Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: JHWjlzZ4RblXmvoHaYBskznGLja+dPfy5dd1vzyykXc=
Subject key identifier: 77:2B:C7:2A:33:C9:21:DB:50:90:93:74:83:05:FF:25:A3:33:0C:87
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 019A54519ACFC877CF9FDEFAC1A4EB28527A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 02A0
Signing time: Wed 05 Nov 2025 14:00:25 +0000
Manifest this update: Wed 05 Nov 2025 14:00:25 +0000
Manifest next update: Thu 06 Nov 2025 14:00:25 +0000
Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: PQ6E650mq7nQvd0DKjshhxMY+iXzR2zCVu/kES/jEM8=)
3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:9a:cf:c8:77:cf:9f:de:fa:c1:a4:eb:28:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Nov 5 14:00:25 2025 GMT
Not After : Nov 6 14:00:25 2025 GMT
Subject: CN=772bc72a33c921db509093748305ff25a3330c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:a5:21:6e:36:0c:ef:81:e7:a8:0e:f3:fb:
ec:4b:09:ba:0c:01:8f:43:87:47:ea:53:b2:21:65:
3d:b1:2e:4f:9b:85:30:1d:d6:83:47:04:42:89:95:
61:3e:f9:ea:32:78:d0:a5:49:7b:17:99:f2:0d:82:
9f:a1:79:87:f4:82:c6:6b:a3:49:ca:20:04:12:54:
42:5c:b4:9b:81:d5:5d:d9:5d:0c:ac:8a:2b:28:98:
f7:bb:1f:1f:97:ef:32:d2:7b:bd:83:28:f8:44:3d:
12:32:94:07:4f:4c:b1:d9:22:89:3d:bf:8a:9a:6e:
8f:17:90:36:46:ec:cf:7d:7d:b9:da:73:a6:6e:d5:
e1:09:ea:a8:33:19:9b:4a:49:13:df:89:8e:5b:5c:
0c:45:e2:41:32:c2:e7:32:90:df:51:e6:ed:cb:82:
09:c3:09:c2:52:00:fc:2d:6b:40:d0:e2:91:1d:df:
5c:fd:c1:d5:2c:7a:3a:2b:08:74:50:bc:31:24:30:
b2:bb:6d:d6:cd:99:3b:e2:68:03:27:c4:b4:1c:8f:
88:2b:ae:d3:21:8c:77:e0:62:6e:a6:33:98:62:77:
2b:92:51:18:6d:44:1c:0e:eb:bb:c8:60:16:0b:b9:
42:8f:1e:45:62:c3:41:a7:ab:df:5f:73:25:3d:a6:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:C7:2A:33:C9:21:DB:50:90:93:74:83:05:FF:25:A3:33:0C:87
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bb:9f:b2:2c:c6:1e:42:c4:a7:44:a8:25:d1:10:11:31:68:
40:5f:bc:ca:b3:2e:2b:10:aa:dc:4a:c9:5a:06:d0:54:b0:d4:
29:48:84:d7:b9:a6:eb:fa:c4:bb:91:c1:0b:43:a5:ad:22:10:
4d:fc:ac:1d:d0:81:a3:74:7a:ea:a7:85:17:24:f4:40:49:6f:
23:54:81:04:a2:88:af:9a:e2:96:83:a8:21:c3:34:39:64:12:
cb:30:4f:42:e3:b4:5b:62:6b:3b:a8:aa:22:2e:a8:d1:7f:c1:
e7:cd:43:a3:21:34:da:3e:7d:4f:dc:ca:b9:1a:a9:18:84:60:
1e:af:6c:bf:38:ef:71:2e:7d:2a:b8:60:fa:05:07:eb:d3:e6:
40:82:90:ef:75:64:73:db:2a:9c:da:1e:ec:6f:c4:79:fc:04:
29:d4:8c:14:3f:b8:fa:1f:39:06:17:10:2c:12:90:7b:ca:63:
f2:69:97:7d:41:55:f1:db:bd:25:3a:5f:30:9d:d1:df:5e:7e:
24:d9:b7:a6:70:7b:58:f0:7e:6d:44:c3:2e:11:34:03:e5:a2:
bd:0d:de:5f:ae:5b:65:f2:bc:27:a8:97:ea:e7:55:1b:8b:c0:
c8:82:cb:cc:ab:cc:1f:7e:69:61:8c:25:fa:47:a0:e6:cc:fb:
b3:66:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:03:45 2025 by rpki-client