Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: hKLWQ+nAyMEAqd2Pp0FPFou2/h3r+bm2HRZw/H+zgYw=
Subject key identifier: FF:B8:2F:92:EE:AF:EB:B5:35:D4:5E:94:43:30:41:A1:38:41:49:C9
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 0199FB7CF30721E0D7B595D3DB61B71B2937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 0970
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: a+ra30vKM5Wh9f4z+ZuNL5rTnKymgilr9mHOtUW6a4k=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f3:07:21:e0:d7:b5:95:d3:db:61:b7:1b:29:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=ffb82f92eeafebb535d45e94433041a1384149c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:74:82:3f:bf:5e:c1:4a:a0:11:25:e4:c4:
bc:78:01:1d:e9:fa:f3:7d:9b:e8:84:74:a1:5e:77:
f0:d4:ac:87:6d:d5:26:0f:6f:44:0e:34:98:83:1c:
57:86:77:cb:47:d2:52:f3:59:8d:0d:66:ba:80:30:
b5:9c:8e:a6:69:36:10:df:35:f0:15:10:a2:b7:7a:
33:f3:5e:22:30:93:0a:99:10:ea:e2:72:08:65:06:
08:14:bd:dd:4e:1c:c7:6c:6d:8e:4c:b7:dc:3f:4f:
42:be:c4:92:04:00:aa:a2:95:f5:8d:64:ac:db:30:
97:ef:a3:fb:3e:b9:1c:80:49:8c:44:b7:c5:d6:89:
b8:04:33:ce:cd:e8:71:39:5d:ee:51:68:c6:d0:8e:
e8:86:ee:ad:47:43:fc:c4:ea:e4:16:b3:82:2c:45:
f1:36:ba:48:e2:fe:9a:ec:d5:01:8c:66:6b:8b:54:
13:25:a3:72:a4:a8:d7:4a:c0:04:5c:7d:a6:df:71:
09:40:f1:ee:8e:98:c1:fb:12:99:1b:0e:02:05:17:
6f:64:49:f6:c3:7f:44:06:ee:57:53:24:9f:98:eb:
18:7b:02:92:5a:39:9b:ea:86:eb:9b:94:d4:fe:b3:
81:92:25:12:f8:52:86:d7:42:01:15:2b:57:dd:63:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:2F:92:EE:AF:EB:B5:35:D4:5E:94:43:30:41:A1:38:41:49:C9
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:d8:72:ca:4b:3c:68:c7:22:01:f6:e2:5c:dd:7a:e9:12:
c1:14:8d:b3:ee:b0:f3:ac:50:76:35:65:d9:44:86:44:3f:79:
5a:19:f5:90:03:b6:0d:13:28:9e:21:a5:48:ac:ff:10:11:93:
4b:5e:a7:19:ec:20:3e:73:f8:68:76:eb:68:00:e2:a0:b5:e5:
39:3c:93:21:6c:f6:db:7b:aa:5b:e4:db:f4:b4:95:45:dc:fb:
f4:17:cd:c1:38:7f:ff:4d:0d:e8:b8:c8:04:df:03:3b:90:fb:
0d:89:79:d0:1f:1f:c7:26:f6:74:c1:3a:83:db:c5:75:26:30:
5f:17:a7:94:9e:5a:27:48:33:c0:00:34:64:d3:1f:83:cc:88:
0b:4b:6c:5a:e7:00:6d:91:6a:e2:ac:ec:63:d6:62:e0:cf:d4:
df:73:aa:c8:9f:5c:f6:c1:7e:d1:7e:f6:26:26:e2:c2:04:a0:
cc:f1:2d:6b:f6:65:b0:60:f7:0f:e9:e2:e2:a8:c8:b2:b8:c8:
cf:29:ed:c9:b6:67:7b:36:04:51:d1:26:5d:26:2a:f8:bc:32:
40:d9:50:4b:6a:ba:2b:14:0c:1b:7a:98:ea:b2:5a:ba:01:6b:
45:d5:a0:7e:aa:36:41:e2:17:54:85:2d:c3:c1:11:03:13:12:
19:0e:bd:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPMHIeDXtZXT22G3Gyk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDQ2NDY2YzcxZDI0NjU4YzhiNmY3ZWFlNTMwNWZlYmQx
N2E0YmEwHhcNMjUxMDE5MDgwMTMzWhcNMjUxMDIwMDgwMTMzWjAzMTEwLwYDVQQD
EyhmZmI4MmY5MmVlYWZlYmI1MzVkNDVlOTQ0MzMwNDFhMTM4NDE0OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3t0gj+/XsFKoBEl5MS8eAEd6frz
fZvohHShXnfw1KyHbdUmD29EDjSYgxxXhnfLR9JS81mNDWa6gDC1nI6maTYQ3zXw
FRCit3oz814iMJMKmRDq4nIIZQYIFL3dThzHbG2OTLfcP09CvsSSBACqopX1jWSs
2zCX76P7PrkcgEmMRLfF1om4BDPOzehxOV3uUWjG0I7ohu6tR0P8xOrkFrOCLEXx
NrpI4v6a7NUBjGZri1QTJaNypKjXSsAEXH2m33EJQPHujpjB+xKZGw4CBRdvZEn2
w39EBu5XUySfmOsYewKSWjmb6obrm5TU/rOBkiUS+FKG10IBFStX3WPZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+4L5Lur+u1NdRelEMwQaE4QUnJMB8GA1UdIwQY
MBaAFBREZGbHHSRljItvfq5TBf69F6S6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUt
NjQwZTA3NWJmODdmLzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUtNjQwZTA3NWJmODdm
LzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcnYcspL
PGjHIgH24lzdeukSwRSNs+6w86xQdjVl2USGRD95Whn1kAO2DRMoniGlSKz/EBGT
S16nGewgPnP4aHbraADioLXlOTyTIWz223uqW+Tb9LSVRdz79BfNwTh//00N6LjI
BN8DO5D7DYl50B8fxyb2dME6g9vFdSYwXxenlJ5aJ0gzwAA0ZNMfg8yIC0tsWucA
bZFq4qzsY9Zi4M/U33OqyJ9c9sF+0X72JibiwgSgzPEta/ZlsGD3D+ni4qjIsrjI
zyntybZnezYEUdEmXSYq+LwyQNlQS2q6KxQMG3qY6rJaugFrRdWgfqo2QeIXVIUt
w8ERAxMSGQ69Ig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:32 2025 by rpki-client