:1b:3c:41:41:fc:68:dc:fe:59:
be:2b:c5:e1:67:a1:18:30:eb:93:ea:0c:0d:00:e7:
1a:12:70:16:b0:e8:e2:e9:14:fa:7b:f6:d5:ac:c6:
77:9a:d5:8f:62:3b:c2:7b:9c:d3:f7:43:97:e4:2e:
67:71:0d:3a:07:2b:30:96:d0:15:b3:19:b6:85:45:
4c:38:09:d7:2f:c7:4f:2b:6b:aa:13:5d:d6:01:e0:
05:13:73:5a:8e:97:80:a1:ff:1e:6f:67:ab:fc:1b:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:27:D7:D1:8C:48:50:27:31:9B:30:F0:CA:17:37:A9:AC:D5:19
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:5a:c4:60:db:28:eb:7b:ba:ab:f8:b7:57:74:70:59:7e:
c4:35:90:0c:af:9a:0a:9c:85:5c:26:7d:02:81:78:d5:12:94:
ef:48:1c:d6:6b:32:c3:92:b0:cd:22:1d:c3:8b:43:98:5a:be:
7d:d5:91:de:3f:8d:04:b1:fa:7e:21:f2:7e:ca:e4:e2:c2:74:
23:a0:a9:ec:6b:55:55:30:5a:50:8f:62:84:07:a7:e0:5b:07:
15:18:87:d9:5d:3a:a7:a5:4d:c0:57:ae:36:0c:0a:7c:b8:b7:
f9:8b:44:4f:33:52:ed:4e:a3:03:b8:f4:48:d1:b6:c7:ad:e2:
32:ca:03:c9:b4:bb:6c:42:48:11:ac:db:35:c9:91:b9:b9:ed:
ce:e0:6d:d0:87:56:3b:5a:7e:d1:37:1b:6c:a0:ca:87:d3:97:
4b:c4:9e:d5:80:c3:c0:a4:4b:85:1e:cf:c4:75:ee:51:c5:a8:
8d:d5:71:70:a4:b6:11:b8:53:c2:c7:58:a5:82:69:41:88:69:
fb:d6:38:81:c5:1e:14:2a:98:67:0e:79:93:a2:88:d5:d3:f9:
7f:f6:0f:ef:e6:5c:4d:e3:76:54:76:5e:bd:28:75:3b:1f:4b:
52:6f:e6:22:65:84:c2:a4:ba:1a:cc:39:55:ce:4d:15:f5:f1:
38:b0:7a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09U5yuDaMYc9sZVQZdjviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy
ZWFhOGIwHhcNMjUwODA0MTIwMTI5WhcNMjUwODA1MTIwMTI5WjAzMTEwLwYDVQQD
EygwNDI1MjdkN2QxOGM0ODUwMjczMTliMzBmMGNhMTczN2E5YWNkNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAh21oN1j3ZV9A5ABYwZXjSdjc0x
XRJcyjc7QT5/zw07qKOnFCemit49fqTSZoPulydmYG6XvGNFm05bU9mYR1WsPIcL
p4nVRim7MRyMqDEk7DgQ3Qo78KWHsHPBc5fVj7VqWbSdBFJ3Tg/0R5nkYOda4OF5
wGjsZ960wD7fUFKuWOmCZ8S2evikaRJN2XGZY6xM2nOB30keDT0bPEFB/Gjc/lm+
K8XhZ6EYMOuT6gwNAOcaEnAWsOji6RT6e/bVrMZ3mtWPYjvCe5zT90OX5C5ncQ06
ByswltAVsxm2hUVMOAnXL8dPK2uqE13WAeAFE3NajpeAof8eb2er/Bu/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQlJ9fRjEhQJzGbMPDKFzeprNUZMB8GA1UdIwQY
MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et
NmUyZGVhMDNkNTk2LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2
LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf5axGDb
KOt7uqv4t1d0cFl+xDWQDK+aCpyFXCZ9AoF41RKU70gc1msyw5KwzSIdw4tDmFq+
fdWR3j+NBLH6fiHyfsrk4sJ0I6Cp7GtVVTBaUI9ihAen4FsHFRiH2V06p6VNwFeu
NgwKfLi3+YtETzNS7U6jA7j0SNG2x63iMsoDybS7bEJIEazbNcmRubntzuBt0IdW
O1p+0TcbbKDKh9OXS8Se1YDDwKRLhR7PxHXuUcWojdVxcKS2EbhTwsdYpYJpQYhp
+9Y4gcUeFCqYZw55k6KI1dP5f/YP7+ZcTeN2VHZevSh1Ox9LUm/mImWEwqS6Gsw5
Vc5NFfXxOLB6WQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:07 2025 by rpki-client