Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: c4UiNg+FPxJD6+WV/k6KY5We4bjgWLe4jEFpRvSfM6A=
Subject key identifier: C7:DA:EE:EF:E5:59:EF:C3:1C:A4:4B:1F:F1:55:E2:CE:3C:33:C0:B0
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019A4E86CAA5E98444260794AC25B4F0D09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 099B
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: YipW0QJ0m/qhN2u3N2YxuYTS9PazfRyMgAijSwj6zdc=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ca:a5:e9:84:44:26:07:94:ac:25:b4:f0:d0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=c7daeeefe559efc31ca44b1ff155e2ce3c33c0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:b9:97:43:f0:ed:e6:e9:7d:e1:a4:44:a5:
ef:e0:fd:c2:0e:5d:fc:fc:b7:78:3b:64:f3:ef:f7:
dd:48:1e:3d:f2:e6:94:45:7e:56:e9:1c:4e:b9:e7:
1b:e6:94:69:30:08:c6:7a:cd:c0:80:8d:98:d6:79:
09:31:3d:6b:4d:4e:2a:96:b7:9f:ef:de:cc:e1:08:
97:dc:6c:f1:de:98:3e:c9:33:6b:1f:6c:37:97:55:
23:15:29:e7:fa:ee:4e:0d:91:6c:b1:78:50:a3:73:
4e:06:2d:2b:15:6d:0a:92:1c:3e:e8:ae:ce:b5:1c:
29:7d:e6:67:72:57:4a:bf:fc:d0:1c:b9:4d:00:77:
10:c1:5a:61:ea:75:86:31:5e:32:94:c0:3e:71:7d:
c4:d7:2d:8b:3d:da:dd:b0:01:40:5b:6f:7a:1a:ac:
d6:3e:a3:41:dd:5c:e7:85:b3:eb:c2:66:d3:42:cc:
b6:dc:14:d3:1f:7e:ec:39:9b:a2:65:4f:17:bd:b2:
fb:61:49:31:da:bc:93:ae:63:7f:70:a2:21:92:3f:
f8:c2:bd:56:e1:7c:02:aa:78:c6:1b:a0:30:cf:5f:
60:8f:85:d0:17:50:5d:65:f5:14:8c:50:05:37:2e:
1f:8d:bd:e4:40:bc:c2:77:2d:0b:df:17:ee:0c:59:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:EE:EF:E5:59:EF:C3:1C:A4:4B:1F:F1:55:E2:CE:3C:33:C0:B0
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cf:18:e5:85:74:b1:d3:2f:ff:3c:07:ba:ae:12:78:86:98:
cf:91:82:7b:f7:48:7c:41:8d:2a:49:70:fc:27:14:8c:64:fb:
70:bc:5d:4f:be:a2:cc:d8:ea:50:0e:a0:f2:d5:ec:9e:3b:b9:
f7:ed:e2:41:59:71:09:1f:3c:7d:10:5e:9c:e2:e5:00:ad:47:
f3:d8:f6:00:be:ea:5a:69:61:b1:48:65:f0:fc:56:e6:95:18:
6f:34:99:9f:af:33:74:4b:a9:e2:1e:ba:54:ed:82:d3:b3:7e:
9d:23:2d:d7:6f:86:5f:d9:a9:18:e6:46:eb:09:33:1a:56:27:
16:9a:fd:c7:85:d1:ad:a9:86:de:44:32:e2:9a:21:fc:30:fb:
d7:9e:a5:ec:00:62:97:78:9b:55:5a:43:80:0e:a3:ad:8d:80:
53:2a:92:97:0d:4f:a7:34:23:45:fa:64:3c:ce:32:c8:eb:e7:
be:dd:bb:41:53:70:9e:4c:59:d2:4e:a2:f5:ce:b9:8c:ae:41:
4c:48:1f:bb:56:a6:42:a7:e2:37:54:12:99:64:9b:8b:44:9a:
eb:b3:43:46:8d:da:e0:b1:68:0e:cd:90:78:de:f5:99:ef:92:
14:14:dd:d8:69:5e:bc:c1:22:7e:15:63:0a:20:3c:1f:5d:14:
e1:9b:44:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:28 2025 by rpki-client