Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: q+kNXsy63FZ75zPHmRItXHGfP+bC2bpMSEOfClHbZRc=
Subject key identifier: E8:04:ED:32:5E:39:3F:03:BC:27:1B:47:A4:3A:FA:F0:34:0C:1B:C0
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 0198D404D75281AC3B58A438F1663CFFC5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 08D7
Signing time: Fri 22 Aug 2025 23:02:23 +0000
Manifest this update: Fri 22 Aug 2025 23:02:23 +0000
Manifest next update: Sat 23 Aug 2025 23:02:23 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: P4hOZLunmEBg0pU6xhejStBjP6MeXVNTKYwKchTiX+8=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d7:52:81:ac:3b:58:a4:38:f1:66:3c:ff:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Aug 22 23:02:23 2025 GMT
Not After : Aug 23 23:02:23 2025 GMT
Subject: CN=e804ed325e393f03bc271b47a43afaf0340c1bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:ce:b7:ef:2c:9e:77:33:5e:e7:21:42:d8:
05:a8:8c:35:09:98:b3:74:38:30:f2:0b:ad:52:37:
dc:d6:ec:ff:14:fa:b6:e7:64:56:34:9a:b8:00:44:
72:f4:63:26:f6:8a:4f:1c:44:e1:09:02:eb:f2:05:
6a:25:9b:17:3f:05:74:34:e0:65:3c:58:39:ab:77:
40:b6:4c:10:c4:e0:78:12:67:ff:e0:60:ef:04:ae:
e2:62:c3:c5:b5:b8:1b:33:37:83:69:4a:60:51:51:
25:c0:c7:76:06:13:69:6d:a3:96:af:8b:52:d6:6c:
d6:1f:25:6f:2a:20:d4:96:1d:b2:99:c0:75:2c:2d:
d9:06:d9:79:15:69:37:5e:4c:02:af:62:e4:59:84:
19:54:a3:2c:3d:02:6a:e4:5d:25:58:33:97:a9:2f:
ac:51:78:0b:35:d7:7e:dc:6a:20:69:f4:9b:f6:25:
a7:bd:c1:b8:1a:c7:92:82:19:28:98:44:b7:b8:78:
dd:50:41:94:fc:4a:04:32:01:ae:90:96:e1:12:56:
10:5e:15:7a:e3:15:ce:ef:bc:5b:ce:ed:59:c5:06:
82:7c:e6:9b:9a:44:3f:7a:90:d7:4f:ec:e4:ca:b1:
70:de:d3:b5:0f:35:9c:40:84:14:dc:56:e3:76:e5:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:ED:32:5E:39:3F:03:BC:27:1B:47:A4:3A:FA:F0:34:0C:1B:C0
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:04:79:d3:d6:cf:75:b7:64:97:09:df:14:d5:fb:bc:0e:08:
7a:95:1d:49:df:0c:a6:f1:f4:0b:df:c6:c4:b3:0d:f7:30:e4:
ac:0c:31:c5:d8:9e:8b:7b:9b:5e:f6:c5:27:03:c7:f7:44:50:
17:0d:42:1b:53:a2:30:ba:48:d2:15:dd:cd:9e:8f:3c:11:0c:
3b:96:73:01:47:06:1d:79:a3:68:03:08:17:9f:a9:37:ed:cd:
15:32:96:7e:18:a9:bf:24:19:ab:e5:17:ae:83:d1:c2:97:d0:
e9:c6:70:29:40:ea:e4:19:d7:c1:ae:95:d6:99:9b:44:90:eb:
ac:26:5b:19:0e:87:39:7a:f6:98:27:5b:b2:68:89:59:40:9c:
79:d1:09:7d:0a:24:b5:1f:f4:fd:ae:8b:2d:92:62:74:42:68:
5a:6a:74:05:6a:16:79:94:52:90:bc:08:9f:4b:b2:21:f3:2d:
a5:1a:75:af:78:31:b5:0f:34:57:3c:ac:b2:3a:e1:59:aa:0d:
7a:f0:b9:3a:79:9b:7a:91:95:3c:9b:9b:9f:f6:72:5d:8a:8b:
a9:46:21:ae:94:1b:8f:0c:13:14:1a:64:36:96:3e:36:eb:fe:
88:83:01:8c:b2:52:c6:3e:d6:b1:b5:51:84:0d:be:01:0d:ad:
17:31:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:53 2025 by rpki-client