Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File: femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier: 753kWjiPBYuFRfYkeaZ9UV1R6OI+CBUZ/WSRiNQEwK4=
Subject key identifier: 34:A5:67:11:AF:B1:97:58:A1:18:6E:67:89:FD:FF:C2:44:55:EF:C6
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 0198752B5E2BF54EC32670A44C9B3130BD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 13:00:33 +0000
Manifest this update: Mon 04 Aug 2025 13:00:33 +0000
Manifest next update: Tue 05 Aug 2025 13:00:33 +0000
Files and hashes: 1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: HulV0YYSX5khzXnf8G0cuDiJZsPda04MmpvDBkpVSbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:5e:2b:f5:4e:c3:26:70:a4:4c:9b:31:30:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Aug 4 13:00:33 2025 GMT
Not After : Aug 5 13:00:33 2025 GMT
Subject: CN=34a56711afb19758a1186e6789fdffc24455efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:df:cf:8f:03:23:87:1b:d5:5d:81:bb:4b:
22:98:83:ad:b5:3e:09:85:d5:21:da:01:cd:d5:b6:
d9:b6:b0:2d:a8:80:cb:fa:ca:34:e0:14:2a:60:ba:
92:90:38:3d:30:e0:1b:cd:f4:af:9c:5e:51:7b:99:
91:92:48:20:e8:c7:2d:46:b8:ab:22:35:49:ad:3e:
3f:d2:97:8a:13:94:3c:b1:65:e4:b1:8d:e6:aa:a5:
cd:c2:cc:81:87:b5:4e:46:3e:8d:3d:25:0c:8f:26:
c2:be:18:cf:b1:24:aa:73:ef:b3:0c:dc:bc:ae:be:
85:f1:7a:f0:fd:68:39:35:46:12:76:61:1f:0f:43:
a0:c1:6b:9c:3f:1d:1c:54:27:34:e0:ef:3a:4a:b8:
c2:ed:44:c4:7e:37:86:9a:d9:43:fc:92:57:79:c7:
6b:b4:6e:56:0c:0c:37:2b:56:92:3b:28:a0:07:f4:
70:82:69:e3:14:36:c3:5a:69:c3:c7:6b:9b:ca:18:
3d:07:12:92:a4:2a:4e:6c:40:4b:fc:c3:ee:e3:ab:
f6:3c:d6:8f:b9:86:cd:96:08:d5:3e:32:3a:9d:95:
9c:9c:bb:0a:34:75:48:01:07:1b:fa:c7:03:c8:99:
a0:45:de:c0:c7:e1:8d:1a:3d:15:94:42:d9:0f:1e:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:67:11:AF:B1:97:58:A1:18:6E:67:89:FD:FF:C2:44:55:EF:C6
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:39:ec:2f:da:02:ab:61:18:80:d5:11:07:f0:9a:49:f9:
cf:93:35:35:d4:e9:ac:f4:c6:04:c9:83:dc:6d:8b:b5:c6:76:
f3:54:cf:96:eb:b1:a8:d7:bd:e3:4f:ed:f4:8a:fb:ee:98:f9:
b3:41:24:05:02:ad:b2:30:b0:e7:d1:15:a2:df:eb:07:61:c5:
0d:d8:5a:1c:f7:43:73:4d:7c:a3:30:5b:28:ca:56:5c:b8:62:
b6:8c:c4:28:5b:ef:3b:a5:c6:99:a3:32:10:af:59:57:5c:02:
67:85:00:86:4a:98:d1:f6:c7:4a:e4:39:cf:2f:77:e0:f0:3c:
f2:f9:2c:26:a8:95:b1:25:7f:bc:b9:e3:43:83:42:fb:a2:12:
3b:d9:c7:91:d1:8d:f7:98:d0:eb:b0:e6:3c:d6:3f:a9:5d:b9:
94:2c:fa:67:31:5f:43:5d:5f:a0:cc:5e:5d:c9:87:d7:d0:fb:
c4:e6:dc:1f:47:0c:37:9b:09:58:9c:85:45:bc:35:ab:aa:ce:
8f:e9:26:7c:08:e7:9e:5b:61:0b:06:34:a6:e4:3f:91:53:59:
04:aa:9a:91:30:fb:43:e4:f0:b6:1c:70:6c:c6:3e:28:d8:37:
21:c4:dd:da:e3:62:3a:25:c8:3e:8d:78:5a:b1:b6:ce:34:1f:
3b:c1:db:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K14r9U7DJnCkTJsxML2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl
NjAzMDYwHhcNMjUwODA0MTMwMDMzWhcNMjUwODA1MTMwMDMzWjAzMTEwLwYDVQQD
EygzNGE1NjcxMWFmYjE5NzU4YTExODZlNjc4OWZkZmZjMjQ0NTVlZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj3fz48DI4cb1V2Bu0simIOttT4J
hdUh2gHN1bbZtrAtqIDL+so04BQqYLqSkDg9MOAbzfSvnF5Re5mRkkgg6MctRrir
IjVJrT4/0peKE5Q8sWXksY3mqqXNwsyBh7VORj6NPSUMjybCvhjPsSSqc++zDNy8
rr6F8Xrw/Wg5NUYSdmEfD0OgwWucPx0cVCc04O86SrjC7UTEfjeGmtlD/JJXecdr
tG5WDAw3K1aSOyigB/RwgmnjFDbDWmnDx2ubyhg9BxKSpCpObEBL/MPu46v2PNaP
uYbNlgjVPjI6nZWcnLsKNHVIAQcb+scDyJmgRd7Ax+GNGj0VlELZDx5KCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSlZxGvsZdYoRhuZ4n9/8JEVe/GMB8GA1UdIwQY
MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt
NDc2MzJjYjViODU0LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0
LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuc57C/a
AqthGIDVEQfwmkn5z5M1NdTprPTGBMmD3G2LtcZ281TPluuxqNe940/t9Ir77pj5
s0EkBQKtsjCw59EVot/rB2HFDdhaHPdDc018ozBbKMpWXLhitozEKFvvO6XGmaMy
EK9ZV1wCZ4UAhkqY0fbHSuQ5zy934PA88vksJqiVsSV/vLnjQ4NC+6ISO9nHkdGN
95jQ67DmPNY/qV25lCz6ZzFfQ11foMxeXcmH19D7xObcH0cMN5sJWJyFRbw1q6rO
j+kmfAjnnlthCwY0puQ/kVNZBKqakTD7Q+TwthxwbMY+KNg3IcTd2uNiOiXIPo14
WrG2zjQfO8HbFg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:25 2025 by rpki-client