
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: BOxuvo56RmmJR7HnXpBcWSGlnxcWmT6xJz+D/Wps3fk=
Subject key identifier: 3D:B3:A0:7B:F7:62:3B:C5:8E:33:57:6A:AA:01:41:65:E1:E3:00:2E
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 01988B7D6AC58811C72EF7A852DA8E6B419B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 1085
Signing time: Fri 08 Aug 2025 21:01:48 +0000
Manifest this update: Fri 08 Aug 2025 21:01:48 +0000
Manifest next update: Sat 09 Aug 2025 21:01:48 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: YS2mtddU5mHiz+aY9UkEml3wqM+4basc/ZDscLHJXaE=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:6a:c5:88:11:c7:2e:f7:a8:52:da:8e:6b:41:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Aug 8 21:01:48 2025 GMT
Not After : Aug 9 21:01:48 2025 GMT
Subject: CN=3db3a07bf7623bc58e33576aaa014165e1e3002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:24:21:65:99:be:2d:e2:2c:ff:d2:58:b4:
93:c6:ce:f1:6b:c9:07:09:64:8e:20:be:ba:db:84:
44:78:0e:45:8c:f5:d2:9b:cd:db:4c:50:6b:5b:4e:
89:7e:a6:97:a6:71:57:d0:71:84:06:f5:91:02:7f:
7e:75:45:8b:a2:f5:be:d9:9f:b5:24:36:af:b7:d6:
79:e6:47:bd:73:f5:84:30:50:74:4b:48:36:4f:f6:
00:2e:33:6a:c8:b8:14:ce:a3:68:03:34:46:1e:1e:
c5:9a:05:55:1a:96:98:af:bf:bc:ed:27:a0:7f:38:
81:89:64:27:a8:dc:62:e5:24:d3:8c:18:79:c3:e8:
48:cf:ec:ff:64:bf:a7:60:be:d1:d4:1e:7e:ee:de:
15:24:c3:f1:91:d6:2a:f3:71:0e:e0:d7:9b:13:f0:
e2:74:45:e5:0a:2b:7e:25:2b:4f:bd:57:eb:54:fc:
20:e4:65:f4:ae:62:64:cf:05:9f:de:0a:e7:8a:2a:
0a:8b:f6:52:4c:d2:d0:b9:94:8c:31:e7:68:61:37:
f3:64:90:38:9f:d2:5f:2c:8c:cf:f9:5a:8a:5f:9d:
64:d8:5e:42:ad:d9:ec:2d:5b:0e:09:77:89:e7:0a:
ea:fe:d4:a6:ee:c7:cc:86:ea:a6:d3:94:e7:be:1c:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:A0:7B:F7:62:3B:C5:8E:33:57:6A:AA:01:41:65:E1:E3:00:2E
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:4f:eb:8b:1b:87:21:e2:77:71:36:d0:c7:42:ea:17:5e:
4f:e2:25:38:28:0e:d1:54:a0:5b:ca:6d:f2:08:90:f9:d5:ca:
d6:af:ae:54:d9:c3:fe:a9:4b:51:3e:57:bc:da:29:37:34:ad:
1a:0a:e8:47:3f:ab:52:5e:f0:5f:86:37:5d:a3:7d:69:7a:ff:
3b:aa:4f:e3:d9:40:04:bf:77:4a:da:13:03:f7:be:c3:9b:d1:
48:8d:57:44:95:40:8d:a4:2c:c8:65:10:cc:6d:01:23:99:44:
93:c9:33:6f:0b:5c:bb:5a:5d:97:40:9c:52:77:5f:10:30:f1:
07:84:f0:95:0e:0c:d5:c6:db:7d:39:70:24:57:04:c6:f3:cd:
b6:80:b3:14:08:65:8f:bc:21:1d:c8:4c:68:23:fc:83:8d:d3:
c0:38:d5:1b:c4:55:f8:74:6a:fe:24:b4:cf:4c:9c:ae:8d:c1:
37:26:6b:c4:84:f3:1a:a1:ca:e7:98:6d:8e:fe:19:b4:75:29:
32:90:a6:73:eb:c2:18:5c:3b:79:ea:1a:8b:4b:70:ca:ad:fc:
a7:a8:c8:aa:ef:bc:bd:86:13:c0:31:e9:94:54:64:6a:34:2b:
e3:36:4b:b0:28:18:9d:3d:84:4d:90:c0:76:17:54:2b:18:ec:
9a:27:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:09 2025 by rpki-client