Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: gD1DEQwC7ba0yRAPYT705rjKfUCXTe8kHGsmF6KAd+8=
Subject key identifier: 75:DA:1B:DB:08:49:EA:8F:0C:AA:4E:CC:C9:37:8B:B7:2A:0E:62:E3
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019A4D739CE9284E3274CBF6572286ED5097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 116E
Signing time: Tue 04 Nov 2025 06:00:13 +0000
Manifest this update: Tue 04 Nov 2025 06:00:13 +0000
Manifest next update: Wed 05 Nov 2025 06:00:13 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: WdaX46EP3K65QrgfC9DzI1HQFI/pXJGwERUk65F0kCM=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9c:e9:28:4e:32:74:cb:f6:57:22:86:ed:50:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Nov 4 06:00:13 2025 GMT
Not After : Nov 5 06:00:13 2025 GMT
Subject: CN=75da1bdb0849ea8f0caa4eccc9378bb72a0e62e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:7c:9b:4a:23:9e:72:db:a8:83:23:57:96:
5d:23:ab:be:e5:51:e8:27:85:e8:42:44:39:15:7b:
30:d8:a8:ee:61:7a:60:26:87:43:f5:23:79:17:c5:
06:ff:45:d3:1c:96:c1:56:a6:9a:31:ae:17:86:82:
83:f3:38:10:e7:78:0d:de:02:c3:f4:e2:31:de:2f:
1a:fc:7e:63:2c:20:c9:dc:80:e2:89:82:87:6a:49:
fb:be:62:6a:7f:0d:82:f9:d9:41:d3:e9:72:e3:41:
0f:b2:44:d8:93:2a:06:f4:d2:e0:46:7a:2d:c6:03:
f3:a1:ab:cb:59:91:99:da:bc:92:85:64:cd:b8:84:
10:9e:c4:33:d2:f9:1f:a3:56:ef:46:a9:d1:11:55:
a5:7a:97:63:7f:4e:70:02:ad:51:1f:2d:28:c4:0e:
69:8b:ad:5d:0e:03:04:e3:01:ca:8e:06:d6:40:e9:
d7:ba:6d:b1:cd:fb:5e:cb:1e:e1:58:9c:1b:e0:1f:
3a:a1:e4:a7:a6:99:ae:6d:e1:38:a2:18:96:cc:2b:
ad:07:61:44:cf:43:7f:75:0e:d2:88:17:9e:5e:92:
f6:31:8c:dd:f8:e0:73:a2:49:f2:1c:42:76:7a:01:
1f:1b:10:d7:3b:f6:5e:a2:b5:ca:46:89:d6:6e:50:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:1B:DB:08:49:EA:8F:0C:AA:4E:CC:C9:37:8B:B7:2A:0E:62:E3
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d9:06:8f:17:36:53:8c:b2:f1:a1:20:7d:89:e6:23:6b:97:
3c:1e:67:04:a4:d6:42:c4:1e:a9:69:6e:4b:d7:68:aa:98:42:
73:5a:db:67:d9:9d:8c:02:4c:0b:dc:a6:b0:e2:68:f2:ab:ab:
7e:61:1d:0d:92:06:1e:6d:da:f7:77:e0:bd:f3:8e:7b:b0:11:
35:59:d3:3d:02:8f:25:13:c5:9c:ff:c4:94:62:bc:8a:69:da:
64:48:b1:c5:65:0d:0e:1f:90:53:a0:a8:48:3c:b5:bf:40:2f:
bb:27:66:58:09:c7:4f:85:1c:f1:a5:30:26:f5:bd:c4:59:36:
6a:b5:b4:6d:52:3e:38:9d:e0:af:93:a5:ac:e2:49:6c:2f:fc:
04:74:26:0b:71:77:e6:f9:d3:48:70:8b:7a:f0:06:ed:07:62:
ac:2d:e1:0a:c5:af:0e:f2:16:d0:48:a8:25:17:6f:0b:30:fc:
a3:fe:15:ac:6b:c5:e4:99:03:34:53:c7:03:1b:2b:20:60:d3:
a2:e8:69:6e:c5:c5:a5:a6:a1:69:03:e7:86:f5:c1:41:10:46:
a6:e4:c2:1c:ab:57:72:57:ee:6d:0a:3d:d9:97:78:e2:11:de:
f4:02:b0:05:ed:bb:17:49:00:d7:83:19:7a:46:e4:92:f9:f3:
86:9c:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:52 2025 by rpki-client