Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: 8NPdPMfbfbUPUafXT3GFeVGxVsgUdzQtp5hhenx/0bo=
Subject key identifier: 45:1E:7C:3F:99:D7:C6:8A:10:80:53:CF:12:0F:BE:98:16:79:81:4E
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 0197729B124145AD3694C52254DD144780D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 0820
Signing time: Sun 15 Jun 2025 08:00:54 +0000
Manifest this update: Sun 15 Jun 2025 08:00:54 +0000
Manifest next update: Mon 16 Jun 2025 08:00:54 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: Xx63HKfG3eZ61W/V+fcL3C76/av4+vyUjtpDhtLlFdA=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9b:12:41:45:ad:36:94:c5:22:54:dd:14:47:80:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Jun 15 08:00:54 2025 GMT
Not After : Jun 16 08:00:54 2025 GMT
Subject: CN=451e7c3f99d7c68a108053cf120fbe981679814e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:2c:7d:09:64:ef:0c:1b:32:6e:4c:fd:84:
75:cf:8e:97:49:24:0e:58:09:3d:a7:59:8a:e2:20:
76:92:c0:0e:c2:ea:1f:40:90:63:bf:04:34:c1:b6:
a6:cb:19:8d:61:da:f5:f3:cc:9a:14:41:30:30:e5:
a9:50:4b:f8:2c:2c:fc:74:ec:2a:bd:a5:14:0d:a6:
b4:9a:ca:1f:66:50:b8:5b:dd:d4:f3:c3:d9:b2:8c:
d4:82:1a:1b:ab:61:b8:89:88:21:c7:a6:4b:c3:57:
67:49:33:1e:3d:f5:4a:9f:71:48:66:22:48:c2:f1:
27:89:c5:bc:29:fd:f1:70:ef:f7:a1:20:f3:b2:f1:
a0:2b:72:30:a7:98:33:1c:76:fd:40:27:ae:a2:21:
ab:f2:9f:78:e4:3d:c9:c0:3a:6b:01:46:f8:07:ba:
3b:f8:e5:4a:88:a6:f2:68:c8:05:83:73:b1:b6:4b:
dd:e3:9a:29:bf:c8:98:4b:80:04:59:3f:41:fd:b3:
a6:4c:23:7f:7e:0c:dc:ff:ae:5f:19:ca:36:f6:95:
14:9b:83:fd:59:31:08:00:9a:2f:57:1d:d1:f4:c0:
35:cf:f9:33:28:e7:8c:c9:a8:65:6f:a9:a2:69:7e:
1b:1f:bc:00:76:66:77:0d:09:7e:76:95:20:ad:19:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:7C:3F:99:D7:C6:8A:10:80:53:CF:12:0F:BE:98:16:79:81:4E
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:02:bd:3b:5f:8e:4e:aa:c4:78:e2:ea:af:33:27:14:c0:25:
9e:8d:c3:79:2e:d6:a1:f5:fa:46:85:22:60:90:3e:6b:10:02:
72:1a:f9:8d:80:5c:3b:b0:74:97:fe:5d:c0:1f:62:3c:5c:58:
2f:a8:05:43:96:37:6c:2a:1e:37:b9:01:c4:8d:90:6c:d0:e3:
13:8c:8e:0a:e7:65:6a:bd:0b:a4:16:70:0a:9f:59:bd:6a:3f:
ca:47:64:b1:e9:dd:05:0a:13:84:df:bd:1a:29:27:d4:bd:35:
d5:70:f7:77:20:d9:75:c8:1b:f4:49:b7:31:07:55:00:be:02:
d1:e7:47:ed:94:28:74:36:da:97:32:3c:4d:4a:c9:a7:c0:39:
af:82:17:cd:60:cb:68:bc:2c:db:7e:19:5c:79:c4:43:b0:a9:
72:c7:ae:fe:f5:7c:e9:0a:bf:c3:8d:f4:32:af:4f:18:b6:17:
1a:1f:ce:e1:cf:10:0d:b5:14:9b:0b:48:0b:b1:19:85:ac:b6:
d1:cd:90:bf:87:9b:03:d0:d6:c4:9a:17:56:00:4a:8b:42:7e:
28:e9:be:c5:d5:48:9c:a5:fa:4a:36:1f:cd:b6:81:c8:40:07:
2b:4a:cb:7c:6c:b6:c6:2b:ea:33:00:98:1e:01:c9:d7:d2:74:
1b:14:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:27:06 2025 by rpki-client